# CertifiedActionDONValidatorPolicy
Source: https://docs.chain.link/ace/reference/policy-library/certified-action-don-validator-policy
Last Updated: 2026-04-20


The CertifiedActionDONValidatorPolicy is the on-chain contract that validates permits generated by [off-chain policy execution](/ace/concepts/off-chain-policies). When a Chainlink DON workflow performs compliance checks off-chain and approves an action, it delivers a signed permit on-chain via the Keystone Forwarder. This policy stores the permit and verifies it when the protected function is called.

For a full explanation of how off-chain policies work, what you can connect to, and how the permit flow operates, see [Off-Chain Policy Execution](/ace/concepts/off-chain-policies).

> **NOTE: Managed by Chainlink in Beta**
>
> During Beta, the CertifiedActionDONValidatorPolicy configuration is managed by Chainlink. The Keystone Forwarder
> address, authorized issuers, and DON workflow are all set up by the Chainlink team on your behalf. Users do not need
> to configure this policy directly. **Contact your Chainlink representative** to get started with off-chain policies.

## Source

- [CertifiedActionDONValidatorPolicy.sol](https://github.com/smartcontractkit/chainlink-ace/blob/main/packages/policy-management/src/policies/CertifiedActionDONValidatorPolicy.sol)