NORNR mark NORNR Named policy defaults that make the first governed lane fast enough to become normal.

NORNR / Community policy packs

Installable defaults

Import a default control posture before you write custom rules.

Policy packs lower the first-lane cost. They make NORNR easier to start with and harder to replace because teams stop building from a blank policy surface.

The pack should already know what kind of failure your lane is exposed to.

These packs map directly to the real policy-pack IDs in the product and SDK.

research-safe

Research Agent Safe Spend

Balanced posture for model-driven research loops where the team wants signal before it wants maximum friction.

Protects against: runaway prompt loops, unplanned model bursts and first-seen research vendors.

gpu-compute-guarded

GPU + Compute Guarded

Tighter posture for compute lanes that can burst fast and leave weak receipts behind if the run spins out.

Protects against: burst spikes, orphaned jobs and batch receipt gaps.

vendor-procurement-guarded

Vendor Ops + Procurement Guarded

For lanes where the counterparty matters as much as the budget and destination drift is an institutional risk.

Protects against: destination drift, unreviewed upgrades and split purchases.

browser-ops-guarded

Browser Ops Guarded

Default browser posture when spend is tied to a chain of clicks and the last one should never clear unobserved.

Protects against: multi-step browser loops, outreach-tool drift and paid-step fan-out.

finance-review-watchtower

Finance Review Watchtower

Queues aggressively and biases toward evidence completeness when finance readability matters as much as the original approval.

Protects against: weak evidence trails, packet gaps and unowned review queues.

customer-support-spend-guarded

Customer Support Spend Guarded

Support-facing posture that keeps customer and ticket attribution tied to the spend lane without routing every action into manual review.

Protects against: customer context drift, unattributed support spend and repeat escalation loops.

mcp-local-tools-guarded

MCP Local Tools Guarded

Default posture for Claude Desktop, Cursor and local agents that need one named review lane before tool use expands.

Protects against: unbounded local tool spend, silent provider fan-out and missing local attribution.

finance-close-export

Finance Close + Export

Strict close posture for teams that export into QuickBooks, Xero or Fortnox and need evidence as calm as the original decision.

Protects against: receipt gaps, weak finance packets and unowned accounting exports.