development-security/tests/contract.json

[
  "Stop when the policy cannot be loaded",
  "presence only",
  "never inspect, hash or measure",
  "Reject unexpected redirects",
  "not authority to administer accounts",
  "separately verified delegation",
  "Never persist"
]