{
  "thresholds": {
    "score_pass": 0.7,
    "score_challenge": 0.4
  },
  "weights": {
    "dwell_ratio": 0.30,
    "scroll_score": 0.25,
    "pointer_variance": 0.20,
    "click_rate": 0.25
  },
  "step_up": {
    "methods": ["webauthn", "pow"],
    "primary": "webauthn",
    "webauthn": {
      "enabled": true,
      "userVerification": "preferred",
      "timeout_ms": 60000,
      "challenge_endpoint": "/pca/v1/webauthn-challenge"
    },
    "pow": {
      "enabled": true,
      "difficulty": 4,
      "max_duration_ms": 5000
    }
  },
  "tick": {
    "endpoint": "/pca/v1/tick",
    "interval_ms": 5000
  },
  "paths": {
    "/api/*": {
      "min_score": 0.7,
      "step_up_method": "webauthn"
    },
    "/admin/*": {
      "min_score": 0.8,
      "step_up_method": "webauthn"
    },
    "/public/*": {
      "min_score": 0.0,
      "step_up_method": null
    },
    "default": {
      "min_score": 0.4,
      "step_up_method": "pow"
    }
  },
  "pca_roles": {
    "Person": {
      "description": "Verified human visitor",
      "access": "allow",
      "price": null
    },
    "Corporate": {
      "description": "Verified business entity",
      "access": "allow",
      "price": null
    },
    "Agent": {
      "description": "AI/Bot agent",
      "access": "charge",
      "price": {
        "amount": "0.001",
        "currency": "EUR",
        "per": "request"
      }
    }
  },
  "payment": {
    "enabled": true,
    "methods": ["EURC", "USDC", "Lightning"],
    "wallet_address": null,
    "min_balance": "0.01"
  },
  "compliance": {
    "gdpr": true,
    "anonymize_ip": true,
    "no_cookies": true,
    "no_pii": true
  }
}