{
  "@context": [
    "http://www.w3.org/ns/odrl.jsonld",
    {
      "empx": "https://empower-x.io/ns/rulebook#",
      "dct": "http://purl.org/dc/terms/"
    }
  ],
  "@type": "Offer",
  "uid": "https://empower-x.io/policies/compute-to-data",
  "dct:title": "Compute-to-data only: approved algorithms run where the data is held",
  "profile": "https://empower-x.io/ns/rulebook",
  "assigner": "{{provider-did}}",
  "target": "{{offer-did}}",
  "permission": [
    {
      "action": "empx:compute",
      "constraint": [
        {
          "leftOperand": "empx:algorithm",
          "operator": "isAnyOf",
          "rightOperand": [
            "{{approved-algorithm-did}}"
          ]
        },
        {
          "leftOperand": "empx:networkEgress",
          "operator": "eq",
          "rightOperand": false
        }
      ]
    }
  ],
  "prohibition": [
    {
      "action": "reproduce"
    },
    {
      "action": "distribute"
    }
  ],
  "_note": "Combine with the Open, Participants or Restricted constraint chosen by the data holder. Outbound access may be set to true only when the data holder has approved it and the offer says so (R5.3)."
}