controlspec / runtime.html
claytonsamples's picture
Upload 6 files
d140fc3 verified
Raw History Blame Contribute Delete
214 kB
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
<meta name="description" content="Inspect recorded OpenShell runtime requests through ControlSpec, synthetic target effects, and receipt reconciliation.">
<title>ControlSpec — Inside the runtime.</title>
<style>
:root{color-scheme:dark;--bg:#0d1310;--panel:#162019;--line:#354639;--text:#f0f3e9;--muted:#b0bdaf;--lime:#cdfa8b;--orange:#ffc09b;--blue:#aecfff}*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:15px/1.55 system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}a{color:inherit;text-underline-offset:4px}button{font:inherit;cursor:pointer}a,button,summary{touch-action:manipulation}a:focus-visible,button:focus-visible,summary:focus-visible{outline:3px solid var(--blue);outline-offset:4px}header,main,footer{max-width:1440px;padding-left:48px;padding-right:48px;margin:auto}header{min-height:84px;border-bottom:1px solid var(--line);display:flex;align-items:center;justify-content:space-between;gap:20px}.brand{font-size:22px;font-weight:700;letter-spacing:-.7px;text-decoration:none;display:flex;gap:11px;align-items:center}.brand:before{content:"";height:22px;width:19px;border:2px solid var(--lime);border-radius:4px 4px 10px 10px}.links{display:flex;gap:23px;flex-wrap:wrap;font-size:12px}.links a{text-decoration:none}.links a:hover{text-decoration:underline}.hero{padding:48px 0 30px;display:grid;grid-template-columns:1.2fr 1fr;align-items:end;gap:40px}.eyebrow{font:700 10px/1.5 ui-monospace,Consolas,monospace;letter-spacing:1.6px;text-transform:uppercase;color:var(--lime)}h1{font-size:clamp(44px,5.4vw,78px);line-height:1.03;font-weight:550;letter-spacing:-3.3px;margin:16px 0 0}h1 span{color:var(--lime)}.hero p{max-width:450px;color:var(--muted);font-size:16px;margin:0 0 3px}.hero strong{color:var(--text);font-weight:550}.notice{font-size:12px;padding:13px 17px;border:1px solid var(--line);border-radius:7px;display:flex;gap:12px;align-items:start;color:var(--muted)}.notice:before{content:"";width:7px;height:7px;border-radius:50%;background:var(--lime);margin-top:6px;flex-shrink:0}.notice strong{color:var(--text);font-weight:650}.overview{display:flex;flex-wrap:wrap;gap:25px 40px;padding:22px 0;margin-bottom:17px;border-bottom:1px solid var(--line)}.stat{font:11px ui-monospace,Consolas,monospace;color:var(--muted)}.stat b{font-size:18px;font-weight:500;color:var(--text);display:block;margin-top:7px}.stat:last-child{margin-left:auto}.status-positive{color:var(--lime)!important}.status-caution{color:var(--orange)!important}.lab{display:grid;grid-template-columns:270px minmax(0,1fr);gap:23px;margin-top:25px}.sidebar h2{font-size:12px;font-weight:550;margin:0 0 14px}.scenario-nav{display:flex;flex-direction:column;gap:7px}.scenario-nav button{background:transparent;color:var(--muted);border:1px solid var(--line);border-radius:6px;padding:11px 12px;text-align:left;display:flex;align-items:baseline;gap:10px;font-size:12px;line-height:1.4}.scenario-nav button span{font:10px ui-monospace,Consolas,monospace;opacity:.7}.scenario-nav button[aria-pressed=true]{background:var(--lime);color:#172014;border-color:var(--lime)}.sidebar-note{font-size:11px;color:var(--muted);padding-top:12px;max-width:240px}.stage{border:1px solid var(--line);border-radius:12px;background:var(--panel);overflow:hidden;align-self:start}.scene-head{padding:24px 25px 20px;display:flex;justify-content:space-between;gap:20px}.scene-head h2{font-size:27px;line-height:1.2;letter-spacing:-.7px;font-weight:550;margin:7px 0 10px}.scene-head p{margin:0;color:var(--muted);font-size:12px;max-width:640px}.scene-index{font:11px ui-monospace,Consolas,monospace;white-space:nowrap;color:var(--muted);padding-top:4px}.route{display:flex;align-items:center;gap:10px;flex-wrap:wrap;padding:13px 25px;background:#101812;border-top:1px solid var(--line);border-bottom:1px solid var(--line);font:10px/1.5 ui-monospace,Consolas,monospace;color:var(--muted)}.route .accent{color:var(--lime)}.route i{font-style:normal;color:#6e8272}.metrics{display:grid;grid-template-columns:repeat(3,minmax(0,1fr))}.metric{padding:24px 23px;min-width:0}.metric+.metric{border-left:1px solid var(--line)}.metric-label{font:10px ui-monospace,Consolas,monospace;color:var(--muted);letter-spacing:.6px;text-transform:uppercase}.metric-value{font-size:36px;font-weight:450;letter-spacing:-1.2px;line-height:1.3;margin:10px 0 9px;font-variant-numeric:tabular-nums;overflow-wrap:anywhere}.metric-value.words{font-size:23px;line-height:1.3;letter-spacing:-.4px}.metric p{color:var(--muted);font-size:11px;line-height:1.6;margin:0;overflow-wrap:anywhere}.meaning{border-top:1px solid var(--line);padding:19px 25px;display:flex;gap:13px;align-items:start}.meaning .arrow{color:var(--lime);font-size:21px;line-height:1.3}.meaning p{font-size:13px;margin:0;color:var(--text)}.meaning small{display:block;font-size:11px;color:var(--muted);margin-top:6px}.details{margin:0 25px 18px;border:1px solid var(--line);border-radius:6px;background:#111914}.details summary{font-size:12px;padding:13px 15px;cursor:pointer}.details-content{padding:0 15px 15px}.details pre{padding:15px;background:#09110c;border-radius:5px;max-height:360px;overflow:auto;font:11px/1.65 ui-monospace,Consolas,monospace;white-space:pre-wrap;overflow-wrap:anywhere;margin:0}.details p{font-size:11px;color:var(--muted);margin:0 0 10px}.observation-meta{padding:0 25px 22px;color:var(--muted);font:10px/1.6 ui-monospace,Consolas,monospace;overflow-wrap:anywhere}.audit{margin-top:35px;padding-top:27px;border-top:1px solid var(--line);display:grid;grid-template-columns:1fr 1fr;gap:40px}.audit h2{font-size:16px;font-weight:550;margin:0 0 15px}.facts{font-size:11px;display:grid;grid-template-columns:110px 1fr;gap:11px 13px;margin:0}.facts dt{color:var(--muted)}.facts dd{margin:0;overflow-wrap:anywhere}.mono{font-family:ui-monospace,Consolas,monospace}.limits{padding-left:17px;color:var(--muted);font-size:12px;margin:0}.limits li+li{margin-top:9px}.whole-trace{margin:28px 0 25px;border:1px solid var(--line);border-radius:7px}.whole-trace summary{padding:16px 18px;font-size:13px;cursor:pointer}.whole-trace .details-content{padding:0 18px 18px}.whole-trace pre{max-height:500px;overflow:auto;background:#09110c;border-radius:5px;padding:17px;font:11px/1.6 ui-monospace,Consolas,monospace;white-space:pre-wrap;overflow-wrap:anywhere}.download{display:inline-block;font-size:12px;margin-top:10px}.closing{display:flex;justify-content:space-between;gap:25px;padding:0 0 30px;align-items:center}.closing p{font-size:12px;color:var(--muted);max-width:750px;margin:0}.closing a{font-size:12px;color:var(--lime);white-space:nowrap}footer{border-top:1px solid var(--line);padding-top:20px;padding-bottom:26px;display:flex;justify-content:space-between;gap:20px;font-size:11px;color:var(--muted)}.error{border:1px solid #9c7058;border-radius:7px;padding:20px;margin:25px 0;color:var(--orange)}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}[hidden]{display:none!important}
@media(max-width:1050px){header,main,footer{padding-left:27px;padding-right:27px}.lab{grid-template-columns:220px minmax(0,1fr);gap:17px}.metric{padding:21px 16px}.metric-value{font-size:30px}.metric-value.words{font-size:21px}.hero{gap:25px}.scene-head h2{font-size:25px}.facts{grid-template-columns:95px 1fr}}
@media(max-width:760px){header,main,footer{padding-left:19px;padding-right:19px}header{flex-wrap:wrap;gap:13px;padding-top:18px;padding-bottom:18px}.links{font-size:11px;gap:17px}.hero{grid-template-columns:1fr;padding:30px 0 24px;gap:21px}h1{font-size:clamp(43px,11vw,68px);letter-spacing:-2px}.hero p{font-size:14px}.notice{font-size:11px;padding:12px}.overview{gap:19px 28px}.stat:last-child{margin-left:0;flex-basis:100%}.stat{font-size:10px}.stat b{font-size:16px}.lab{display:block;margin-top:20px}.scenario-nav{flex-direction:row;flex-wrap:wrap;gap:6px}.scenario-nav button{font-size:11px;padding:9px 10px;gap:7px}.sidebar-note{max-width:none;margin-bottom:20px}.scene-head{padding:21px 18px 17px;gap:10px}.scene-head h2{font-size:24px}.route{padding:12px 18px;font-size:9px;gap:7px}.metrics{grid-template-columns:1fr}.metric{padding:20px 18px}.metric+.metric{border-left:0;border-top:1px solid var(--line)}.metric-value{font-size:36px}.metric-value.words{font-size:25px}.meaning{padding:18px}.details{margin-left:18px;margin-right:18px}.observation-meta{padding-left:18px;padding-right:18px}.audit{grid-template-columns:1fr;gap:28px}.closing{flex-direction:column;align-items:start;gap:15px}footer{flex-direction:column;gap:9px}}
@media(prefers-reduced-motion:reduce){*{scroll-behavior:auto!important;animation:none!important;transition:none!important}}
</style>
</head>
<body>
<header><a class="brand" href="https://github.com/claytonsamples/controlspec">ControlSpec</a><nav class="links" aria-label="Project links"><a href="index.html">Protocol lab</a><a href="https://github.com/claytonsamples/controlspec/tree/main/integrations/openshell/runtime">Reproduce this run ↗</a><a href="runtime-observations.json" download>Raw observations ↓</a></nav></header>
<main>
<section class="hero"><div><div class="eyebrow">ControlSpec + NVIDIA OpenShell / Runtime evidence</div><h1>Inside the runtime.<br><span>Before the effect.</span></h1></div><p>Follow a request through an actual OpenShell sandbox. Inspect <strong>what returned, what changed at the synthetic target, and what the receipt proves.</strong></p></section>
<div class="notice"><div><strong>Recorded OpenShell runtime · synthetic transactions · scripted operator.</strong> This page displays a captured run. No live LLM, real purchase, or approval happens in your browser. The observations are a bounded experiment, not a benchmark or production certification.</div></div>
<div class="error" id="error" role="alert" hidden>Runtime observations could not be loaded. No result is asserted. Inspect the downloadable JSON and reproduction source.</div>
<div id="content">
<div class="overview"><div class="stat">Recorded observations<b id="observation-count"></b></div><div class="stat">Recorded assertions passed<b id="assertion-count"></b></div><div class="stat">Run status<b id="run-status"></b></div><div class="stat">Observed at<b id="recorded-time"></b></div></div>
<div class="lab"><aside class="sidebar"><h2>Select an observed request</h2><nav class="scenario-nav" id="scenarios" aria-label="Select runtime observation"></nav><p class="sidebar-note">Requests share a sequential test run. Target totals carry forward; the delta isolates each request.</p></aside><section class="stage" aria-label="Selected runtime observation"><div class="scene-head"><div><div class="eyebrow">Request → Boundary → Evidence</div><h2 id="title"></h2><p id="description"></p></div><span class="scene-index" id="counter"></span></div><div class="route" aria-label="Runtime architecture"><span>Sandbox request</span><i aria-hidden="true">→</i><span>OpenShell policy</span><i aria-hidden="true">→</i><span class="accent">ControlSpec middleware</span><i aria-hidden="true">→</i><span>Synthetic target</span></div><div class="metrics"><article class="metric"><div class="metric-label">Observed HTTP response</div><div class="metric-value" id="http-status"></div><p id="http-detail"></p></article><article class="metric"><div class="metric-label">Target purchase delta</div><div class="metric-value" id="target-delta"></div><p id="target-detail"></p></article><article class="metric"><div class="metric-label">Receipt reconciliation</div><div class="metric-value words" id="receipt"></div><p id="receipt-detail"></p></article></div><div class="meaning"><span class="arrow" aria-hidden="true">↳</span><div><p id="meaning"></p><small id="expectation"></small></div></div><details class="details"><summary>Inspect the exact request</summary><div class="details-content"><p id="request-note"></p><pre id="request"></pre></div></details><details class="details"><summary>Inspect response, target state, and receipt evidence</summary><div class="details-content"><pre id="evidence"></pre></div></details><details class="details"><summary>Inspect the command and transport output</summary><div class="details-content"><p>Command arguments are shown as recorded, not as a shell command to copy. Elapsed time includes this test's transport and is not a benchmark.</p><pre id="command"></pre></div></details><div class="observation-meta" id="observation-meta"></div></section></div>
<section class="audit" aria-label="Provenance and limitations"><div><h2>Provenance you can inspect.</h2><dl class="facts"><dt>OpenShell pin</dt><dd class="mono" id="pin"></dd><dt>Source revision</dt><dd class="mono" id="revision"></dd><dt>Execution mode</dt><dd id="execution-mode"></dd><dt>Operator</dt><dd id="operator"></dd><dt>Sandbox</dt><dd class="mono" id="sandbox"></dd><dt>Ledger check</dt><dd id="ledger"></dd></dl></div><div><h2>The limits travel with the result.</h2><ul class="limits" id="limitations"></ul></div></section>
<details class="whole-trace"><summary>Inspect the complete run, including ledger events</summary><div class="details-content"><pre id="whole-trace"></pre><a class="download" href="runtime-observations.json" download>Download original runtime observations ↓</a><br><a class="download" href="runtime-support.json" download>Supervisor denial logs, image identities and verified outage recovery ↓</a></div></details>
</div>
<div class="closing"><p>A receipt verifies the synthetic target under this demo's trust model. The target also validates ControlSpec tickets. An HTTP denial alone does not establish which boundary stopped a request; inspect the response and corroborating runtime logs.</p><a href="https://github.com/claytonsamples/controlspec/issues">Reproduce it. Challenge it. ↗</a></div>
<div class="sr-only" id="announce" role="status" aria-live="polite"></div>
</main>
<footer><span>ControlSpec · Experimental open-source action controls</span><span>Independent project · No NVIDIA or Hugging Face endorsement</span></footer>
<noscript><p style="padding:20px">JavaScript is needed to explore recorded observations. <a href="runtime-observations.json">Download the original JSON</a>.</p></noscript>
<script id="runtime-data" type="application/json">{"schema_version": "1", "started_at": "2026-09-30T22:20:16.808735+00:00", "execution_mode": "actual_openshell", "openshell_source_pin": "6648bd0c290efbc41ba131ee9831ee45cd431f94", "synthetic_only": true, "operator_approvals": "scripted host fixture, not a human approval observation", "claims": ["Actual sandbox exec and upstream-signed extension JWTs; no fixture-issued JWTs", "HTTPS synthetic purchases only; no real financial effects", "Reference evaluator decisions remain non-authoritative outside this demo", "Native policy restricts host/path/binary; ControlSpec adds business conditions", "ControlSpec target additionally validates signed tickets", "Supervisor image adds the synthetic root CA; NVIDIA executable unchanged"], "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f", "sandbox_name": "csrt-20260930-8e3f", "action_prefix": "runtime-43e46fd5e9", "observations": [{"scenario": "allowed_42", "timestamp": "2026-09-30T22:20:19.592244+00:00", "action_id": "runtime-43e46fd5e9-allowed", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-allowed\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.151, "stdout": "HTTP/1.1 200 OK\ndate: Wed, 30 Sep 2026 22:20:18 GMT\nserver: uvicorn\ncontent-length: 617\ncontent-type: application/json\n\n{\"schema_version\":\"1\",\"synthetic_only\":true,\"status\":\"committed\",\"action_id\":\"runtime-43e46fd5e9-allowed\",\"scope\":{\"gateway_id\":\"controlspec-runtime-18a317b6341a\",\"sandbox_id\":\"cf9877e9-b1d4-4c13-b919-f222cc9dae1f\"},\"request_digest\":\"sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087\",\"nonce\":\"232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78\",\"amount_minor\":4200,\"committed_at\":\"2026-09-30T22:20:19.569888Z\",\"evidence_id\":\"sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54\",\"evidence_mac\":\"7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41\"}", "stderr": "", "http": {"status": 200, "headers": {"date": "Wed, 30 Sep 2026 22:20:18 GMT", "server": "uvicorn", "content-length": "617", "content-type": "application/json"}, "body": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "runtime-43e46fd5e9-allowed", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41"}}, "target_before": {"observed_at": "2026-09-30T22:20:19.441310+00:00", "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "run_purchases": []}, "target_after": {"observed_at": "2026-09-30T22:20:19.592031+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 1, "target_spend_delta_minor": 4200, "expected_status": 200, "expected_purchase_delta": 1, "assertions_passed": true, "receipt_supplied": true, "completion_verified": true}, {"scenario": "replay_same_action", "timestamp": "2026-09-30T22:20:19.759259+00:00", "action_id": "runtime-43e46fd5e9-allowed", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-allowed\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.133, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 309\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"action_already_reserved\"}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "309", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "action_already_reserved"}}, "target_before": {"observed_at": "2026-09-30T22:20:19.625909+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:19.759183+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "action_already_reserved", "denial_attribution_verified": true, "assertions_passed": true}, {"scenario": "over_limit_without_approval", "timestamp": "2026-09-30T22:20:19.889795+00:00", "action_id": "runtime-43e46fd5e9-over", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-over\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.111, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 303\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"approval_required\"}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "303", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "approval_required"}}, "target_before": {"observed_at": "2026-09-30T22:20:19.778378+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:19.889727+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "approval_required", "denial_attribution_verified": true, "assertions_passed": true}, {"scenario": "exact_before_approval", "timestamp": "2026-09-30T22:20:20.023227+00:00", "action_id": "runtime-43e46fd5e9-exact", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-exact\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.113, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 303\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"approval_required\"}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "303", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "approval_required"}}, "target_before": {"observed_at": "2026-09-30T22:20:19.910400+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:20.023151+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "approval_required", "denial_attribution_verified": true, "assertions_passed": true}, {"scenario": "exact_after_approval", "timestamp": "2026-09-30T22:20:20.242311+00:00", "action_id": "runtime-43e46fd5e9-exact", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-exact\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.132, "stdout": "HTTP/1.1 200 OK\ndate: Wed, 30 Sep 2026 22:20:19 GMT\nserver: uvicorn\ncontent-length: 616\ncontent-type: application/json\n\n{\"schema_version\":\"1\",\"synthetic_only\":true,\"status\":\"committed\",\"action_id\":\"runtime-43e46fd5e9-exact\",\"scope\":{\"gateway_id\":\"controlspec-runtime-18a317b6341a\",\"sandbox_id\":\"cf9877e9-b1d4-4c13-b919-f222cc9dae1f\"},\"request_digest\":\"sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c\",\"nonce\":\"dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93\",\"amount_minor\":14200,\"committed_at\":\"2026-09-30T22:20:20.218781Z\",\"evidence_id\":\"sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59\",\"evidence_mac\":\"2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973\"}", "stderr": "", "http": {"status": 200, "headers": {"date": "Wed, 30 Sep 2026 22:20:19 GMT", "server": "uvicorn", "content-length": "616", "content-type": "application/json"}, "body": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "runtime-43e46fd5e9-exact", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973"}}, "target_before": {"observed_at": "2026-09-30T22:20:20.110721+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:20.242234+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 1, "target_spend_delta_minor": 14200, "expected_status": 200, "expected_purchase_delta": 1, "assertions_passed": true, "receipt_supplied": true, "completion_verified": true}, {"scenario": "changed_before_approval", "timestamp": "2026-09-30T22:20:20.442482+00:00", "action_id": "runtime-43e46fd5e9-changed", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-changed\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.141, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 303\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"approval_required\"}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "303", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "approval_required"}}, "target_before": {"observed_at": "2026-09-30T22:20:20.301446+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:20.442427+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "approval_required", "denial_attribution_verified": true, "assertions_passed": true}, {"scenario": "changed_amount_after_approval", "timestamp": "2026-09-30T22:20:20.650230+00:00", "action_id": "runtime-43e46fd5e9-changed", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-changed\",\"amount_minor\":14300,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.113, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 300\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"action_changed\"}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "300", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "action_changed"}}, "target_before": {"observed_at": "2026-09-30T22:20:20.537115+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:20.650114+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "action_changed", "denial_attribution_verified": true, "assertions_passed": true}, {"scenario": "recurring_purchase", "timestamp": "2026-09-30T22:20:20.866743+00:00", "action_id": "runtime-43e46fd5e9-recurring", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-recurring\",\"amount_minor\":999,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":true}"], "exit_code": 0, "elapsed_seconds": 0.158, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 299\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"policy_denied\"}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "299", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "policy_denied"}}, "target_before": {"observed_at": "2026-09-30T22:20:20.708353+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:20.866652+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "policy_denied", "denial_attribution_verified": true, "assertions_passed": true}, {"scenario": "missing_receipt", "timestamp": "2026-09-30T22:20:21.047193+00:00", "action_id": "runtime-43e46fd5e9-missing", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-missing\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.131, "stdout": "HTTP/1.1 200 OK\ndate: Wed, 30 Sep 2026 22:20:20 GMT\nserver: uvicorn\ncontent-length: 617\ncontent-type: application/json\n\n{\"schema_version\":\"1\",\"synthetic_only\":true,\"status\":\"committed\",\"action_id\":\"runtime-43e46fd5e9-missing\",\"scope\":{\"gateway_id\":\"controlspec-runtime-18a317b6341a\",\"sandbox_id\":\"cf9877e9-b1d4-4c13-b919-f222cc9dae1f\"},\"request_digest\":\"sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766\",\"nonce\":\"4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd\",\"amount_minor\":4200,\"committed_at\":\"2026-09-30T22:20:21.016488Z\",\"evidence_id\":\"sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5\",\"evidence_mac\":\"272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5\"}", "stderr": "", "http": {"status": 200, "headers": {"date": "Wed, 30 Sep 2026 22:20:20 GMT", "server": "uvicorn", "content-length": "617", "content-type": "application/json"}, "body": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "runtime-43e46fd5e9-missing", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5"}}, "target_before": {"observed_at": "2026-09-30T22:20:20.916310+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:21.047105+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 1, "target_spend_delta_minor": 4200, "expected_status": 200, "expected_purchase_delta": 1, "assertions_passed": true, "receipt_supplied": false, "completion_verified": false}, {"scenario": "alternate_path", "timestamp": "2026-09-30T22:20:21.267158+00:00", "action_id": "runtime-43e46fd5e9-path", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/state"], "exit_code": 0, "elapsed_seconds": 0.096, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 422\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"GET /state not permitted by policy\",\"error\":\"policy_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"GET\",\"next_steps\":[],\"path\":\"/state\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"protocol\":\"rest\",\"rule\":\"GET /state\",\"rule_missing\":{\"binary\":\"/usr/bin/curl\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"GET\",\"path\":\"/state\",\"port\":18081,\"type\":\"rest_allow\"}}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "422", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "GET /state not permitted by policy", "error": "policy_denied", "host": "host.openshell.internal", "layer": "l7", "method": "GET", "next_steps": [], "path": "/state", "policy": "synthetic-purchase", "port": 18081, "protocol": "rest", "rule": "GET /state", "rule_missing": {"binary": "/usr/bin/curl", "host": "host.openshell.internal", "layer": "l7", "method": "GET", "path": "/state", "port": 18081, "type": "rest_allow"}}}, "target_before": {"observed_at": "2026-09-30T22:20:21.171399+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:21.267063+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "expected_error": "policy_denied", "expected_reason_code": null, "denial_attribution_verified": true, "assertions_passed": true}, {"scenario": "direct_ip_attempt", "timestamp": "2026-09-30T22:20:21.357219+00:00", "action_id": "runtime-43e46fd5e9-ip", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://172.30.0.2:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-ip\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 7, "elapsed_seconds": 0.04, "stdout": "", "stderr": "curl: (7) Failed to connect to 172.30.0.2 port 18081 after 0 ms: Couldn't connect to server\n", "http": {"status": null, "headers": {}, "body": null}, "target_before": {"observed_at": "2026-09-30T22:20:21.317143+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:21.357187+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "policy_attribution": "requires corroborating supervisor log", "assertions_passed": true}, {"scenario": "gateway_control_plane_attempt", "timestamp": "2026-09-30T22:20:21.473810+00:00", "action_id": "runtime-43e46fd5e9-gateway", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "http://172.30.0.2:17670/.well-known/openid-configuration"], "exit_code": 7, "elapsed_seconds": 0.046, "stdout": "", "stderr": "curl: (7) Failed to connect to 172.30.0.2 port 17670 after 0 ms: Couldn't connect to server\n", "http": {"status": null, "headers": {}, "body": null}, "target_before": {"observed_at": "2026-09-30T22:20:21.427360+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:21.473777+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "policy_attribution": "requires corroborating supervisor log", "assertions_passed": true}, {"scenario": "middleware_control_plane_attempt", "timestamp": "2026-09-30T22:20:21.569241+00:00", "action_id": "runtime-43e46fd5e9-middleware", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://172.30.0.2:50051/"], "exit_code": 7, "elapsed_seconds": 0.045, "stdout": "", "stderr": "curl: (7) Failed to connect to 172.30.0.2 port 50051 after 0 ms: Couldn't connect to server\n", "http": {"status": null, "headers": {}, "body": null}, "target_before": {"observed_at": "2026-09-30T22:20:21.524601+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:21.569161+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "policy_attribution": "requires corroborating supervisor log", "assertions_passed": true}, {"scenario": "middleware_outage", "timestamp": "2026-09-30T22:20:21.936915+00:00", "action_id": "runtime-43e46fd5e9-outage", "command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-outage\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}"], "exit_code": 0, "elapsed_seconds": 0.093, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 246\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request could not be processed by configured middleware\",\"error\":\"middleware_failed\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081}", "stderr": "", "http": {"status": 403, "headers": {"content-type": "application/json", "content-length": "246", "x-openshell-policy": "synthetic-purchase", "connection": "close"}, "body": {"binary": "/usr/bin/curl", "detail": "Request could not be processed by configured middleware", "error": "middleware_failed", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081}}, "target_before": {"observed_at": "2026-09-30T22:20:21.844026+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_after": {"observed_at": "2026-09-30T22:20:21.936828+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_failed", "expected_reason_code": null, "denial_attribution_verified": true, "assertions_passed": true}], "status": "passed", "middleware_stopped": true, "source": {"revision": "98f91d119db5f61c18f5743aee1802802ce030d2", "dirty": false}, "provenance_commands": {"revision": {"command": ["git", "-c", "safe.directory=/repo", "-C", "/repo", "rev-parse", "HEAD"], "exit_code": 0, "stdout": "98f91d119db5f61c18f5743aee1802802ce030d2\n", "stderr": ""}, "worktree_status": {"command": ["git", "-c", "safe.directory=/repo", "-C", "/repo", "status", "--porcelain"], "exit_code": 0, "stdout": "", "stderr": ""}, "openshell_version": {"command": ["openshell", "--version"], "exit_code": 0, "stdout": "openshell 0.1.2\n", "stderr": ""}, "effective_policy": {"command": ["openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "policy", "get", "csrt-20260930-8e3f", "--full", "--output", "json"], "exit_code": 0, "stdout": "{\n \"active_version\": 2,\n \"config_revision\": 16511938764146938059,\n \"hash\": \"672621067d5e56ef6db856be8c756d9a1529ef66327428263026eea079f779fd\",\n \"policy\": {\n \"filesystem_policy\": {\n \"include_workdir\": true,\n \"read_only\": [\n \"/usr\",\n \"/lib\",\n \"/etc\",\n \"/var/log\",\n \"/proc\",\n \"/dev/urandom\"\n ],\n \"read_write\": [\n \"/tmp\",\n \"/dev/null\"\n ]\n },\n \"network_middlewares\": {\n \"controlspec-purchases\": {\n \"config\": {\n \"profile\": \"synthetic-purchases-v1\"\n },\n \"endpoints\": {\n \"include\": [\n \"host.openshell.internal\"\n ]\n },\n \"middleware\": \"controlspec-demo\",\n \"name\": \"ControlSpec synthetic purchases\",\n \"on_error\": \"fail_closed\",\n \"order\": 100\n }\n },\n \"network_policies\": {\n \"synthetic-purchase\": {\n \"binaries\": [\n {\n \"path\": \"/usr/bin/curl\"\n }\n ],\n \"endpoints\": [\n {\n \"enforcement\": \"enforce\",\n \"host\": \"host.openshell.internal\",\n \"port\": 18081,\n \"protocol\": \"rest\",\n \"rules\": [\n {\n \"allow\": {\n \"method\": \"POST\",\n \"path\": \"/purchases\"\n }\n }\n ]\n }\n ],\n \"name\": \"Synthetic purchases\"\n }\n },\n \"version\": 1\n },\n \"policy_source\": \"sandbox\",\n \"sandbox\": \"csrt-20260930-8e3f\",\n \"scope\": \"sandbox\",\n \"status\": \"effective\",\n \"version\": 2\n}\n", "stderr": ""}}, "effective_policy": {"active_version": 2, "config_revision": 16511938764146938059, "hash": "672621067d5e56ef6db856be8c756d9a1529ef66327428263026eea079f779fd", "policy": {"filesystem_policy": {"include_workdir": true, "read_only": ["/usr", "/lib", "/etc", "/var/log", "/proc", "/dev/urandom"], "read_write": ["/tmp", "/dev/null"]}, "network_middlewares": {"controlspec-purchases": {"config": {"profile": "synthetic-purchases-v1"}, "endpoints": {"include": ["host.openshell.internal"]}, "middleware": "controlspec-demo", "name": "ControlSpec synthetic purchases", "on_error": "fail_closed", "order": 100}}, "network_policies": {"synthetic-purchase": {"binaries": [{"path": "/usr/bin/curl"}], "endpoints": [{"enforcement": "enforce", "host": "host.openshell.internal", "port": 18081, "protocol": "rest", "rules": [{"allow": {"method": "POST", "path": "/purchases"}}]}], "name": "Synthetic purchases"}}, "version": 1}, "policy_source": "sandbox", "sandbox": "csrt-20260930-8e3f", "scope": "sandbox", "status": "effective", "version": 2}, "initial_target_state": {"observed_at": "2026-09-30T22:20:19.430894+00:00", "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "run_purchases": []}, "recorded_at": "2026-09-30T22:20:21.988213+00:00", "decision_ledger_events": [{"sequence": 3, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-bbfdb5b3dafff1f79ec8dfb4aa4d6990bd928aa800d671b70b7dbdd7776331e4", "evaluated_at": "2026-09-30T22:20:19.538501Z", "expires_at": "2026-09-30T22:22:19.538501Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:19.538501Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-allowed", "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.538501Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:8d539f239bf87be0ba4262292bcc43d3ca78a77ba14d51a0cba977f9d7d230c7"}}, "previous_hash": "sha256:638000af98a3995cf78eae8ee6fb432a223f0ec0a762408402d9ad32cf524e9a", "event_hash": "sha256:92a1254748e49114b5b584b3b78b7df5fe357239a30151aef55f47a54d80037a"}, {"sequence": 4, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-bbfdb5b3dafff1f79ec8dfb4aa4d6990bd928aa800d671b70b7dbdd7776331e4", "evaluated_at": "2026-09-30T22:20:19.538501Z", "expires_at": "2026-09-30T22:22:19.538501Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:19.538501Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-allowed", "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.538501Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "reservation": {"action_id": "runtime-43e46fd5e9-allowed", "decision_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "expires_at": "2026-09-30T22:20:49.538501Z", "issued_at": "2026-09-30T22:20:19.538501Z", "method": "POST", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}}, "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:8d539f239bf87be0ba4262292bcc43d3ca78a77ba14d51a0cba977f9d7d230c7"}}, "previous_hash": "sha256:92a1254748e49114b5b584b3b78b7df5fe357239a30151aef55f47a54d80037a", "event_hash": "sha256:830d075de23ee9564409c7fc4fb6cf2698ac1d20054aaa652fc16de4f10d5aaf"}, {"sequence": 5, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "reconciliation", "payload": {"at": "2026-09-30T22:20:19.602493Z", "receipt": {"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, "verified": true}, "previous_hash": "sha256:830d075de23ee9564409c7fc4fb6cf2698ac1d20054aaa652fc16de4f10d5aaf", "event_hash": "sha256:b6ae40f25c9bdd658962b1b96dda170394b654276a85a129bd5c24224d60510e"}, {"sequence": 6, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-bce37c268be64df18860a983dadae54699dab198f61b365294a2c015577a3cfa", "evaluated_at": "2026-09-30T22:20:19.714667Z", "expires_at": "2026-09-30T22:22:19.714667Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:84b4598b7a7460b122c40a04fbe87eca85eadb5a7cde9b0bdc6399b1b2d7069d", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:19.538501Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-allowed", "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.538501Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "reservation": {"action_id": "runtime-43e46fd5e9-allowed", "decision_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "expires_at": "2026-09-30T22:20:49.538501Z", "issued_at": "2026-09-30T22:20:19.538501Z", "method": "POST", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}}, "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:6e2fde7237f145c2e615bbefcc079c6fa6ad759e7b0589a8055e7c7e88b44b58"}}, "previous_hash": "sha256:b6ae40f25c9bdd658962b1b96dda170394b654276a85a129bd5c24224d60510e", "event_hash": "sha256:cc411560fff5edc775b348137bd55273950bb459c0cd0e207e4263db802ca2e4"}, {"sequence": 7, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "denied", "payload": {"at": "2026-09-30T22:20:19.714667Z", "reason": "action_already_reserved"}, "previous_hash": "sha256:cc411560fff5edc775b348137bd55273950bb459c0cd0e207e4263db802ca2e4", "event_hash": "sha256:6464388293338e67ca1ea53abcb1bc43f27ae65520fb20003e7cd224fa4232cc"}, {"sequence": 8, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-over", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:abb83373b6fd186d3eb0d8d44953a2fd7bed9adf5ca7ff32ddbb86e1f6638e4e", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:3d65cac420e764d32be518f2ec679e40c48b7a613db949abafc1ca348a06fcf4", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-1e2582a8186babbe5007f07fbe1400dcd4c17d93a65cc4026fb24070066eb30c", "evaluated_at": "2026-09-30T22:20:19.856093Z", "expires_at": "2026-09-30T22:22:19.856093Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:3d65cac420e764d32be518f2ec679e40c48b7a613db949abafc1ca348a06fcf4", "intent_id": "runtime-43e46fd5e9-over", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:95b45405d6f9ceb24e8609489c9e82ef3473cf5376a64dc03cfac93ca9eba56b", "verdict": "require_approval"}, "first_seen": "2026-09-30T22:20:19.856093Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-over", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:151318884753f4ca57610eba62ec6929b9b0db717f31c4c6d9ff5cccdd26c433", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:abb83373b6fd186d3eb0d8d44953a2fd7bed9adf5ca7ff32ddbb86e1f6638e4e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-over", "intent_digest": "sha256:3d65cac420e764d32be518f2ec679e40c48b7a613db949abafc1ca348a06fcf4", "intent_id": "runtime-43e46fd5e9-over", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.856093Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-over", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:151318884753f4ca57610eba62ec6929b9b0db717f31c4c6d9ff5cccdd26c433", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:40fa6fc73411b2aec7a99120bf4a9b4e32d0da84bdea311499d66431b4dd46a5"}}, "previous_hash": "sha256:6464388293338e67ca1ea53abcb1bc43f27ae65520fb20003e7cd224fa4232cc", "event_hash": "sha256:386b90456ea8c40e42de82d54a6ac5219ee7b11b34f0e8c92c2910742feb8356"}, {"sequence": 9, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-over", "kind": "denied", "payload": {"at": "2026-09-30T22:20:19.856093Z", "reason": "approval_required"}, "previous_hash": "sha256:386b90456ea8c40e42de82d54a6ac5219ee7b11b34f0e8c92c2910742feb8356", "event_hash": "sha256:b5af6f2a297bd409fd9c7ef35dafdb98c0fead94cca0249ad4156d7b937d844b"}, {"sequence": 10, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "evaluated_at": "2026-09-30T22:20:19.982339Z", "expires_at": "2026-09-30T22:22:19.982339Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1", "verdict": "require_approval"}, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:6c7b888dc98bda37811b18e28cfa2bfe4c7494fd2f373563d960c5d0fc7bedee"}}, "previous_hash": "sha256:b5af6f2a297bd409fd9c7ef35dafdb98c0fead94cca0249ad4156d7b937d844b", "event_hash": "sha256:37d644384b9b2b61ac40bc9d88f888c436d09d2d1a80a3eb7651c2a6c9b7d7de"}, {"sequence": 11, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "denied", "payload": {"at": "2026-09-30T22:20:19.982339Z", "reason": "approval_required"}, "previous_hash": "sha256:37d644384b9b2b61ac40bc9d88f888c436d09d2d1a80a3eb7651c2a6c9b7d7de", "event_hash": "sha256:ffeabe9ecfe3b59ea0c6d8949e00c1d480428cd4c8b420bcdca4220009653d8c"}, {"sequence": 12, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z"}], "basis": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "evaluated_at": "2026-09-30T22:20:19.982339Z", "expires_at": "2026-09-30T22:22:19.982339Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1", "verdict": "require_approval"}, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:6c7b888dc98bda37811b18e28cfa2bfe4c7494fd2f373563d960c5d0fc7bedee"}}, "previous_hash": "sha256:ffeabe9ecfe3b59ea0c6d8949e00c1d480428cd4c8b420bcdca4220009653d8c", "event_hash": "sha256:118f854a6dc980fec50b120967a5584b438fdf9a1b2a92de48c9cd5fdacc98dc"}, {"sequence": 13, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z"}], "basis": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-9508b27b6213ec5cf8e5bb7e6edc777124c48477652f53ead04ab2d5a7d996b3", "evaluated_at": "2026-09-30T22:20:20.045969Z", "expires_at": "2026-09-30T22:22:20.045969Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a9b342279cf926c788242c15bcb28cdbb00eb2a75f636fad3829df1dc5463f6f", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:0d7677cda7f932900ea1fcfb10d6110cef91b1275df738fb929ce98f02ab5fd4", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:7cbaf2222dc8a2ae9082c7c5e326967429c2a85bad46a771ab55612520e4c9eb"}}, "previous_hash": "sha256:118f854a6dc980fec50b120967a5584b438fdf9a1b2a92de48c9cd5fdacc98dc", "event_hash": "sha256:2e6a3202eb0f4147fa1d511a768c3a4d992d27d65f92524aa8acf0c11e68cf3a"}, {"sequence": 14, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z"}], "basis": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-4db332f110d008a0a1a940a97a7258d636db4b464034fadcfd0fc83e34399228", "evaluated_at": "2026-09-30T22:20:20.188248Z", "expires_at": "2026-09-30T22:22:20.188248Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:947da55a7fa6ef21aa21722e9ec59234cb94d9639ff1322d5af2f53f0e3bf7d2", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:0d7677cda7f932900ea1fcfb10d6110cef91b1275df738fb929ce98f02ab5fd4", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:49e7166378a3e879ee98c9807e0c6af5b88ab928359fdea1c4efcbce01cc38c2"}}, "previous_hash": "sha256:2e6a3202eb0f4147fa1d511a768c3a4d992d27d65f92524aa8acf0c11e68cf3a", "event_hash": "sha256:1be4fcbef108425a497214f3fdd188130d678ebca36a5533e4dd7198072507f1"}, {"sequence": 15, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z"}], "basis": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-4db332f110d008a0a1a940a97a7258d636db4b464034fadcfd0fc83e34399228", "evaluated_at": "2026-09-30T22:20:20.188248Z", "expires_at": "2026-09-30T22:22:20.188248Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:947da55a7fa6ef21aa21722e9ec59234cb94d9639ff1322d5af2f53f0e3bf7d2", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "reservation": {"action_id": "runtime-43e46fd5e9-exact", "decision_digest": "sha256:947da55a7fa6ef21aa21722e9ec59234cb94d9639ff1322d5af2f53f0e3bf7d2", "expires_at": "2026-09-30T22:20:50.188248Z", "issued_at": "2026-09-30T22:20:20.188248Z", "method": "POST", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}}, "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:0d7677cda7f932900ea1fcfb10d6110cef91b1275df738fb929ce98f02ab5fd4", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:49e7166378a3e879ee98c9807e0c6af5b88ab928359fdea1c4efcbce01cc38c2"}}, "previous_hash": "sha256:1be4fcbef108425a497214f3fdd188130d678ebca36a5533e4dd7198072507f1", "event_hash": "sha256:c85b2771c02055baedf4665b59dce3b2b5f696dfe5395123bcdd95197f1992e2"}, {"sequence": 16, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "reconciliation", "payload": {"at": "2026-09-30T22:20:20.270331Z", "receipt": {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, "verified": true}, "previous_hash": "sha256:c85b2771c02055baedf4665b59dce3b2b5f696dfe5395123bcdd95197f1992e2", "event_hash": "sha256:2c0e16013e94284bd60a5f9b7fdcc4843b56c6e8f798a2ba7f688d5727560b57"}, {"sequence": 17, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "evaluated_at": "2026-09-30T22:20:20.386417Z", "expires_at": "2026-09-30T22:22:20.386417Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc", "verdict": "require_approval"}, "first_seen": "2026-09-30T22:20:20.386417Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.386417Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:d3a18ad1455a3df5b6062ca6cad8552044e28fa54b6e6c4cbbbad6257dc294ed"}}, "previous_hash": "sha256:2c0e16013e94284bd60a5f9b7fdcc4843b56c6e8f798a2ba7f688d5727560b57", "event_hash": "sha256:869ba57ecfbe209d891adc09ceccf05ba91a5e6240d8718bc632545056bd3a62"}, {"sequence": 18, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "denied", "payload": {"at": "2026-09-30T22:20:20.386417Z", "reason": "approval_required"}, "previous_hash": "sha256:869ba57ecfbe209d891adc09ceccf05ba91a5e6240d8718bc632545056bd3a62", "event_hash": "sha256:0fcb017f6c5025fca5043896d8f128d8c1b290e47d6da322b6b1003eae262709"}, {"sequence": 19, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-9202a59c8facc87c2b8df9c19274e1e8", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc"}, "fact_digest": "sha256:5d1bdf3dcddb3dd26f827ade9991ab061a230d35266244467acb1b07f5b6ddbf", "intent_ref": {"intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.476483Z", "valid_until": "2026-09-30T22:22:20.386417Z"}], "basis": {"decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "evaluated_at": "2026-09-30T22:20:20.386417Z", "expires_at": "2026-09-30T22:22:20.386417Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc", "verdict": "require_approval"}, "first_seen": "2026-09-30T22:20:20.386417Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.386417Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:d3a18ad1455a3df5b6062ca6cad8552044e28fa54b6e6c4cbbbad6257dc294ed"}}, "previous_hash": "sha256:0fcb017f6c5025fca5043896d8f128d8c1b290e47d6da322b6b1003eae262709", "event_hash": "sha256:8ec4378e5e590fae8c497d6cdb0a5d702e2a5ac6bd34c35187fced840f0aa68b"}, {"sequence": 20, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-9202a59c8facc87c2b8df9c19274e1e8", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc"}, "fact_digest": "sha256:5d1bdf3dcddb3dd26f827ade9991ab061a230d35266244467acb1b07f5b6ddbf", "intent_ref": {"intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.476483Z", "valid_until": "2026-09-30T22:22:20.386417Z"}], "basis": {"decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-efc786f2610f034a3b4e75010c46a2ecd43b594beb08c028491ece66db413909", "evaluated_at": "2026-09-30T22:20:20.476483Z", "expires_at": "2026-09-30T22:22:20.476483Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:89b971dbbb0b4e10806cc47a2e07ad208d2687bacb36a2e01987e25c04457901", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:20.386417Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.386417Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:4e4a7dd73d25a58d3f669aee77e37f51f6a8351460ee1a23409ca8e1b5721280", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:dd3ac7bf7fcded8dcb3696588cc0476a52f8af3e8f7533cb19615fc48b3fa57f"}}, "previous_hash": "sha256:8ec4378e5e590fae8c497d6cdb0a5d702e2a5ac6bd34c35187fced840f0aa68b", "event_hash": "sha256:a693b1ff75e49e8f176e60a927310b1b6c2b9d46d2085366968350ae5c6cb589"}, {"sequence": 21, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "denied", "payload": {"at": "2026-09-30T22:20:20.625902Z", "reason": "action_changed"}, "previous_hash": "sha256:a693b1ff75e49e8f176e60a927310b1b6c2b9d46d2085366968350ae5c6cb589", "event_hash": "sha256:3af84b4202b44732afb530850eb19f0b86e43161c476309663bd0523b7b62c52"}, {"sequence": 22, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-recurring", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "recurring_blocked", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:4e738f1f41e76d2cdd88b77be98294d9bac347a69cfc8642e635321ffc731db9", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:7b088105a70a3a7aed964789f36ba71d5e3d3dc5f966a33b66b14d2316d5b74f", "control_set_digest": "sha256:c36d3501d6df4ac606f4b63fdd026c9a24e14cf376bd4b0bdfce21df70bf6e52", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:f323f481d8ea00f6ed3e06dccfe7e82ce293697df3e6adf2327a6500076ee97a", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-e571049215ea325c61b9e0e2fbf9dddc5ee980a4d2aad68e699be4b3800e8c0d", "evaluated_at": "2026-09-30T22:20:20.824204Z", "expires_at": "2026-09-30T22:22:20.824204Z", "explanation_codes": ["controlspec.core.explicit_block", "controlspec.synthetic.recurring_blocked"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:f323f481d8ea00f6ed3e06dccfe7e82ce293697df3e6adf2327a6500076ee97a", "intent_id": "runtime-43e46fd5e9-recurring", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "block", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "block", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:f0b3000f027c9afe89ba77ac0216301a7b2c467b5b32e263b643cc110ea071b2", "verdict": "block"}, "first_seen": "2026-09-30T22:20:20.824204Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-recurring", "amount_minor": 999, "currency": "USD", "merchant": "demo-store", "recurring": true, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 999, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": true, "controlspec.synthetic.request_digest": "sha256:8c09b4f1a5209586e501116cc87019a7a6034e0244ff690a328cce699b4a9876", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:7b088105a70a3a7aed964789f36ba71d5e3d3dc5f966a33b66b14d2316d5b74f", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-recurring", "intent_digest": "sha256:f323f481d8ea00f6ed3e06dccfe7e82ce293697df3e6adf2327a6500076ee97a", "intent_id": "runtime-43e46fd5e9-recurring", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.824204Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-recurring", "amount_minor": 999, "currency": "USD", "merchant": "demo-store", "recurring": true, "schema_version": "1"}, "request_digest": "sha256:8c09b4f1a5209586e501116cc87019a7a6034e0244ff690a328cce699b4a9876", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "recurring_blocked", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:4e738f1f41e76d2cdd88b77be98294d9bac347a69cfc8642e635321ffc731db9", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.recurring_blocked", "predicate_results": ["true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.explicit_block", "controlspec.synthetic.recurring_blocked"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "block", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "block", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "block", "snapshot_digest": "sha256:ae8f249f92ef8e2bd40108e2b83f5b160d2c380c6a8907713787796ba5a28025"}}, "previous_hash": "sha256:3af84b4202b44732afb530850eb19f0b86e43161c476309663bd0523b7b62c52", "event_hash": "sha256:42615e958f8dd3cfce9a57871a09a783bd0bc172d1aa3855b68d3c05fd32a881"}, {"sequence": 23, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-recurring", "kind": "denied", "payload": {"at": "2026-09-30T22:20:20.824204Z", "reason": "policy_denied"}, "previous_hash": "sha256:42615e958f8dd3cfce9a57871a09a783bd0bc172d1aa3855b68d3c05fd32a881", "event_hash": "sha256:7298e9cba7f993617e177d58eceafea04be7e72ff1fc04a098c3dbe5f65c2c98"}, {"sequence": 24, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-missing", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-c6ba1d3d7573f1ab09e3fc74c919c69861ec3f9223380763c6d7636ebe11db5a", "evaluated_at": "2026-09-30T22:20:20.989949Z", "expires_at": "2026-09-30T22:22:20.989949Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:ec9812a2bb30757ea37c7fc9bd257933ac03b0156f99f60731c070134a41b69d", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:20.989949Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-missing", "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.989949Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:e04f08ff1390085ff6804db4ad2ec3ed2355badab241c5ab044ca74c08f456ff"}}, "previous_hash": "sha256:7298e9cba7f993617e177d58eceafea04be7e72ff1fc04a098c3dbe5f65c2c98", "event_hash": "sha256:a4cd380ebfa7850f51103637d5439aa3633d6fe14c9c56bfaa7412e72fdf27dc"}, {"sequence": 25, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-missing", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-c6ba1d3d7573f1ab09e3fc74c919c69861ec3f9223380763c6d7636ebe11db5a", "evaluated_at": "2026-09-30T22:20:20.989949Z", "expires_at": "2026-09-30T22:22:20.989949Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:ec9812a2bb30757ea37c7fc9bd257933ac03b0156f99f60731c070134a41b69d", "verdict": "allow"}, "first_seen": "2026-09-30T22:20:20.989949Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2"}, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-missing", "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.989949Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "reservation": {"action_id": "runtime-43e46fd5e9-missing", "decision_digest": "sha256:ec9812a2bb30757ea37c7fc9bd257933ac03b0156f99f60731c070134a41b69d", "expires_at": "2026-09-30T22:20:50.989949Z", "issued_at": "2026-09-30T22:20:20.989949Z", "method": "POST", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}}, "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:e04f08ff1390085ff6804db4ad2ec3ed2355badab241c5ab044ca74c08f456ff"}}, "previous_hash": "sha256:a4cd380ebfa7850f51103637d5439aa3633d6fe14c9c56bfaa7412e72fdf27dc", "event_hash": "sha256:38c8730382c7765789312d2c6f89345da507461990cee7013b2d88f2ed04dc49"}, {"sequence": 26, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-missing", "kind": "reconciliation", "payload": {"at": "2026-09-30T22:20:21.119923Z", "receipt": null, "verified": false}, "previous_hash": "sha256:38c8730382c7765789312d2c6f89345da507461990cee7013b2d88f2ed04dc49", "event_hash": "sha256:9c1a5d4ec00e75e37fffc4c7108af7c8cc4e815ba5bded5021b952bf7e6d2535"}], "decision_ledger_hash_chain_valid": true, "scripted_operator_actions": [{"action_id": "runtime-43e46fd5e9-exact", "observed_at": "2026-09-30T22:20:20.091488+00:00", "operator_kind": "scripted synthetic fixture outside sandbox", "decision": {"schema_name": "controlspec/v0/decision", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": {"controlspec.conformance.non_authoritative": true}, "decision_id": "decision-9508b27b6213ec5cf8e5bb7e6edc777124c48477652f53ead04ab2d5a7d996b3", "intent_ref": {"namespace": "controlspec.synthetic.purchase", "intent_id": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e"}, "evaluated_at": "2026-09-30T22:20:20.045969Z", "expires_at": "2026-09-30T22:22:20.045969Z", "predecessor_decision_ref": {"namespace": "controlspec.synthetic.purchase", "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1"}, "verdict": "allow", "route": {"schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": {}, "route_id": "continue", "kind": "continue", "target_ref": null, "parameters": {}, "requires_recheck": false}, "conditions": [], "approval_requirements": [{"requirement_id": "exact-human-approval", "failure": {"verdict": "require_approval", "route": null, "code": "controlspec.synthetic.approval_required"}, "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "minimum_count": 1, "validity_seconds": 120, "separate_from_actor": true, "separate_from_roles": []}], "required_evidence": [], "applied_controls": [{"namespace": "controlspec.synthetic.purchase", "control_id": "above_limit", "version": "1.0.0", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "binding": {"actor_ref": {"namespace": "controlspec.synthetic.purchase", "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "version": "1"}, "action_type": "commit", "domain_action": "controlspec.synthetic.purchase", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "version": "1", "type": "controlspec.synthetic.cart"}, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "evaluator": {"name": "controlspec.core", "version": "0.1.0"}}, "requires_recheck": false, "semantic_digest": "sha256:a9b342279cf926c788242c15bcb28cdbb00eb2a75f636fad3829df1dc5463f6f"}}, {"action_id": "runtime-43e46fd5e9-changed", "observed_at": "2026-09-30T22:20:20.511205+00:00", "operator_kind": "scripted synthetic fixture outside sandbox", "decision": {"schema_name": "controlspec/v0/decision", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": {"controlspec.conformance.non_authoritative": true}, "decision_id": "decision-efc786f2610f034a3b4e75010c46a2ecd43b594beb08c028491ece66db413909", "intent_ref": {"namespace": "controlspec.synthetic.purchase", "intent_id": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc"}, "evaluated_at": "2026-09-30T22:20:20.476483Z", "expires_at": "2026-09-30T22:22:20.476483Z", "predecessor_decision_ref": {"namespace": "controlspec.synthetic.purchase", "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc"}, "verdict": "allow", "route": {"schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": {}, "route_id": "continue", "kind": "continue", "target_ref": null, "parameters": {}, "requires_recheck": false}, "conditions": [], "approval_requirements": [{"requirement_id": "exact-human-approval", "failure": {"verdict": "require_approval", "route": null, "code": "controlspec.synthetic.approval_required"}, "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "minimum_count": 1, "validity_seconds": 120, "separate_from_actor": true, "separate_from_roles": []}], "required_evidence": [], "applied_controls": [{"namespace": "controlspec.synthetic.purchase", "control_id": "above_limit", "version": "1.0.0", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "binding": {"actor_ref": {"namespace": "controlspec.synthetic.purchase", "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "version": "1"}, "action_type": "commit", "domain_action": "controlspec.synthetic.purchase", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "version": "1", "type": "controlspec.synthetic.cart"}, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "evaluator": {"name": "controlspec.core", "version": "0.1.0"}}, "requires_recheck": false, "semantic_digest": "sha256:89b971dbbb0b4e10806cc47a2e07ad208d2687bacb36a2e01987e25c04457901"}}], "middleware_stop_timestamp": "2026-09-30T22:20:21.617485+00:00", "middleware_listener_closed": true, "completed_at": "2026-09-30T22:20:21.982386+00:00", "final_target_state": {"observed_at": "2026-09-30T22:20:21.988190+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [{"action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}, {"action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": {"gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f"}, "status": "committed", "synthetic_only": true}]}}</script>
<script>
'use strict';
(()=>{
const $=id=>document.getElementById(id),text=value=>value===undefined||value===null?'Not recorded':typeof value==='string'?value:JSON.stringify(value);
const integer=value=>Number.isSafeInteger(value),money=value=>integer(value)?new Intl.NumberFormat('en-US',{style:'currency',currency:'USD'}).format(value/100):'not recorded';
const scenes={
allowed_42:['A useful action proceeds','A one-time $42 synthetic purchase enters the runtime.'],
replay_same_action:['Try the same action twice','The same action ID is submitted again after the first delivery.'],
over_limit_without_approval:['$142 without approval','A purchase above the synthetic threshold is submitted without an operator approval.'],
exact_before_approval:['Before the approval','The exact purchase is first submitted without the required approval.'],
exact_after_approval:['After the exact approval','A scripted host operator has approved this exact purchase before the retry.'],
changed_before_approval:['Bind the original action','The original purchase establishes the pending request before scripted approval.'],
changed_amount_after_approval:['Approved $142. Attempted $143.','The agent request changes the amount after the scripted operator approval.'],
recurring_purchase:['A recurring commitment','A recurring purchase tests a different synthetic business condition.'],
missing_receipt:['The effect is not the proof','The target receipt is deliberately withheld from reconciliation after the request.'],
alternate_path:['Try an alternate path','The sandbox tries another HTTP path outside the purchase route.'],
direct_ip_attempt:['Try a direct IP address','A request substitutes an IP address for the configured target hostname.'],
gateway_control_plane_attempt:['Reach the gateway control plane','The sandbox attempts a request to the gateway control-plane endpoint.'],
middleware_control_plane_attempt:['Reach the middleware directly','The sandbox attempts a direct request to the middleware service endpoint.'],
middleware_outage:['The middleware goes offline','The request is made after the test stops the middleware listener.']
};
let data;
try{data=JSON.parse($('runtime-data').textContent);if(data.schema_version!=='1'||data.execution_mode!=='actual_openshell'||data.synthetic_only!==true||!Array.isArray(data.observations)||!data.observations.length)throw Error('Unsupported runtime report');}
catch{$('error').hidden=false;$('content').hidden=true;return;}
const observations=data.observations;let current=0;
$('observation-count').textContent=observations.length;
$('assertion-count').textContent=observations.filter(o=>o.assertions_passed===true).length+' / '+observations.length;
$('run-status').textContent=text(data.status).replaceAll('_',' ');$('run-status').className=data.status==='passed'?'status-positive':'status-caution';
$('recorded-time').textContent=text(data.completed_at??data.recorded_at??data.started_at);
const version=data.openshell_version??data.provenance_commands?.openshell_version?.stdout?.trim()??(data.openshell_source_pin==='6648bd0c290efbc41ba131ee9831ee45cd431f94'?'v0.1.2':'Version not recorded');
$('pin').textContent=version+' · '+text(data.openshell_source_pin);
$('revision').textContent=text(data.source?.revision??data.source_revision)+(data.source?.dirty===true?' · working tree had changes':'');
$('execution-mode').textContent=text(data.execution_mode);
$('operator').textContent=text(data.operator_approvals);
$('sandbox').textContent=text(data.sandbox_name)+' · '+text(data.sandbox_id);
$('ledger').textContent=data.decision_ledger_hash_chain_valid===true?'Recorded local hash-chain check passed':data.decision_ledger_hash_chain_valid===false?'Recorded local hash-chain check failed':'Not recorded';
const limits=[
'Scripted test requests and operator approvals; no live model or real financial effects.',
'Reference decisions remain non-authoritative outside this isolated synthetic target.',
'The controlled target independently checks signed tickets; this defense is not native OpenShell alone.',
'Target totals and receipt checks use a host-trusted local service and shared signing secret. They are not an independent audit.',
'An unchanged target and failed transport do not, alone, identify the enforcing policy. Alternate-route attribution requires runtime logs.',
'This recording establishes only the routes and actions exercised. It is not comprehensive sandbox verification or a performance benchmark.'
];
for(const value of [...limits,...(Array.isArray(data.limitations)?data.limitations:[])]){const li=document.createElement('li');li.textContent=text(value);$('limitations').append(li);}
$('whole-trace').textContent=JSON.stringify(data,null,2);
observations.forEach((o,index)=>{const button=document.createElement('button');button.type='button';const number=document.createElement('span');number.textContent=String(index+1).padStart(2,'0');button.append(number,document.createTextNode(scenes[o.scenario]?.[0]??text(o.scenario).replaceAll('_',' ')));button.addEventListener('click',()=>{current=index;render();});$('scenarios').append(button);});
function render(){
const o=observations[current],known=scenes[o.scenario];
$('title').textContent=known?.[0]??text(o.scenario).replaceAll('_',' ');$('description').textContent=known?.[1]??'Inspect the recorded request and its observed response.';
$('counter').textContent=String(current+1).padStart(2,'0')+' / '+String(observations.length).padStart(2,'0');
[...$('scenarios').children].forEach((button,index)=>button.setAttribute('aria-pressed',String(index===current)));
const status=o.http?.status;
$('http-status').textContent=integer(status)&&status>=100&&status<=599?String(status):'—';
const responseReason=o.http?.body?.reason_code??o.http?.body?.error;
$('http-detail').textContent=(integer(status)&&status>=100&&status<=599?'HTTP status recorded. ':'No HTTP response status recorded. ')+'Process exit code: '+text(o.exit_code)+'.'+(responseReason===undefined?'':' Response: '+text(responseReason)+'.');
$('target-delta').textContent=integer(o.target_purchase_delta)?(o.target_purchase_delta>0?'+':'')+o.target_purchase_delta:'—';
$('target-detail').textContent='Purchase count '+text(o.target_before?.purchase_count)+' → '+text(o.target_after?.purchase_count)+'. Spend delta: '+money(o.target_spend_delta_minor)+'.';
const receipt=$('receipt');receipt.classList.remove('status-positive','status-caution');
if(o.completion_verified===true){receipt.textContent='Verified';receipt.classList.add('status-positive');$('receipt-detail').textContent='The recorded target receipt passed host reconciliation for this synthetic action.';}
else if(o.completion_verified===false){receipt.textContent='Unverified';receipt.classList.add('status-caution');$('receipt-detail').textContent=o.receipt_supplied===false?'No receipt was supplied to reconciliation. An observed effect is not verified completion.':'The recorded reconciliation did not verify completion.';}
else{receipt.textContent='Not evaluated';$('receipt-detail').textContent='No receipt reconciliation result was recorded for this request.';}
$('meaning').textContent=o.completion_verified===false&&o.target_purchase_delta>0?'The target changed, while completion remains unverified.':o.completion_verified===true?'The target effect and receipt reconciliation are both recorded.':o.target_purchase_delta===0?'No additional purchase was observed at the target for this request.':'Inspect the recorded target effect and available evidence.';
if(o.policy_attribution)$('meaning').textContent+=' Policy attribution: '+text(o.policy_attribution)+'.';
$('expectation').textContent='Recorded expectation: '+(integer(o.expected_status)?'HTTP '+o.expected_status:'transport rejection or HTTP denial')+', purchase delta '+text(o.expected_purchase_delta)+'. Assertion result: '+(o.assertions_passed===true?'passed':o.assertions_passed===false?'failed':'not recorded')+'.';
const command=Array.isArray(o.command)?o.command:[];const bodyIndex=command.indexOf('--data');let request=o.request;
if(request===undefined&&bodyIndex>=0&&typeof command[bodyIndex+1]==='string'){try{request=JSON.parse(command[bodyIndex+1]);}catch{request=command[bodyIndex+1];}}
$('request-note').textContent=request===undefined?'No JSON request body was recorded. Inspect the command for the exact method and URL.':'Request body as recorded in the probe or its command arguments. Authority is not inferred from this body.';
$('request').textContent=request===undefined?'No recorded JSON request body':JSON.stringify(request,null,2);
$('evidence').textContent=JSON.stringify({http:o.http,target_before:o.target_before,target_after:o.target_after,target_purchase_delta:o.target_purchase_delta,target_spend_delta_minor:o.target_spend_delta_minor,receipt_supplied:o.receipt_supplied,completion_verified:o.completion_verified,policy_attribution:o.policy_attribution,denial_attribution_verified:o.denial_attribution_verified,expected_error:o.expected_error,expected_reason_code:o.expected_reason_code},null,2);
$('command').textContent=JSON.stringify({command:o.command,exit_code:o.exit_code,elapsed_seconds:o.elapsed_seconds,stdout:o.stdout,stderr:o.stderr},null,2);
$('observation-meta').textContent='Observed '+text(o.timestamp)+' · action '+text(o.action_id);
$('announce').textContent=$('title').textContent+'. HTTP '+text(status)+'. Purchase delta '+text(o.target_purchase_delta)+'. Reconciliation '+receipt.textContent+'.';
}
render();
})();
</script>
</body>
</html>