Restrict which CAIP-2 chain IDs this key can sign for. Any chain not listed will be denied.
Time-bound access. Any signing request after this timestamp will be denied automatically.
Only allow transactions to these recipient addresses. All others will be denied. Runs as a custom executable policy.
Cap daily spending and per-transaction amounts. Tracked via PolicyContext spending metadata.