target:    The destination address
value:     The ETH value being sent
data:      The calldata (function selector + arguments)
sender:    The account executing the transaction

PolicySet storage ps = policySets[msg.sender];

ALLOW_TARGETS  → Is the target in the whitelist?
DENY_TARGETS   → Is the target NOT in the blacklist?
ALLOW_SELECTORS → Is the function selector in the whitelist?
DENY_SELECTORS  → Is the function selector NOT in the blacklist?
MAX_VALUE       → Is the ETH value within the limit?

SPEND_LIMIT → Is cumulative token spend within the window limit?
              Update the cumulative spend tracker.
COOLDOWN    → Has enough time passed since the last transaction?
              Update the last transaction timestamp.

const result = await litClient.executeAction({
  litActionCID: "Qm...",
  params: {
    policyCID: "Qm...",
    target: "0x...",
    value: "1000000000000000000",
    data: "0x...",
    chainId: 84532,
  },
});

MAX_SLIPPAGE_BPS    → Decode swap params, check slippage
REQUIRE_SIMULATION  → Simulate tx via RPC, check success
CUSTOM              → Fetch and execute custom rule logic from IPFS

const approval = {
  account: senderAddress,
  target: txTarget,
  value: txValue,
  data: txData,
  policyCID: policyCID,
  nonce: currentNonce,
  deadline: blockTimestamp + 300, // 5 min expiry
};