Spaces:
Running
Running
| { | |
| "schema_version": "1", | |
| "generated_at": "2026-09-30T22:23:55.611982+00:00", | |
| "source_revision": "98f91d119db5f61c18f5743aee1802802ce030d2", | |
| "upstream": { | |
| "version": "v0.1.2", | |
| "commit": "6648bd0c290efbc41ba131ee9831ee45cd431f94" | |
| }, | |
| "runtime": { | |
| "status": "not_run", | |
| "detail": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime." | |
| }, | |
| "verification": { | |
| "kind": "authenticated_grpc_and_synthetic_target", | |
| "detail": "Real TLS gRPC contract calls, real ControlSpec evaluation, SQLite state and loopback HTTP target. Scripted agent inputs and test operator identity. No LLM or real purchase." | |
| }, | |
| "scenes": [ | |
| { | |
| "id": "allowed", | |
| "title": "A useful action proceeds", | |
| "description": "A one-time $42 purchase fits the synthetic $75 control.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "The gate lets a permitted action proceed and checks the target receipt.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:47.119685Z", | |
| "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", | |
| "evidence_mac": "69245e845d4658aedb981cb2e06e830a78c78a852a848534b40582329fe23f4d", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "allowed", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:47.119685Z", | |
| "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", | |
| "evidence_mac": "69245e845d4658aedb981cb2e06e830a78c78a852a848534b40582329fe23f4d" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "target_receipt_verified", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:47.189635Z", | |
| "evidence_id": "sha256:aa59cc9ba17c19a97f11b3738df1aba6788214a1e2b7782d4ff54b6a12b582ab", | |
| "evidence_mac": "20dde639cbc7804c85bc10fc7d5a9d5ea855be5acb3fdc932370888917e4911d", | |
| "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 4200 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "target_receipt_verified" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 1." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "Signed target receipt reconciled." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "committed", | |
| "reason": "target_receipt_verified", | |
| "forwarded": true, | |
| "reconciled": true, | |
| "rpc_elapsed_ms": 56.41, | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "allowed", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:47.189635Z", | |
| "evidence_id": "sha256:aa59cc9ba17c19a97f11b3738df1aba6788214a1e2b7782d4ff54b6a12b582ab", | |
| "evidence_mac": "20dde639cbc7804c85bc10fc7d5a9d5ea855be5acb3fdc932370888917e4911d" | |
| }, | |
| "ledger_events": [ | |
| { | |
| "sequence": 1, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "allowed", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", | |
| "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-ef4c399289aacd62be67075a03170a0818fc684a4e7a2bccd126163b7eabe70e", | |
| "evaluated_at": "2026-09-30T22:23:47.131239Z", | |
| "expires_at": "2026-09-30T22:25:47.131239Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", | |
| "intent_id": "allowed", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:cb11baca5b9843c5a13563bd6d0728f69f47c0f576c0fd7b39bdf5623070ed96", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.131239Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 4200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "allowed", | |
| "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", | |
| "intent_id": "allowed", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.131239Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.within_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:a2709782bd04958ee7c5f4b8cda926c2f3a6c86b3093dc38667afcc4eea41c24" | |
| } | |
| }, | |
| "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", | |
| "event_hash": "sha256:8cccf5a291c9880542b98b7050d2149180e34d85d6106128c58e7e64bb148f20" | |
| }, | |
| { | |
| "sequence": 2, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "allowed", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", | |
| "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-ef4c399289aacd62be67075a03170a0818fc684a4e7a2bccd126163b7eabe70e", | |
| "evaluated_at": "2026-09-30T22:23:47.131239Z", | |
| "expires_at": "2026-09-30T22:25:47.131239Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", | |
| "intent_id": "allowed", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:cb11baca5b9843c5a13563bd6d0728f69f47c0f576c0fd7b39bdf5623070ed96", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.131239Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 4200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "allowed", | |
| "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", | |
| "intent_id": "allowed", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.131239Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "reservation": { | |
| "action_id": "allowed", | |
| "decision_digest": "sha256:cb11baca5b9843c5a13563bd6d0728f69f47c0f576c0fd7b39bdf5623070ed96", | |
| "expires_at": "2026-09-30T22:24:17.131239Z", | |
| "issued_at": "2026-09-30T22:23:47.131239Z", | |
| "method": "POST", | |
| "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", | |
| "path": "/purchases", | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "purpose": "synthetic-purchase-only", | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| } | |
| }, | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "reserved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.within_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:a2709782bd04958ee7c5f4b8cda926c2f3a6c86b3093dc38667afcc4eea41c24" | |
| } | |
| }, | |
| "previous_hash": "sha256:8cccf5a291c9880542b98b7050d2149180e34d85d6106128c58e7e64bb148f20", | |
| "event_hash": "sha256:a27228b28cb8f738095918cad9a04c457777c28a2776c5b962aa42ca7a1656f0" | |
| }, | |
| { | |
| "sequence": 3, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "allowed", | |
| "kind": "reconciliation", | |
| "payload": { | |
| "at": "2026-09-30T22:23:47.200445Z", | |
| "receipt": { | |
| "action_id": "allowed", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:47.189635Z", | |
| "evidence_id": "sha256:aa59cc9ba17c19a97f11b3738df1aba6788214a1e2b7782d4ff54b6a12b582ab", | |
| "evidence_mac": "20dde639cbc7804c85bc10fc7d5a9d5ea855be5acb3fdc932370888917e4911d", | |
| "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", | |
| "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| }, | |
| "verified": true | |
| }, | |
| "previous_hash": "sha256:a27228b28cb8f738095918cad9a04c457777c28a2776c5b962aa42ca7a1656f0", | |
| "event_hash": "sha256:5d6e436c32178f2c461e346675024f9c20718c6ea2df4eeb9a6147f6ccbab6da" | |
| } | |
| ], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "approval", | |
| "title": "Approve this exact $142 purchase", | |
| "description": "First denied. A simulated host operator approves the exact action, then the agent retries.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "Approval is a separate fact, bound to the request, actor, policy and decision.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 14200, | |
| "balance_minor": 985800, | |
| "purchases": [ | |
| { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:47.503822Z", | |
| "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", | |
| "evidence_mac": "e1dc9dd26d1b9efd92bdf52542a0d1e279d3bc1b760f85ca9a7207c2ba2fad5e", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "approval", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:47.503822Z", | |
| "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", | |
| "evidence_mac": "e1dc9dd26d1b9efd92bdf52542a0d1e279d3bc1b760f85ca9a7207c2ba2fad5e" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "target_receipt_verified", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 14200, | |
| "balance_minor": 985800, | |
| "purchases": [ | |
| { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:47.594376Z", | |
| "evidence_id": "sha256:d078f61d1f25ab0813b20a70892be1235d7f9f9cae33a06e62e044980b592383", | |
| "evidence_mac": "2489e7f72edb3a42ad264a76a8cf937eb692107e6d159720095ee1a8d2d1a481", | |
| "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 14200 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "Initial request denied: approval_required." | |
| }, | |
| { | |
| "kind": "approval", | |
| "message": "Simulated host operator approved the exact $142 request; no real human participated." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "target_receipt_verified" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 1." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "Signed target receipt reconciled." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "committed", | |
| "reason": "target_receipt_verified", | |
| "forwarded": true, | |
| "reconciled": true, | |
| "rpc_elapsed_ms": 25.437, | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "approval", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:47.594376Z", | |
| "evidence_id": "sha256:d078f61d1f25ab0813b20a70892be1235d7f9f9cae33a06e62e044980b592383", | |
| "evidence_mac": "2489e7f72edb3a42ad264a76a8cf937eb692107e6d159720095ee1a8d2d1a481" | |
| }, | |
| "ledger_events": [ | |
| { | |
| "sequence": 1, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "approval", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "evaluated_at": "2026-09-30T22:23:47.513333Z", | |
| "expires_at": "2026-09-30T22:25:47.513333Z", | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": true, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82", | |
| "verdict": "require_approval" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.513333Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "approval", | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.513333Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "require_approval", | |
| "snapshot_digest": "sha256:ae731d1745eb1783726a12f98a18cad504246ec15cf39b0480575a6418e878f8" | |
| } | |
| }, | |
| "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", | |
| "event_hash": "sha256:663ac22915058b2b149b207f86684dc71cbe37b0fb35701cfff28b5066789cfb" | |
| }, | |
| { | |
| "sequence": 2, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "approval", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:47.513333Z", | |
| "reason": "approval_required" | |
| }, | |
| "previous_hash": "sha256:663ac22915058b2b149b207f86684dc71cbe37b0fb35701cfff28b5066789cfb", | |
| "event_hash": "sha256:687db6b286c0af4950f76593c525539907e78882ce1f1db88f6f8dd68aa720db" | |
| }, | |
| { | |
| "sequence": 3, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "approval", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [ | |
| { | |
| "approval_id": "approval-91b25133d61e8def219f357e48595f00", | |
| "approved": true, | |
| "approver": { | |
| "actor_id": "demo-human", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema_name": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "human", | |
| "version": "1" | |
| }, | |
| "authority_ref": { | |
| "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "object_id": "demo-human", | |
| "object_type": "controlspec.synthetic.operator_authority", | |
| "version": "1" | |
| }, | |
| "basis_decision_ref": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "lineage_complete": true, | |
| "requirement_id": "exact-human-approval", | |
| "roles": [ | |
| "controlspec.synthetic.operator" | |
| ], | |
| "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", | |
| "separated_role_actor_ids": {}, | |
| "valid_from": "2026-09-30T22:23:47.530940Z", | |
| "valid_until": "2026-09-30T22:25:47.513333Z" | |
| } | |
| ], | |
| "basis": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "evaluated_at": "2026-09-30T22:23:47.513333Z", | |
| "expires_at": "2026-09-30T22:25:47.513333Z", | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": true, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82", | |
| "verdict": "require_approval" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.513333Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "approval", | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.513333Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "approved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "require_approval", | |
| "snapshot_digest": "sha256:ae731d1745eb1783726a12f98a18cad504246ec15cf39b0480575a6418e878f8" | |
| } | |
| }, | |
| "previous_hash": "sha256:687db6b286c0af4950f76593c525539907e78882ce1f1db88f6f8dd68aa720db", | |
| "event_hash": "sha256:130f2b2100b8098e6ec6ef226e7dedf1a20c7a50ac4b45e3d3f4868d4a4e006d" | |
| }, | |
| { | |
| "sequence": 4, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "approval", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [ | |
| { | |
| "approval_id": "approval-91b25133d61e8def219f357e48595f00", | |
| "approved": true, | |
| "approver": { | |
| "actor_id": "demo-human", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema_name": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "human", | |
| "version": "1" | |
| }, | |
| "authority_ref": { | |
| "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "object_id": "demo-human", | |
| "object_type": "controlspec.synthetic.operator_authority", | |
| "version": "1" | |
| }, | |
| "basis_decision_ref": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "lineage_complete": true, | |
| "requirement_id": "exact-human-approval", | |
| "roles": [ | |
| "controlspec.synthetic.operator" | |
| ], | |
| "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", | |
| "separated_role_actor_ids": {}, | |
| "valid_from": "2026-09-30T22:23:47.530940Z", | |
| "valid_until": "2026-09-30T22:25:47.513333Z" | |
| } | |
| ], | |
| "basis": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-93011e3e16c2f1ca60e7a3d8c5af00d3968094624032144eb6e9d7ca1f6a3f8f", | |
| "evaluated_at": "2026-09-30T22:23:47.530940Z", | |
| "expires_at": "2026-09-30T22:25:47.530940Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:dd19dd843c069286abb5424fd652e4eb7559f6ab9924394bb8deda3133071b5b", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.513333Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "approval", | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.513333Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "approved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "facts_digest": "sha256:03c03e93f4e965c966ba7cebd76c46846bbfb695737a93b1f6aef3bc6d873eb3", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:b60d2ee9d2eebaffae7df3dc48c9f22149b55580805df7788c9583fea516d023" | |
| } | |
| }, | |
| "previous_hash": "sha256:130f2b2100b8098e6ec6ef226e7dedf1a20c7a50ac4b45e3d3f4868d4a4e006d", | |
| "event_hash": "sha256:33b9e8727a513c3e6934ebd831633e3584508581506c3f8d93ff1880daab3b2b" | |
| }, | |
| { | |
| "sequence": 5, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "approval", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [ | |
| { | |
| "approval_id": "approval-91b25133d61e8def219f357e48595f00", | |
| "approved": true, | |
| "approver": { | |
| "actor_id": "demo-human", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema_name": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "human", | |
| "version": "1" | |
| }, | |
| "authority_ref": { | |
| "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "object_id": "demo-human", | |
| "object_type": "controlspec.synthetic.operator_authority", | |
| "version": "1" | |
| }, | |
| "basis_decision_ref": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "lineage_complete": true, | |
| "requirement_id": "exact-human-approval", | |
| "roles": [ | |
| "controlspec.synthetic.operator" | |
| ], | |
| "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", | |
| "separated_role_actor_ids": {}, | |
| "valid_from": "2026-09-30T22:23:47.530940Z", | |
| "valid_until": "2026-09-30T22:25:47.513333Z" | |
| } | |
| ], | |
| "basis": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-e5eb2f7c12b23092f79be62e69048e9ad9f282e839a443a9863f39d0b809240b", | |
| "evaluated_at": "2026-09-30T22:23:47.568008Z", | |
| "expires_at": "2026-09-30T22:25:47.568008Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:675dc02797ea75c23eb52dbd78faabf877453d2db21643e2a1f8abd8a79c95af", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.513333Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "approval", | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.513333Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "approved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "facts_digest": "sha256:03c03e93f4e965c966ba7cebd76c46846bbfb695737a93b1f6aef3bc6d873eb3", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:708102d435850cf0cbb9b58d2ccfaeb835d3ca759537d306913354ac71cb2006" | |
| } | |
| }, | |
| "previous_hash": "sha256:33b9e8727a513c3e6934ebd831633e3584508581506c3f8d93ff1880daab3b2b", | |
| "event_hash": "sha256:173f6bcca24b4844048a706490676e4816963d8c1e7110cd99dc0ffae2cd1d33" | |
| }, | |
| { | |
| "sequence": 6, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "approval", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [ | |
| { | |
| "approval_id": "approval-91b25133d61e8def219f357e48595f00", | |
| "approved": true, | |
| "approver": { | |
| "actor_id": "demo-human", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema_name": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "human", | |
| "version": "1" | |
| }, | |
| "authority_ref": { | |
| "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "object_id": "demo-human", | |
| "object_type": "controlspec.synthetic.operator_authority", | |
| "version": "1" | |
| }, | |
| "basis_decision_ref": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "lineage_complete": true, | |
| "requirement_id": "exact-human-approval", | |
| "roles": [ | |
| "controlspec.synthetic.operator" | |
| ], | |
| "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", | |
| "separated_role_actor_ids": {}, | |
| "valid_from": "2026-09-30T22:23:47.530940Z", | |
| "valid_until": "2026-09-30T22:25:47.513333Z" | |
| } | |
| ], | |
| "basis": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-e5eb2f7c12b23092f79be62e69048e9ad9f282e839a443a9863f39d0b809240b", | |
| "evaluated_at": "2026-09-30T22:23:47.568008Z", | |
| "expires_at": "2026-09-30T22:25:47.568008Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": { | |
| "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" | |
| }, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:675dc02797ea75c23eb52dbd78faabf877453d2db21643e2a1f8abd8a79c95af", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.513333Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "approval", | |
| "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", | |
| "intent_id": "approval", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.513333Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "reservation": { | |
| "action_id": "approval", | |
| "decision_digest": "sha256:675dc02797ea75c23eb52dbd78faabf877453d2db21643e2a1f8abd8a79c95af", | |
| "expires_at": "2026-09-30T22:24:17.568008Z", | |
| "issued_at": "2026-09-30T22:23:47.568008Z", | |
| "method": "POST", | |
| "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", | |
| "path": "/purchases", | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "purpose": "synthetic-purchase-only", | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| } | |
| }, | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "reserved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "facts_digest": "sha256:03c03e93f4e965c966ba7cebd76c46846bbfb695737a93b1f6aef3bc6d873eb3", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:708102d435850cf0cbb9b58d2ccfaeb835d3ca759537d306913354ac71cb2006" | |
| } | |
| }, | |
| "previous_hash": "sha256:173f6bcca24b4844048a706490676e4816963d8c1e7110cd99dc0ffae2cd1d33", | |
| "event_hash": "sha256:4345172dab93c4705638ce7561ee370143654613dad28c8ba5845c4f946f9097" | |
| }, | |
| { | |
| "sequence": 7, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "approval", | |
| "kind": "reconciliation", | |
| "payload": { | |
| "at": "2026-09-30T22:23:47.605631Z", | |
| "receipt": { | |
| "action_id": "approval", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:47.594376Z", | |
| "evidence_id": "sha256:d078f61d1f25ab0813b20a70892be1235d7f9f9cae33a06e62e044980b592383", | |
| "evidence_mac": "2489e7f72edb3a42ad264a76a8cf937eb692107e6d159720095ee1a8d2d1a481", | |
| "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", | |
| "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| }, | |
| "verified": true | |
| }, | |
| "previous_hash": "sha256:4345172dab93c4705638ce7561ee370143654613dad28c8ba5845c4f946f9097", | |
| "event_hash": "sha256:82cc63c14754c00beae6d3f9b78826aec807a12b0d390be7534b4367282b35bf" | |
| } | |
| ], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "overspend", | |
| "title": "$142 without approval", | |
| "description": "The agent proposes a purchase above the synthetic threshold.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "overspend", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "A proposal can be valid JSON and still require someone else's authority.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 14200, | |
| "balance_minor": 985800, | |
| "purchases": [ | |
| { | |
| "action_id": "overspend", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:47.902284Z", | |
| "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", | |
| "evidence_mac": "1ee14e52e91be4588d42d5d8bac9a741d2087e19e68eba138018b3a3af1855da", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "overspend", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:47.902284Z", | |
| "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", | |
| "evidence_mac": "1ee14e52e91be4588d42d5d8bac9a741d2087e19e68eba138018b3a3af1855da" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "denied", | |
| "reason": "approval_required", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 14200 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "approval_required" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 0." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "No verified completion for this attempt." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "denied", | |
| "reason": "approval_required", | |
| "forwarded": false, | |
| "reconciled": false, | |
| "rpc_elapsed_ms": 32.906, | |
| "ledger_events": [ | |
| { | |
| "sequence": 1, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "overspend", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:b5616bb396ed571b2e4f35adeb90e8066468bb223087161f008e6ec6c011ae98", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-80d08563488a4a4d047015a34723f4be2990af39737d48baf6aa19d511064fd0", | |
| "evaluated_at": "2026-09-30T22:23:47.918160Z", | |
| "expires_at": "2026-09-30T22:25:47.918160Z", | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:b5616bb396ed571b2e4f35adeb90e8066468bb223087161f008e6ec6c011ae98", | |
| "intent_id": "overspend", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": true, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:699e0f8d62536c41092e7d079e76997d78a695a73a46f9a048bb3fe341210624", | |
| "verdict": "require_approval" | |
| }, | |
| "first_seen": "2026-09-30T22:23:47.918160Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "overspend", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "overspend", | |
| "intent_digest": "sha256:b5616bb396ed571b2e4f35adeb90e8066468bb223087161f008e6ec6c011ae98", | |
| "intent_id": "overspend", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:47.918160Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "overspend", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "require_approval", | |
| "snapshot_digest": "sha256:560abb036a8f32912f4954dd74f157e323f34ba2a42a14c8256f68b535985655" | |
| } | |
| }, | |
| "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", | |
| "event_hash": "sha256:ed7930ca0ef489afbccc36eb82242649739964df22f78b765efb69832731df82" | |
| }, | |
| { | |
| "sequence": 2, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "overspend", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:47.918160Z", | |
| "reason": "approval_required" | |
| }, | |
| "previous_hash": "sha256:ed7930ca0ef489afbccc36eb82242649739964df22f78b765efb69832731df82", | |
| "event_hash": "sha256:a4f91906cdae21a766973247b67f42ed3ac71e96d5f44789fc170801411b43f1" | |
| } | |
| ], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "changed", | |
| "title": "Approved $142. Attempted $143.", | |
| "description": "A simulated operator approves $142; the subsequent request changes the amount.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "changed", | |
| "amount_minor": 14300, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "Changing the action invalidates the original approval.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 14300, | |
| "balance_minor": 985700, | |
| "purchases": [ | |
| { | |
| "action_id": "changed", | |
| "amount_minor": 14300, | |
| "committed_at": "2026-09-30T22:23:48.312015Z", | |
| "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", | |
| "evidence_mac": "d3509f25bdd598380b5c61cbfd27bf2509030b720659da353dce63602961f47d", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "changed", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 14300, | |
| "committed_at": "2026-09-30T22:23:48.312015Z", | |
| "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", | |
| "evidence_mac": "d3509f25bdd598380b5c61cbfd27bf2509030b720659da353dce63602961f47d" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "denied", | |
| "reason": "action_changed", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 14300 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "Initial request denied: approval_required." | |
| }, | |
| { | |
| "kind": "approval", | |
| "message": "Simulated host operator approved the exact $142 request; no real human participated." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "action_changed" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 0." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "No verified completion for this attempt." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "denied", | |
| "reason": "action_changed", | |
| "forwarded": false, | |
| "reconciled": false, | |
| "rpc_elapsed_ms": 12.528, | |
| "ledger_events": [ | |
| { | |
| "sequence": 1, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "changed", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", | |
| "evaluated_at": "2026-09-30T22:23:48.321834Z", | |
| "expires_at": "2026-09-30T22:25:48.321834Z", | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": true, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca", | |
| "verdict": "require_approval" | |
| }, | |
| "first_seen": "2026-09-30T22:23:48.321834Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "changed", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "changed", | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:48.321834Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "changed", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "require_approval", | |
| "snapshot_digest": "sha256:9810de5866abe6f16f643f0df56e9e0d5f55c6dcffe433c447130de9d71a77b1" | |
| } | |
| }, | |
| "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", | |
| "event_hash": "sha256:3f580ef11f40757e3b41820b1db33aa5b63674e68d6c1013e6ef3c348513f87b" | |
| }, | |
| { | |
| "sequence": 2, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "changed", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:48.321834Z", | |
| "reason": "approval_required" | |
| }, | |
| "previous_hash": "sha256:3f580ef11f40757e3b41820b1db33aa5b63674e68d6c1013e6ef3c348513f87b", | |
| "event_hash": "sha256:fb99482101634e5b105c2f0e5c48956c3aa6c0b373e655c424862407aaf338be" | |
| }, | |
| { | |
| "sequence": 3, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "changed", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [ | |
| { | |
| "approval_id": "approval-74ce4143146cc225a2e13cc4eb15f49f", | |
| "approved": true, | |
| "approver": { | |
| "actor_id": "demo-human", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema_name": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "human", | |
| "version": "1" | |
| }, | |
| "authority_ref": { | |
| "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "object_id": "demo-human", | |
| "object_type": "controlspec.synthetic.operator_authority", | |
| "version": "1" | |
| }, | |
| "basis_decision_ref": { | |
| "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" | |
| }, | |
| "fact_digest": "sha256:f867df631a0c1f774fcbf4819c38ebca101893a6612000e3a41b3ca68ca22276", | |
| "intent_ref": { | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "lineage_complete": true, | |
| "requirement_id": "exact-human-approval", | |
| "roles": [ | |
| "controlspec.synthetic.operator" | |
| ], | |
| "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", | |
| "separated_role_actor_ids": {}, | |
| "valid_from": "2026-09-30T22:23:48.341478Z", | |
| "valid_until": "2026-09-30T22:25:48.321834Z" | |
| } | |
| ], | |
| "basis": { | |
| "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" | |
| }, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", | |
| "evaluated_at": "2026-09-30T22:23:48.321834Z", | |
| "expires_at": "2026-09-30T22:25:48.321834Z", | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": true, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca", | |
| "verdict": "require_approval" | |
| }, | |
| "first_seen": "2026-09-30T22:23:48.321834Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "changed", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "changed", | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:48.321834Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "changed", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "approved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "require_approval", | |
| "snapshot_digest": "sha256:9810de5866abe6f16f643f0df56e9e0d5f55c6dcffe433c447130de9d71a77b1" | |
| } | |
| }, | |
| "previous_hash": "sha256:fb99482101634e5b105c2f0e5c48956c3aa6c0b373e655c424862407aaf338be", | |
| "event_hash": "sha256:69ff3ca1a4ae5c15893ae3dea77be117a9bd21f22fa93a19b66b5c7eba6b64d6" | |
| }, | |
| { | |
| "sequence": 4, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "changed", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [ | |
| { | |
| "approval_id": "approval-74ce4143146cc225a2e13cc4eb15f49f", | |
| "approved": true, | |
| "approver": { | |
| "actor_id": "demo-human", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema_name": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "human", | |
| "version": "1" | |
| }, | |
| "authority_ref": { | |
| "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "object_id": "demo-human", | |
| "object_type": "controlspec.synthetic.operator_authority", | |
| "version": "1" | |
| }, | |
| "basis_decision_ref": { | |
| "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" | |
| }, | |
| "fact_digest": "sha256:f867df631a0c1f774fcbf4819c38ebca101893a6612000e3a41b3ca68ca22276", | |
| "intent_ref": { | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "lineage_complete": true, | |
| "requirement_id": "exact-human-approval", | |
| "roles": [ | |
| "controlspec.synthetic.operator" | |
| ], | |
| "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", | |
| "separated_role_actor_ids": {}, | |
| "valid_from": "2026-09-30T22:23:48.341478Z", | |
| "valid_until": "2026-09-30T22:25:48.321834Z" | |
| } | |
| ], | |
| "basis": { | |
| "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" | |
| }, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-252718f38b213bfa97eb3169b00e07cbfeba7811c05847a78b35e0259573e021", | |
| "evaluated_at": "2026-09-30T22:23:48.341478Z", | |
| "expires_at": "2026-09-30T22:25:48.341478Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": { | |
| "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" | |
| }, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:7b5238c0c1b14512c51dda2bf616f7529753fd45b9e12ad13d04f24d0c00f0d3", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:48.321834Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "changed", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "changed", | |
| "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", | |
| "intent_id": "changed", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:48.321834Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "changed", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "approved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.above_limit" | |
| ], | |
| "facts_digest": "sha256:6d379dc3de827ffed32a87b7b7fa64b0a264afe678a18d04642412ed32397c7a", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:b08293c6f5cfe93d942e213ebb778043e4e1ad7cb30e67ef5d6b6b8186279531" | |
| } | |
| }, | |
| "previous_hash": "sha256:69ff3ca1a4ae5c15893ae3dea77be117a9bd21f22fa93a19b66b5c7eba6b64d6", | |
| "event_hash": "sha256:f0baa072b550026b84e37f28ee60de55fce888e7bea59be7ed14e15c93b37fae" | |
| }, | |
| { | |
| "sequence": 5, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "changed", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:48.365597Z", | |
| "reason": "action_changed" | |
| }, | |
| "previous_hash": "sha256:f0baa072b550026b84e37f28ee60de55fce888e7bea59be7ed14e15c93b37fae", | |
| "event_hash": "sha256:7bff004cf9dab275e0113b3c865778d06cfcb279c100fa27c58705668508bab5" | |
| } | |
| ], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "self-approval", | |
| "title": "The agent tries to approve", | |
| "description": "An invalid operator credential is offered for the pending action.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "self-approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "The caller cannot turn a request into a host-operator approval.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 14200, | |
| "balance_minor": 985800, | |
| "purchases": [ | |
| { | |
| "action_id": "self-approval", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:48.715562Z", | |
| "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", | |
| "evidence_mac": "6b4fbe2bdca116757d2226da518654b340a437ee6a826106aad345a002784bc6", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "self-approval", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 14200, | |
| "committed_at": "2026-09-30T22:23:48.715562Z", | |
| "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", | |
| "evidence_mac": "6b4fbe2bdca116757d2226da518654b340a437ee6a826106aad345a002784bc6" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "denied", | |
| "reason": "approval_required", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 14200 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "Initial request denied: approval_required." | |
| }, | |
| { | |
| "kind": "approval", | |
| "message": "operator_authentication_failed" | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "approval_required" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 0." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "No verified completion for this attempt." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "denied", | |
| "reason": "approval_required", | |
| "forwarded": false, | |
| "reconciled": false, | |
| "rpc_elapsed_ms": 29.808, | |
| "ledger_events": [ | |
| { | |
| "sequence": 1, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "self-approval", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-3f712d353e50f56447d833bdfaf6fbb53046b70557fcaf0ffe5921c2fee3947a", | |
| "evaluated_at": "2026-09-30T22:23:48.726198Z", | |
| "expires_at": "2026-09-30T22:25:48.726198Z", | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", | |
| "intent_id": "self-approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": true, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:cef15eb5c6d466d447f942b288ed43e47e8d14609de746ec56b016bb85a62fd0", | |
| "verdict": "require_approval" | |
| }, | |
| "first_seen": "2026-09-30T22:23:48.726198Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "self-approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "self-approval", | |
| "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", | |
| "intent_id": "self-approval", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:48.726198Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "self-approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "require_approval", | |
| "snapshot_digest": "sha256:64f8832393cefb1aed51b55aa2c2f269f148fc6e24a430c7c280c1072e13d9ec" | |
| } | |
| }, | |
| "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", | |
| "event_hash": "sha256:efaadefcae797d7df79d1f71e70dd1706993197413c89c6980eec7fc485e9b9e" | |
| }, | |
| { | |
| "sequence": 2, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "self-approval", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:48.726198Z", | |
| "reason": "approval_required" | |
| }, | |
| "previous_hash": "sha256:efaadefcae797d7df79d1f71e70dd1706993197413c89c6980eec7fc485e9b9e", | |
| "event_hash": "sha256:c2a63765f91492153f65379b801d4699434c98fa23fc72aed12a9eefe8ec96b3" | |
| }, | |
| { | |
| "sequence": 3, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "self-approval", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:48.752385Z", | |
| "reason": "operator_authentication_failed" | |
| }, | |
| "previous_hash": "sha256:c2a63765f91492153f65379b801d4699434c98fa23fc72aed12a9eefe8ec96b3", | |
| "event_hash": "sha256:c78c19ccc375be16cf3a1bf032aab8876d36cb64dec25686bf628420b50d94e2" | |
| }, | |
| { | |
| "sequence": 4, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "self-approval", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [ | |
| { | |
| "failure": { | |
| "code": "controlspec.synthetic.approval_required", | |
| "route": null, | |
| "verdict": "require_approval" | |
| }, | |
| "minimum_count": 1, | |
| "requirement_id": "exact-human-approval", | |
| "requirement_type": "approval", | |
| "role": "controlspec.synthetic.operator", | |
| "scope": { | |
| "controlspec.synthetic.target": "POST /purchases" | |
| }, | |
| "separate_from_actor": true, | |
| "separate_from_roles": [], | |
| "validity_seconds": 120 | |
| } | |
| ], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", | |
| "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-d74db453beaaf27adacfae5ab9a173dc48292ad78276539654091dbd275e2396", | |
| "evaluated_at": "2026-09-30T22:23:48.767194Z", | |
| "expires_at": "2026-09-30T22:25:48.767194Z", | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", | |
| "intent_id": "self-approval", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": true, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:645cbaf9b69844bdc1c0cb38a2d521a3031682f6afa4378fb7cc0dd4dfe31c0e", | |
| "verdict": "require_approval" | |
| }, | |
| "first_seen": "2026-09-30T22:23:48.726198Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "self-approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 14200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "self-approval", | |
| "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", | |
| "intent_id": "self-approval", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:48.726198Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "self-approval", | |
| "amount_minor": 14200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "above_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.above_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.approval.required", | |
| "controlspec.synthetic.above_limit", | |
| "controlspec.synthetic.approval_required" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "require_approval", | |
| "snapshot_digest": "sha256:817759d3b959872cf681680e9bed995ee1febc53f9d68024878fb485ad373e2c" | |
| } | |
| }, | |
| "previous_hash": "sha256:c78c19ccc375be16cf3a1bf032aab8876d36cb64dec25686bf628420b50d94e2", | |
| "event_hash": "sha256:c96e3d5e566d7aecad2cf115e63507192daa4da968caaa209e3c1004816676c0" | |
| }, | |
| { | |
| "sequence": 5, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "self-approval", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:48.767194Z", | |
| "reason": "approval_required" | |
| }, | |
| "previous_hash": "sha256:c96e3d5e566d7aecad2cf115e63507192daa4da968caaa209e3c1004816676c0", | |
| "event_hash": "sha256:8d8cd242ad53eb8fd8121a098017252a1aaa2ee8b87409ab9d34e345ed95fd75" | |
| } | |
| ], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "replay", | |
| "title": "Try the same purchase again", | |
| "description": "The request is delivered twice with the same action ID.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "The target is idempotent in both lanes; ControlSpec additionally denies a fresh reservation.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.104703Z", | |
| "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", | |
| "evidence_mac": "668f607cf9f5243bfe7402c7d8260b08d62305dca37745d3ac177e06595697de", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "replay", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.104703Z", | |
| "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", | |
| "evidence_mac": "668f607cf9f5243bfe7402c7d8260b08d62305dca37745d3ac177e06595697de" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "denied", | |
| "reason": "action_already_reserved", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.165293Z", | |
| "evidence_id": "sha256:004b557548e1f62ce342a9cfa142d1ed15bde2c678c01eb61d4748dd48e922bd", | |
| "evidence_mac": "f35966bfc1980c9ab94ba0e12321d247b1f83980be61e4f63ff849167a268f03", | |
| "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 4200 USD cents." | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "First delivery committed once; now retrying." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "action_already_reserved" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 1." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "No verified completion for this attempt." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "denied", | |
| "reason": "action_already_reserved", | |
| "forwarded": false, | |
| "reconciled": false, | |
| "rpc_elapsed_ms": 19.971, | |
| "ledger_events": [ | |
| { | |
| "sequence": 1, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "replay", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", | |
| "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-8ba65e45bdfb493b4a5e72fec5975a4b66b8e304f5b4147b94feaabeabb8cb1e", | |
| "evaluated_at": "2026-09-30T22:23:49.115497Z", | |
| "expires_at": "2026-09-30T22:25:49.115497Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "intent_id": "replay", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:49.115497Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 4200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "replay", | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "intent_id": "replay", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:49.115497Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.within_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:32c052cd7b9c0f58ab1592fe3e43435e93fc358c2936d208600c49f0572a7b6a" | |
| } | |
| }, | |
| "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", | |
| "event_hash": "sha256:98e0b5b646d3d0d09ab04a0731889be9d0aff50ef146a4bfde0885d09bf09f16" | |
| }, | |
| { | |
| "sequence": 2, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "replay", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", | |
| "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-8ba65e45bdfb493b4a5e72fec5975a4b66b8e304f5b4147b94feaabeabb8cb1e", | |
| "evaluated_at": "2026-09-30T22:23:49.115497Z", | |
| "expires_at": "2026-09-30T22:25:49.115497Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "intent_id": "replay", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:49.115497Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 4200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "replay", | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "intent_id": "replay", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:49.115497Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "reservation": { | |
| "action_id": "replay", | |
| "decision_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", | |
| "expires_at": "2026-09-30T22:24:19.115497Z", | |
| "issued_at": "2026-09-30T22:23:49.115497Z", | |
| "method": "POST", | |
| "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", | |
| "path": "/purchases", | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "purpose": "synthetic-purchase-only", | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| } | |
| }, | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "reserved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.within_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:32c052cd7b9c0f58ab1592fe3e43435e93fc358c2936d208600c49f0572a7b6a" | |
| } | |
| }, | |
| "previous_hash": "sha256:98e0b5b646d3d0d09ab04a0731889be9d0aff50ef146a4bfde0885d09bf09f16", | |
| "event_hash": "sha256:276102a2775b58aa4fed2c835cc63b7862bbd88b7182e7a10e38f5b2720f2256" | |
| }, | |
| { | |
| "sequence": 3, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "replay", | |
| "kind": "reconciliation", | |
| "payload": { | |
| "at": "2026-09-30T22:23:49.178162Z", | |
| "receipt": { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.165293Z", | |
| "evidence_id": "sha256:004b557548e1f62ce342a9cfa142d1ed15bde2c678c01eb61d4748dd48e922bd", | |
| "evidence_mac": "f35966bfc1980c9ab94ba0e12321d247b1f83980be61e4f63ff849167a268f03", | |
| "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| }, | |
| "verified": true | |
| }, | |
| "previous_hash": "sha256:276102a2775b58aa4fed2c835cc63b7862bbd88b7182e7a10e38f5b2720f2256", | |
| "event_hash": "sha256:55f90f1c217433bb92853f291c3becd2cc75af27126fc3286fa6d968d355c279" | |
| }, | |
| { | |
| "sequence": 4, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "replay", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", | |
| "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-804922f50921579015d8e182174d39501abf1872c8ea4314cf7dbc29031e9328", | |
| "evaluated_at": "2026-09-30T22:23:49.192944Z", | |
| "expires_at": "2026-09-30T22:25:49.192944Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "intent_id": "replay", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:af871cb8a0853abe24d33d7e5c404bb6f754e410a97c31aa02a99edc2af204d4", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:49.115497Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 4200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "replay", | |
| "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", | |
| "intent_id": "replay", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:49.115497Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "replay", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "reservation": { | |
| "action_id": "replay", | |
| "decision_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", | |
| "expires_at": "2026-09-30T22:24:19.115497Z", | |
| "issued_at": "2026-09-30T22:23:49.115497Z", | |
| "method": "POST", | |
| "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", | |
| "path": "/purchases", | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "purpose": "synthetic-purchase-only", | |
| "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| } | |
| }, | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "reserved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.within_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:29d6112fa40803053a7489c3471da76e701f05faa3bc1d2fa50a0418ed96d55a" | |
| } | |
| }, | |
| "previous_hash": "sha256:55f90f1c217433bb92853f291c3becd2cc75af27126fc3286fa6d968d355c279", | |
| "event_hash": "sha256:66bfb05a147820b874b13a9fac51f16c8739b4cc77b1ecadc053b98290546fdf" | |
| }, | |
| { | |
| "sequence": 5, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "replay", | |
| "kind": "denied", | |
| "payload": { | |
| "at": "2026-09-30T22:23:49.192944Z", | |
| "reason": "action_already_reserved" | |
| }, | |
| "previous_hash": "sha256:66bfb05a147820b874b13a9fac51f16c8739b4cc77b1ecadc053b98290546fdf", | |
| "event_hash": "sha256:1ada02d48ebd02c081ca29c20285198a96b8e48ed8746765c53f5ea090219d16" | |
| } | |
| ], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "missing-proof", | |
| "title": "The effect happened. Proof is missing.", | |
| "description": "The target commits, but the fixture withholds its receipt from reconciliation.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "missing-proof", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "Known target state and verified completion are separate observations.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "missing-proof", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.483421Z", | |
| "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", | |
| "evidence_mac": "4d67c29dd9e77f3b91385c672fc02827168ef9bd7eadfd94727115914feabf79", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "missing-proof", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.483421Z", | |
| "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", | |
| "evidence_mac": "4d67c29dd9e77f3b91385c672fc02827168ef9bd7eadfd94727115914feabf79" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "effect_observed_evidence_missing", | |
| "reason": "completion_unverified", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "missing-proof", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.516923Z", | |
| "evidence_id": "sha256:3af4811fc62ba312666544295a7a40cede7e903cf69cdfe5fc2ce1464103eabe", | |
| "evidence_mac": "dd540d544008236f94b44f7149d76ae5484eec06a66bfb5ebfb588dd90fecd16", | |
| "nonce": "0519b92ee0313b40d34bf6745525740ecb8c9ac7821636f411571d6f7d8c95d9", | |
| "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 4200 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "completion_unverified" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 1." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "No verified completion for this attempt." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "effect_observed_evidence_missing", | |
| "reason": "completion_unverified", | |
| "forwarded": true, | |
| "reconciled": false, | |
| "rpc_elapsed_ms": 24.117, | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "missing-proof", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "nonce": "0519b92ee0313b40d34bf6745525740ecb8c9ac7821636f411571d6f7d8c95d9", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.516923Z", | |
| "evidence_id": "sha256:3af4811fc62ba312666544295a7a40cede7e903cf69cdfe5fc2ce1464103eabe", | |
| "evidence_mac": "dd540d544008236f94b44f7149d76ae5484eec06a66bfb5ebfb588dd90fecd16" | |
| }, | |
| "ledger_events": [ | |
| { | |
| "sequence": 1, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "missing-proof", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", | |
| "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-b294d21d8076003274791fe0e039d46d2a551419f7f167cf177ab4ce13adcab0", | |
| "evaluated_at": "2026-09-30T22:23:49.491639Z", | |
| "expires_at": "2026-09-30T22:25:49.491639Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", | |
| "intent_id": "missing-proof", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:1966931cb80b03ede09a36a67411bd73ed223534c364ea21dd66e8d247bb9000", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:49.491639Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "missing-proof", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 4200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "missing-proof", | |
| "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", | |
| "intent_id": "missing-proof", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:49.491639Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "missing-proof", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "pending", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.within_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:cb888f317207371509ed7bffe368d24bc09475bae86138eff4aed1ea703f331a" | |
| } | |
| }, | |
| "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", | |
| "event_hash": "sha256:9f1cf5c051a688533dadbbd7371583edb9c7a294b7637ac25aa06a53bfd56a6b" | |
| }, | |
| { | |
| "sequence": 2, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "missing-proof", | |
| "kind": "state", | |
| "payload": { | |
| "approvals": [], | |
| "basis": null, | |
| "decision": { | |
| "applied_controls": [ | |
| { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| } | |
| ], | |
| "approval_requirements": [], | |
| "binding": { | |
| "action_type": "commit", | |
| "actor_ref": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "version": "1" | |
| }, | |
| "canonicalizer": { | |
| "name": "RFC8785-INTEGER-AUTHORITY", | |
| "version": "1" | |
| }, | |
| "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", | |
| "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "evaluator": { | |
| "name": "controlspec.core", | |
| "version": "0.1.0" | |
| }, | |
| "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", | |
| "resource_ref": { | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| } | |
| }, | |
| "conditions": [], | |
| "decision_id": "decision-b294d21d8076003274791fe0e039d46d2a551419f7f167cf177ab4ce13adcab0", | |
| "evaluated_at": "2026-09-30T22:23:49.491639Z", | |
| "expires_at": "2026-09-30T22:25:49.491639Z", | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "extensions": { | |
| "controlspec.conformance.non_authoritative": true | |
| }, | |
| "intent_ref": { | |
| "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", | |
| "intent_id": "missing-proof", | |
| "namespace": "controlspec.synthetic.purchase" | |
| }, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "predecessor_decision_ref": null, | |
| "required_evidence": [], | |
| "requires_recheck": false, | |
| "route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "schema": "controlspec/v0/decision", | |
| "schema_version": "0.1.0", | |
| "semantic_digest": "sha256:1966931cb80b03ede09a36a67411bd73ed223534c364ea21dd66e8d247bb9000", | |
| "verdict": "allow" | |
| }, | |
| "first_seen": "2026-09-30T22:23:49.491639Z", | |
| "intent": { | |
| "action": { | |
| "domain_action": "controlspec.synthetic.purchase", | |
| "requested_effect": { | |
| "action_id": "missing-proof", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "type": "commit" | |
| }, | |
| "actor": { | |
| "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "attributes": {}, | |
| "extensions": {}, | |
| "lineage_refs": [], | |
| "namespace": "controlspec.synthetic.purchase", | |
| "owner_ref": null, | |
| "schema": "controlspec/v0/actor", | |
| "schema_version": "0.1.0", | |
| "type": "agent", | |
| "version": "1" | |
| }, | |
| "context": { | |
| "controlspec.synthetic.amount_minor": 4200, | |
| "controlspec.synthetic.method": "POST", | |
| "controlspec.synthetic.path": "/purchases", | |
| "controlspec.synthetic.recurring": false, | |
| "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" | |
| }, | |
| "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", | |
| "cost": null, | |
| "evidence_refs": [], | |
| "extensions": {}, | |
| "idempotency_key": "missing-proof", | |
| "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", | |
| "intent_id": "missing-proof", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "requested_at": "2026-09-30T22:23:49.491639Z", | |
| "requested_route": null, | |
| "resource": { | |
| "attributes": {}, | |
| "business_id": null, | |
| "display_name": null, | |
| "extensions": {}, | |
| "namespace": "controlspec.synthetic.purchase", | |
| "resource_id": "demo-store", | |
| "schema": "controlspec/v0/resource", | |
| "schema_version": "0.1.0", | |
| "type": "controlspec.synthetic.cart", | |
| "version": "1" | |
| }, | |
| "retry_count": 0, | |
| "schema": "controlspec/v0/action-intent", | |
| "schema_version": "0.1.0" | |
| }, | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "request": { | |
| "action_id": "missing-proof", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false, | |
| "schema_version": "1" | |
| }, | |
| "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "reservation": { | |
| "action_id": "missing-proof", | |
| "decision_digest": "sha256:1966931cb80b03ede09a36a67411bd73ed223534c364ea21dd66e8d247bb9000", | |
| "expires_at": "2026-09-30T22:24:19.491639Z", | |
| "issued_at": "2026-09-30T22:23:49.491639Z", | |
| "method": "POST", | |
| "nonce": "0519b92ee0313b40d34bf6745525740ecb8c9ac7821636f411571d6f7d8c95d9", | |
| "path": "/purchases", | |
| "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", | |
| "purpose": "synthetic-purchase-only", | |
| "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| } | |
| }, | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "reserved", | |
| "trace": { | |
| "evaluated_controls": [ | |
| { | |
| "control_ref": { | |
| "control_id": "within_limit", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", | |
| "version": "1.0.0" | |
| }, | |
| "emitted_code": "controlspec.synthetic.within_limit", | |
| "predicate_results": [ | |
| "true", | |
| "true" | |
| ], | |
| "selection": "effect" | |
| } | |
| ], | |
| "explanation_codes": [ | |
| "controlspec.core.allow", | |
| "controlspec.synthetic.within_limit" | |
| ], | |
| "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", | |
| "final_route": { | |
| "extensions": {}, | |
| "kind": "continue", | |
| "namespace": "controlspec.synthetic.purchase", | |
| "parameters": {}, | |
| "requires_recheck": false, | |
| "route_id": "continue", | |
| "schema_name": "controlspec/v0/route", | |
| "schema_version": "0.1.0", | |
| "target_ref": null | |
| }, | |
| "final_verdict": "allow", | |
| "snapshot_digest": "sha256:cb888f317207371509ed7bffe368d24bc09475bae86138eff4aed1ea703f331a" | |
| } | |
| }, | |
| "previous_hash": "sha256:9f1cf5c051a688533dadbbd7371583edb9c7a294b7637ac25aa06a53bfd56a6b", | |
| "event_hash": "sha256:24fc09e4ef7d38a4aa3d145cc0e8151813edcb31b99ffb5790d3b2d19759a586" | |
| }, | |
| { | |
| "sequence": 3, | |
| "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", | |
| "action_id": "missing-proof", | |
| "kind": "reconciliation", | |
| "payload": { | |
| "at": "2026-09-30T22:23:49.526413Z", | |
| "receipt": null, | |
| "verified": false | |
| }, | |
| "previous_hash": "sha256:24fc09e4ef7d38a4aa3d145cc0e8151813edcb31b99ffb5790d3b2d19759a586", | |
| "event_hash": "sha256:51db6741c4306fabd14f3b730c0e06ace146948819d4154fbef7cd4025960695" | |
| } | |
| ], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "outage", | |
| "title": "The middleware goes offline", | |
| "description": "The fixture stops the gRPC service before attempting dispatch.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "outage", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "The test dispatcher does not forward on RPC failure; OpenShell fail-closed behavior remains unrun.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "outage", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.893577Z", | |
| "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", | |
| "evidence_mac": "1b6471383ccb2ff405f2cc438b7e0c4644cd2afad8e856e4d4d4aab36a3e224b", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "outage", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:49.893577Z", | |
| "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", | |
| "evidence_mac": "1b6471383ccb2ff405f2cc438b7e0c4644cd2afad8e856e4d4d4aab36a3e224b" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "not_forwarded", | |
| "reason": "grpc_deadline_exceeded", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 4200 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "grpc_deadline_exceeded" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 0." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "No verified completion for this attempt." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "not_forwarded", | |
| "reason": "grpc_deadline_exceeded", | |
| "forwarded": false, | |
| "reconciled": false, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "ledger_events": [], | |
| "ledger_chain_valid": true, | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "direct", | |
| "title": "Skip the middleware", | |
| "description": "A real smolagents Tool calls the controlled HTTP target without an execution ticket.", | |
| "request": { | |
| "schema_version": "1", | |
| "action_id": "direct", | |
| "amount_minor": 4200, | |
| "currency": "USD", | |
| "merchant": "demo-store", | |
| "recurring": false | |
| }, | |
| "takeaway": "The target itself rejects a ticketless call. This tests the target, not sandbox bypass resistance.", | |
| "lanes": [ | |
| { | |
| "id": "unguarded", | |
| "label": "Unguarded target", | |
| "status": "observed", | |
| "outcome": "committed", | |
| "reason": "direct_synthetic_commit", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 1, | |
| "spent_minor": 4200, | |
| "balance_minor": 995800, | |
| "purchases": [ | |
| { | |
| "action_id": "direct", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:52.195737Z", | |
| "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", | |
| "evidence_mac": "42afe8512644054eff81b9a4f2c38f03d7c4b9277b1990fd7e2e2f7c0dbac487", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", | |
| "schema_version": "1", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "status": "committed", | |
| "synthetic_only": true | |
| } | |
| ] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "effect", | |
| "message": "Direct host call to a separate synthetic target." | |
| } | |
| ], | |
| "evidence": { | |
| "target_receipt": { | |
| "schema_version": "1", | |
| "synthetic_only": true, | |
| "status": "committed", | |
| "action_id": "direct", | |
| "scope": { | |
| "gateway_id": "recording-fixture", | |
| "sandbox_id": "scripted-agent" | |
| }, | |
| "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", | |
| "nonce": "unguarded-synthetic-baseline", | |
| "amount_minor": 4200, | |
| "committed_at": "2026-09-30T22:23:52.195737Z", | |
| "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", | |
| "evidence_mac": "42afe8512644054eff81b9a4f2c38f03d7c4b9277b1990fd7e2e2f7c0dbac487" | |
| }, | |
| "transport": "direct Python call", | |
| "target_idempotency": true, | |
| "ticket_required": false | |
| } | |
| }, | |
| { | |
| "id": "native", | |
| "label": "OpenShell native", | |
| "status": "not_run", | |
| "outcome": "not_run", | |
| "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", | |
| "before": null, | |
| "after": null, | |
| "events": [], | |
| "evidence": { | |
| "policy": "integrations/openshell/policy-native.yaml", | |
| "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." | |
| } | |
| }, | |
| { | |
| "id": "combined", | |
| "label": "ControlSpec protocol fixture", | |
| "status": "observed", | |
| "outcome": "denied", | |
| "reason": "target_requires_ticket", | |
| "before": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "after": { | |
| "synthetic_only": true, | |
| "purchase_count": 0, | |
| "spent_minor": 0, | |
| "balance_minor": 1000000, | |
| "purchases": [] | |
| }, | |
| "events": [ | |
| { | |
| "kind": "intent", | |
| "message": "Scripted request: 4200 USD cents." | |
| }, | |
| { | |
| "kind": "decision", | |
| "message": "target_requires_ticket" | |
| }, | |
| { | |
| "kind": "effect", | |
| "message": "Target purchase count: 0." | |
| }, | |
| { | |
| "kind": "evidence", | |
| "message": "No verified completion for this attempt." | |
| } | |
| ], | |
| "evidence": { | |
| "outcome": "denied", | |
| "reason": "target_requires_ticket", | |
| "forwarded": true, | |
| "reconciled": false, | |
| "smolagents_tool_result": { | |
| "http_status": 403, | |
| "target_report": "{\"detail\":\"exactly one execution ticket required\"}", | |
| "assurance": "not_authorized_by_this_tool" | |
| }, | |
| "ledger_events": [], | |
| "ledger_chain_valid": true, | |
| "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", | |
| "supervisor": "explicit Python fixture, not NVIDIA OpenShell", | |
| "ticket_required": true | |
| } | |
| } | |
| ] | |
| } | |
| ], | |
| "limitations": [ | |
| "Actual OpenShell runtime, effective-policy admission, network isolation and bypass checks not run.", | |
| "The unguarded lane uses a direct Python target call; the controlled lane uses TLS gRPC + HTTP. They are illustrative arms, not latency benchmarks or a native OpenShell comparison.", | |
| "The controlled target requires a ticket; this extra defense is explicit and not attributed to OpenShell.", | |
| "The test operator is scripted. Host-only CLI is provided for manual approval; no production identity system.", | |
| "Reference decisions retain non-authoritative status. Synthetic permissions apply only to this fake target.", | |
| "Host administrators and the shared demo signing secret are trusted. Local hash chains are not tamper-proof.", | |
| "Replay protection is scoped to the same action ID. New IDs and cumulative budget limits require additional controls.", | |
| "Static replay cannot authorize anything. All amounts, identities and transactions are synthetic." | |
| ] | |
| } | |