FINANCE-004 Autonomous refund authority

{
  "id": "FINANCE-004",
  "version": 1,
  "name": "Autonomous refund authority",
  "description": "Bounds how much a finance agent may refund without a human. Refunds are irreversible, so the ceiling is a hard stop rather than a warning.",
  "enabled": true,
  "match": {
    "tools": [
      "stripe.refund"
    ]
  },
  "rules": [
    {
      "id": "under-500",
      "description": "Routine customer-service refunds.",
      "when": {
        "lt": [
          "$.action.parameters.amount",
          500
        ]
      },
      "effect": "ALLOW",
      "reason": "within autonomous refund authority"
    },
    {
      "id": "needs-approval",
      "description": "Material refunds need a finance manager.",
      "when": {
        "lte": [
          "$.action.parameters.amount",
          2500
        ]
      },
      "effect": "REQUIRE_APPROVAL",
      "reason": "above autonomous refund authority, below the hard ceiling",
      "approval": {
        "approvers": [
          "role:finance-manager"
        ],
        "minApprovals": 1,
        "expiresInSeconds": 3600,
        "requireSeparationOfDuties": true
      }
    },
    {
      "id": "over-ceiling",
      "description": "No agent refunds this much, approved or otherwise.",
      "when": {
        "always": true
      },
      "effect": "DENY",
      "reason": "exceeds autonomous refund authority"
    }
  ],
  "fallback": {
    "effect": "DENY",
    "reason": "no refund rule matched"
  },
  "labels": {
    "domain": "finance",
    "control": "SOX-302"
  },
  "createdAt": "2026-10-26T09:18:23.716Z",
  "updatedAt": "2026-10-26T09:18:23.716Z"
}