On this page
Overview
Combines deterministic scam signals with optional Arcane blocked-domain evidence and safety guidance.
- Artifact
ScamRiskPolicy.js· esm - Classification
public first party - Availability
Cross-host - Normalization
Complete mutable results; blocked-domain policy requires secure:true.
Import and lifecycle
import * as module from '/arcane/modules/ScamRiskPolicy.js';
assessScamRisk() and guidance are pure against the selected policy. loadScamNetworkPolicy() fetches/normalizes the static Arcane network policy and updates module-global active policy only when generation/load ordering wins.
Application-facing behavior: Signals plus load, assess, and guidance helpers.
Protocol and host implementation
Arcane network policy fetch This detail does not widen the application-facing API or grant authority.
Exports, signatures, parameters, and results
| Binding | Form | Declaration or signature | Parameter syntax |
|---|---|---|---|
scamRiskSignals | variable · value | variable scamRiskSignals | — |
loadScamNetworkPolicy | function | async function loadScamNetworkPolicy(options) | options |
assessScamRisk | function | function assessScamRisk(text,{networkPolicy=activeNetworkPolicy,secure=false}={}) | text,{networkPolicy=activeNetworkPolicy,secure=false}={} |
scamSafetyGuidance | function | function scamSafetyGuidance(result) | result |
Parameter meanings and results
scamRiskSignals; loadScamNetworkPolicy(options) resolves a network policy. assessScamRisk(text,{networkPolicy=active,secure=false}) returns a complete mutable risk result; only an explicit secure:true selection applies blocked-domain policy. scamSafetyGuidance(result) returns an action string.
Events, side effects, and errors
Source-literal CustomEvent dispatches
No source-literal CustomEvent dispatch is part of this artifact.
Lifecycle and event flow
This artifact has no additional documented lifecycle event flow.
Direct coded failures
This artifact directly assigns no stable coded failure.
Exported Error subclasses
This artifact exports no Error subclass.
Documented failure behavior
- Policy fetch/validation errors propagate from ArcaneNetworkPolicy.
- Assessment itself has no coded errors.
Availability and capabilities
Cross-host. Complete mutable results; blocked-domain policy requires secure:true.
None; the default policy is a bundled read-only JSON fetch, not Core firewall authority.
Contract example
import {assessScamRisk,scamSafetyGuidance} from '/arcane/modules/ScamRiskPolicy.js';
const risk = assessScamRisk('Act now and pay with gift cards.');
console.log(risk.score, scamSafetyGuidance(risk));
Related reference
No direct Core call is claimed for this artifact. Any injected provider or consuming module retains its own documented authority.