{ "schema_version": "1", "generated_at": "2026-09-30T22:23:55.611982+00:00", "source_revision": "98f91d119db5f61c18f5743aee1802802ce030d2", "upstream": { "version": "v0.1.2", "commit": "6648bd0c290efbc41ba131ee9831ee45cd431f94" }, "runtime": { "status": "not_run", "detail": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime." }, "verification": { "kind": "authenticated_grpc_and_synthetic_target", "detail": "Real TLS gRPC contract calls, real ControlSpec evaluation, SQLite state and loopback HTTP target. Scripted agent inputs and test operator identity. No LLM or real purchase." }, "scenes": [ { "id": "allowed", "title": "A useful action proceeds", "description": "A one-time $42 purchase fits the synthetic $75 control.", "request": { "schema_version": "1", "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The gate lets a permitted action proceed and checks the target receipt.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:47.119685Z", "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", "evidence_mac": "69245e845d4658aedb981cb2e06e830a78c78a852a848534b40582329fe23f4d", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "allowed", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:47.119685Z", "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", "evidence_mac": "69245e845d4658aedb981cb2e06e830a78c78a852a848534b40582329fe23f4d" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "committed", "reason": "target_receipt_verified", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:47.189635Z", "evidence_id": "sha256:aa59cc9ba17c19a97f11b3738df1aba6788214a1e2b7782d4ff54b6a12b582ab", "evidence_mac": "20dde639cbc7804c85bc10fc7d5a9d5ea855be5acb3fdc932370888917e4911d", "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "target_receipt_verified" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "Signed target receipt reconciled." } ], "evidence": { "outcome": "committed", "reason": "target_receipt_verified", "forwarded": true, "reconciled": true, "rpc_elapsed_ms": 56.41, "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "allowed", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:47.189635Z", "evidence_id": "sha256:aa59cc9ba17c19a97f11b3738df1aba6788214a1e2b7782d4ff54b6a12b582ab", "evidence_mac": "20dde639cbc7804c85bc10fc7d5a9d5ea855be5acb3fdc932370888917e4911d" }, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-ef4c399289aacd62be67075a03170a0818fc684a4e7a2bccd126163b7eabe70e", "evaluated_at": "2026-09-30T22:23:47.131239Z", "expires_at": "2026-09-30T22:25:47.131239Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:cb11baca5b9843c5a13563bd6d0728f69f47c0f576c0fd7b39bdf5623070ed96", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:47.131239Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "allowed", "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.131239Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:a2709782bd04958ee7c5f4b8cda926c2f3a6c86b3093dc38667afcc4eea41c24" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:8cccf5a291c9880542b98b7050d2149180e34d85d6106128c58e7e64bb148f20" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-ef4c399289aacd62be67075a03170a0818fc684a4e7a2bccd126163b7eabe70e", "evaluated_at": "2026-09-30T22:23:47.131239Z", "expires_at": "2026-09-30T22:25:47.131239Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:cb11baca5b9843c5a13563bd6d0728f69f47c0f576c0fd7b39bdf5623070ed96", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:47.131239Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "allowed", "intent_digest": "sha256:393fce36091ba359a35da9262c7bb49615bacf683bd888f79227931be2045be3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.131239Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "reservation": { "action_id": "allowed", "decision_digest": "sha256:cb11baca5b9843c5a13563bd6d0728f69f47c0f576c0fd7b39bdf5623070ed96", "expires_at": "2026-09-30T22:24:17.131239Z", "issued_at": "2026-09-30T22:23:47.131239Z", "method": "POST", "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:a2709782bd04958ee7c5f4b8cda926c2f3a6c86b3093dc38667afcc4eea41c24" } }, "previous_hash": "sha256:8cccf5a291c9880542b98b7050d2149180e34d85d6106128c58e7e64bb148f20", "event_hash": "sha256:a27228b28cb8f738095918cad9a04c457777c28a2776c5b962aa42ca7a1656f0" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "reconciliation", "payload": { "at": "2026-09-30T22:23:47.200445Z", "receipt": { "action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:47.189635Z", "evidence_id": "sha256:aa59cc9ba17c19a97f11b3738df1aba6788214a1e2b7782d4ff54b6a12b582ab", "evidence_mac": "20dde639cbc7804c85bc10fc7d5a9d5ea855be5acb3fdc932370888917e4911d", "nonce": "ff9bb2f17cbe4f55636c43c93e9c1497ab6281ecda75737c466563900b94c7da", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:a27228b28cb8f738095918cad9a04c457777c28a2776c5b962aa42ca7a1656f0", "event_hash": "sha256:5d6e436c32178f2c461e346675024f9c20718c6ea2df4eeb9a6147f6ccbab6da" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "approval", "title": "Approve this exact $142 purchase", "description": "First denied. A simulated host operator approves the exact action, then the agent retries.", "request": { "schema_version": "1", "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "Approval is a separate fact, bound to the request, actor, policy and decision.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:47.503822Z", "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", "evidence_mac": "e1dc9dd26d1b9efd92bdf52542a0d1e279d3bc1b760f85ca9a7207c2ba2fad5e", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "approval", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:47.503822Z", "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", "evidence_mac": "e1dc9dd26d1b9efd92bdf52542a0d1e279d3bc1b760f85ca9a7207c2ba2fad5e" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "committed", "reason": "target_receipt_verified", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:47.594376Z", "evidence_id": "sha256:d078f61d1f25ab0813b20a70892be1235d7f9f9cae33a06e62e044980b592383", "evidence_mac": "2489e7f72edb3a42ad264a76a8cf937eb692107e6d159720095ee1a8d2d1a481", "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 14200 USD cents." }, { "kind": "decision", "message": "Initial request denied: approval_required." }, { "kind": "approval", "message": "Simulated host operator approved the exact $142 request; no real human participated." }, { "kind": "decision", "message": "target_receipt_verified" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "Signed target receipt reconciled." } ], "evidence": { "outcome": "committed", "reason": "target_receipt_verified", "forwarded": true, "reconciled": true, "rpc_elapsed_ms": 25.437, "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "approval", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:47.594376Z", "evidence_id": "sha256:d078f61d1f25ab0813b20a70892be1235d7f9f9cae33a06e62e044980b592383", "evidence_mac": "2489e7f72edb3a42ad264a76a8cf937eb692107e6d159720095ee1a8d2d1a481" }, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "evaluated_at": "2026-09-30T22:23:47.513333Z", "expires_at": "2026-09-30T22:25:47.513333Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:23:47.513333Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.513333Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:ae731d1745eb1783726a12f98a18cad504246ec15cf39b0480575a6418e878f8" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:663ac22915058b2b149b207f86684dc71cbe37b0fb35701cfff28b5066789cfb" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "denied", "payload": { "at": "2026-09-30T22:23:47.513333Z", "reason": "approval_required" }, "previous_hash": "sha256:663ac22915058b2b149b207f86684dc71cbe37b0fb35701cfff28b5066789cfb", "event_hash": "sha256:687db6b286c0af4950f76593c525539907e78882ce1f1db88f6f8dd68aa720db" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-91b25133d61e8def219f357e48595f00", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:23:47.530940Z", "valid_until": "2026-09-30T22:25:47.513333Z" } ], "basis": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "evaluated_at": "2026-09-30T22:23:47.513333Z", "expires_at": "2026-09-30T22:25:47.513333Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:23:47.513333Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.513333Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:ae731d1745eb1783726a12f98a18cad504246ec15cf39b0480575a6418e878f8" } }, "previous_hash": "sha256:687db6b286c0af4950f76593c525539907e78882ce1f1db88f6f8dd68aa720db", "event_hash": "sha256:130f2b2100b8098e6ec6ef226e7dedf1a20c7a50ac4b45e3d3f4868d4a4e006d" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-91b25133d61e8def219f357e48595f00", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:23:47.530940Z", "valid_until": "2026-09-30T22:25:47.513333Z" } ], "basis": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-93011e3e16c2f1ca60e7a3d8c5af00d3968094624032144eb6e9d7ca1f6a3f8f", "evaluated_at": "2026-09-30T22:23:47.530940Z", "expires_at": "2026-09-30T22:25:47.530940Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:dd19dd843c069286abb5424fd652e4eb7559f6ab9924394bb8deda3133071b5b", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:47.513333Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.513333Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:03c03e93f4e965c966ba7cebd76c46846bbfb695737a93b1f6aef3bc6d873eb3", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:b60d2ee9d2eebaffae7df3dc48c9f22149b55580805df7788c9583fea516d023" } }, "previous_hash": "sha256:130f2b2100b8098e6ec6ef226e7dedf1a20c7a50ac4b45e3d3f4868d4a4e006d", "event_hash": "sha256:33b9e8727a513c3e6934ebd831633e3584508581506c3f8d93ff1880daab3b2b" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-91b25133d61e8def219f357e48595f00", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:23:47.530940Z", "valid_until": "2026-09-30T22:25:47.513333Z" } ], "basis": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-e5eb2f7c12b23092f79be62e69048e9ad9f282e839a443a9863f39d0b809240b", "evaluated_at": "2026-09-30T22:23:47.568008Z", "expires_at": "2026-09-30T22:25:47.568008Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:675dc02797ea75c23eb52dbd78faabf877453d2db21643e2a1f8abd8a79c95af", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:47.513333Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.513333Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:03c03e93f4e965c966ba7cebd76c46846bbfb695737a93b1f6aef3bc6d873eb3", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:708102d435850cf0cbb9b58d2ccfaeb835d3ca759537d306913354ac71cb2006" } }, "previous_hash": "sha256:33b9e8727a513c3e6934ebd831633e3584508581506c3f8d93ff1880daab3b2b", "event_hash": "sha256:173f6bcca24b4844048a706490676e4816963d8c1e7110cd99dc0ffae2cd1d33" }, { "sequence": 6, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-91b25133d61e8def219f357e48595f00", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "fact_digest": "sha256:40a34ae7ce69b84a331de2d9429b5bf2f5b3edf9b89863ddb4d92fc10e8f674e", "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:23:47.530940Z", "valid_until": "2026-09-30T22:25:47.513333Z" } ], "basis": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-e5eb2f7c12b23092f79be62e69048e9ad9f282e839a443a9863f39d0b809240b", "evaluated_at": "2026-09-30T22:23:47.568008Z", "expires_at": "2026-09-30T22:25:47.568008Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-9c3bc8957d7676fc47c645c991c9aae2227867d95bcccb0594e0ffa2c512ec98", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a9fb9f26ae8f062b2305349c5a4cb311e72670de6211ee3a82c9bd6110c88c82" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:675dc02797ea75c23eb52dbd78faabf877453d2db21643e2a1f8abd8a79c95af", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:47.513333Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:f0e90bc040a02ff1456038a77f327d8aa5a48ccc6694738d95be6fd4c92947c2", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.513333Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "reservation": { "action_id": "approval", "decision_digest": "sha256:675dc02797ea75c23eb52dbd78faabf877453d2db21643e2a1f8abd8a79c95af", "expires_at": "2026-09-30T22:24:17.568008Z", "issued_at": "2026-09-30T22:23:47.568008Z", "method": "POST", "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:03c03e93f4e965c966ba7cebd76c46846bbfb695737a93b1f6aef3bc6d873eb3", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:708102d435850cf0cbb9b58d2ccfaeb835d3ca759537d306913354ac71cb2006" } }, "previous_hash": "sha256:173f6bcca24b4844048a706490676e4816963d8c1e7110cd99dc0ffae2cd1d33", "event_hash": "sha256:4345172dab93c4705638ce7561ee370143654613dad28c8ba5845c4f946f9097" }, { "sequence": 7, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "reconciliation", "payload": { "at": "2026-09-30T22:23:47.605631Z", "receipt": { "action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:47.594376Z", "evidence_id": "sha256:d078f61d1f25ab0813b20a70892be1235d7f9f9cae33a06e62e044980b592383", "evidence_mac": "2489e7f72edb3a42ad264a76a8cf937eb692107e6d159720095ee1a8d2d1a481", "nonce": "52fe0fa91e9aa80f3d907b6c29788fd6afbe4becff120c38995ebed85e6c5639", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:4345172dab93c4705638ce7561ee370143654613dad28c8ba5845c4f946f9097", "event_hash": "sha256:82cc63c14754c00beae6d3f9b78826aec807a12b0d390be7534b4367282b35bf" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "overspend", "title": "$142 without approval", "description": "The agent proposes a purchase above the synthetic threshold.", "request": { "schema_version": "1", "action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "A proposal can be valid JSON and still require someone else's authority.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "overspend", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:47.902284Z", "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", "evidence_mac": "1ee14e52e91be4588d42d5d8bac9a741d2087e19e68eba138018b3a3af1855da", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "overspend", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:47.902284Z", "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", "evidence_mac": "1ee14e52e91be4588d42d5d8bac9a741d2087e19e68eba138018b3a3af1855da" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "approval_required", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 14200 USD cents." }, { "kind": "decision", "message": "approval_required" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "approval_required", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 32.906, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "overspend", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:b5616bb396ed571b2e4f35adeb90e8066468bb223087161f008e6ec6c011ae98", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-80d08563488a4a4d047015a34723f4be2990af39737d48baf6aa19d511064fd0", "evaluated_at": "2026-09-30T22:23:47.918160Z", "expires_at": "2026-09-30T22:25:47.918160Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:b5616bb396ed571b2e4f35adeb90e8066468bb223087161f008e6ec6c011ae98", "intent_id": "overspend", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:699e0f8d62536c41092e7d079e76997d78a695a73a46f9a048bb3fe341210624", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:23:47.918160Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "overspend", "intent_digest": "sha256:b5616bb396ed571b2e4f35adeb90e8066468bb223087161f008e6ec6c011ae98", "intent_id": "overspend", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:47.918160Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:560abb036a8f32912f4954dd74f157e323f34ba2a42a14c8256f68b535985655" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:ed7930ca0ef489afbccc36eb82242649739964df22f78b765efb69832731df82" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "overspend", "kind": "denied", "payload": { "at": "2026-09-30T22:23:47.918160Z", "reason": "approval_required" }, "previous_hash": "sha256:ed7930ca0ef489afbccc36eb82242649739964df22f78b765efb69832731df82", "event_hash": "sha256:a4f91906cdae21a766973247b67f42ed3ac71e96d5f44789fc170801411b43f1" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "changed", "title": "Approved $142. Attempted $143.", "description": "A simulated operator approves $142; the subsequent request changes the amount.", "request": { "schema_version": "1", "action_id": "changed", "amount_minor": 14300, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "Changing the action invalidates the original approval.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14300, "balance_minor": 985700, "purchases": [ { "action_id": "changed", "amount_minor": 14300, "committed_at": "2026-09-30T22:23:48.312015Z", "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", "evidence_mac": "d3509f25bdd598380b5c61cbfd27bf2509030b720659da353dce63602961f47d", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "changed", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14300, "committed_at": "2026-09-30T22:23:48.312015Z", "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", "evidence_mac": "d3509f25bdd598380b5c61cbfd27bf2509030b720659da353dce63602961f47d" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "action_changed", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 14300 USD cents." }, { "kind": "decision", "message": "Initial request denied: approval_required." }, { "kind": "approval", "message": "Simulated host operator approved the exact $142 request; no real human participated." }, { "kind": "decision", "message": "action_changed" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "action_changed", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 12.528, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", "evaluated_at": "2026-09-30T22:23:48.321834Z", "expires_at": "2026-09-30T22:25:48.321834Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:23:48.321834Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:48.321834Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:9810de5866abe6f16f643f0df56e9e0d5f55c6dcffe433c447130de9d71a77b1" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:3f580ef11f40757e3b41820b1db33aa5b63674e68d6c1013e6ef3c348513f87b" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "denied", "payload": { "at": "2026-09-30T22:23:48.321834Z", "reason": "approval_required" }, "previous_hash": "sha256:3f580ef11f40757e3b41820b1db33aa5b63674e68d6c1013e6ef3c348513f87b", "event_hash": "sha256:fb99482101634e5b105c2f0e5c48956c3aa6c0b373e655c424862407aaf338be" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-74ce4143146cc225a2e13cc4eb15f49f", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" }, "fact_digest": "sha256:f867df631a0c1f774fcbf4819c38ebca101893a6612000e3a41b3ca68ca22276", "intent_ref": { "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:23:48.341478Z", "valid_until": "2026-09-30T22:25:48.321834Z" } ], "basis": { "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", "evaluated_at": "2026-09-30T22:23:48.321834Z", "expires_at": "2026-09-30T22:25:48.321834Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:23:48.321834Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:48.321834Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:9810de5866abe6f16f643f0df56e9e0d5f55c6dcffe433c447130de9d71a77b1" } }, "previous_hash": "sha256:fb99482101634e5b105c2f0e5c48956c3aa6c0b373e655c424862407aaf338be", "event_hash": "sha256:69ff3ca1a4ae5c15893ae3dea77be117a9bd21f22fa93a19b66b5c7eba6b64d6" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-74ce4143146cc225a2e13cc4eb15f49f", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" }, "fact_digest": "sha256:f867df631a0c1f774fcbf4819c38ebca101893a6612000e3a41b3ca68ca22276", "intent_ref": { "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:23:48.341478Z", "valid_until": "2026-09-30T22:25:48.321834Z" } ], "basis": { "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-252718f38b213bfa97eb3169b00e07cbfeba7811c05847a78b35e0259573e021", "evaluated_at": "2026-09-30T22:23:48.341478Z", "expires_at": "2026-09-30T22:25:48.341478Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-97d0f779ad73fca594b437d72f6fdbb0e0e0d442200aaf680c29e1807db716bd", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:67b25dff7c1dce6d1df24daa621e7fe6c8c411620f374dcf9bcca35ca77cc0ca" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:7b5238c0c1b14512c51dda2bf616f7529753fd45b9e12ad13d04f24d0c00f0d3", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:48.321834Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:cf70738be86b914664709a90e9f1361b3b65d4b6524f7ef031c0c2d2c4588168", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:48.321834Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:6d379dc3de827ffed32a87b7b7fa64b0a264afe678a18d04642412ed32397c7a", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:b08293c6f5cfe93d942e213ebb778043e4e1ad7cb30e67ef5d6b6b8186279531" } }, "previous_hash": "sha256:69ff3ca1a4ae5c15893ae3dea77be117a9bd21f22fa93a19b66b5c7eba6b64d6", "event_hash": "sha256:f0baa072b550026b84e37f28ee60de55fce888e7bea59be7ed14e15c93b37fae" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "denied", "payload": { "at": "2026-09-30T22:23:48.365597Z", "reason": "action_changed" }, "previous_hash": "sha256:f0baa072b550026b84e37f28ee60de55fce888e7bea59be7ed14e15c93b37fae", "event_hash": "sha256:7bff004cf9dab275e0113b3c865778d06cfcb279c100fa27c58705668508bab5" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "self-approval", "title": "The agent tries to approve", "description": "An invalid operator credential is offered for the pending action.", "request": { "schema_version": "1", "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The caller cannot turn a request into a host-operator approval.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "self-approval", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:48.715562Z", "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", "evidence_mac": "6b4fbe2bdca116757d2226da518654b340a437ee6a826106aad345a002784bc6", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "self-approval", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T22:23:48.715562Z", "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", "evidence_mac": "6b4fbe2bdca116757d2226da518654b340a437ee6a826106aad345a002784bc6" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "approval_required", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 14200 USD cents." }, { "kind": "decision", "message": "Initial request denied: approval_required." }, { "kind": "approval", "message": "operator_authentication_failed" }, { "kind": "decision", "message": "approval_required" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "approval_required", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 29.808, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-3f712d353e50f56447d833bdfaf6fbb53046b70557fcaf0ffe5921c2fee3947a", "evaluated_at": "2026-09-30T22:23:48.726198Z", "expires_at": "2026-09-30T22:25:48.726198Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:cef15eb5c6d466d447f942b288ed43e47e8d14609de746ec56b016bb85a62fd0", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:23:48.726198Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "self-approval", "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:48.726198Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:64f8832393cefb1aed51b55aa2c2f269f148fc6e24a430c7c280c1072e13d9ec" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:efaadefcae797d7df79d1f71e70dd1706993197413c89c6980eec7fc485e9b9e" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": { "at": "2026-09-30T22:23:48.726198Z", "reason": "approval_required" }, "previous_hash": "sha256:efaadefcae797d7df79d1f71e70dd1706993197413c89c6980eec7fc485e9b9e", "event_hash": "sha256:c2a63765f91492153f65379b801d4699434c98fa23fc72aed12a9eefe8ec96b3" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": { "at": "2026-09-30T22:23:48.752385Z", "reason": "operator_authentication_failed" }, "previous_hash": "sha256:c2a63765f91492153f65379b801d4699434c98fa23fc72aed12a9eefe8ec96b3", "event_hash": "sha256:c78c19ccc375be16cf3a1bf032aab8876d36cb64dec25686bf628420b50d94e2" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-d74db453beaaf27adacfae5ab9a173dc48292ad78276539654091dbd275e2396", "evaluated_at": "2026-09-30T22:23:48.767194Z", "expires_at": "2026-09-30T22:25:48.767194Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:645cbaf9b69844bdc1c0cb38a2d521a3031682f6afa4378fb7cc0dd4dfe31c0e", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:23:48.726198Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "self-approval", "intent_digest": "sha256:0bb705f75ff986cf0325aa8236895770577a380e40504a299543495af3318a9a", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:48.726198Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:817759d3b959872cf681680e9bed995ee1febc53f9d68024878fb485ad373e2c" } }, "previous_hash": "sha256:c78c19ccc375be16cf3a1bf032aab8876d36cb64dec25686bf628420b50d94e2", "event_hash": "sha256:c96e3d5e566d7aecad2cf115e63507192daa4da968caaa209e3c1004816676c0" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": { "at": "2026-09-30T22:23:48.767194Z", "reason": "approval_required" }, "previous_hash": "sha256:c96e3d5e566d7aecad2cf115e63507192daa4da968caaa209e3c1004816676c0", "event_hash": "sha256:8d8cd242ad53eb8fd8121a098017252a1aaa2ee8b87409ab9d34e345ed95fd75" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "replay", "title": "Try the same purchase again", "description": "The request is delivered twice with the same action ID.", "request": { "schema_version": "1", "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The target is idempotent in both lanes; ControlSpec additionally denies a fresh reservation.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.104703Z", "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", "evidence_mac": "668f607cf9f5243bfe7402c7d8260b08d62305dca37745d3ac177e06595697de", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "replay", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.104703Z", "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", "evidence_mac": "668f607cf9f5243bfe7402c7d8260b08d62305dca37745d3ac177e06595697de" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "action_already_reserved", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.165293Z", "evidence_id": "sha256:004b557548e1f62ce342a9cfa142d1ed15bde2c678c01eb61d4748dd48e922bd", "evidence_mac": "f35966bfc1980c9ab94ba0e12321d247b1f83980be61e4f63ff849167a268f03", "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "effect", "message": "First delivery committed once; now retrying." }, { "kind": "decision", "message": "action_already_reserved" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "action_already_reserved", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 19.971, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-8ba65e45bdfb493b4a5e72fec5975a4b66b8e304f5b4147b94feaabeabb8cb1e", "evaluated_at": "2026-09-30T22:23:49.115497Z", "expires_at": "2026-09-30T22:25:49.115497Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:49.115497Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:49.115497Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:32c052cd7b9c0f58ab1592fe3e43435e93fc358c2936d208600c49f0572a7b6a" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:98e0b5b646d3d0d09ab04a0731889be9d0aff50ef146a4bfde0885d09bf09f16" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-8ba65e45bdfb493b4a5e72fec5975a4b66b8e304f5b4147b94feaabeabb8cb1e", "evaluated_at": "2026-09-30T22:23:49.115497Z", "expires_at": "2026-09-30T22:25:49.115497Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:49.115497Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:49.115497Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "reservation": { "action_id": "replay", "decision_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", "expires_at": "2026-09-30T22:24:19.115497Z", "issued_at": "2026-09-30T22:23:49.115497Z", "method": "POST", "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:32c052cd7b9c0f58ab1592fe3e43435e93fc358c2936d208600c49f0572a7b6a" } }, "previous_hash": "sha256:98e0b5b646d3d0d09ab04a0731889be9d0aff50ef146a4bfde0885d09bf09f16", "event_hash": "sha256:276102a2775b58aa4fed2c835cc63b7862bbd88b7182e7a10e38f5b2720f2256" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "reconciliation", "payload": { "at": "2026-09-30T22:23:49.178162Z", "receipt": { "action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.165293Z", "evidence_id": "sha256:004b557548e1f62ce342a9cfa142d1ed15bde2c678c01eb61d4748dd48e922bd", "evidence_mac": "f35966bfc1980c9ab94ba0e12321d247b1f83980be61e4f63ff849167a268f03", "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:276102a2775b58aa4fed2c835cc63b7862bbd88b7182e7a10e38f5b2720f2256", "event_hash": "sha256:55f90f1c217433bb92853f291c3becd2cc75af27126fc3286fa6d968d355c279" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-804922f50921579015d8e182174d39501abf1872c8ea4314cf7dbc29031e9328", "evaluated_at": "2026-09-30T22:23:49.192944Z", "expires_at": "2026-09-30T22:25:49.192944Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:af871cb8a0853abe24d33d7e5c404bb6f754e410a97c31aa02a99edc2af204d4", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:49.115497Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:f9071cded09b65261f93b469c8bd71dc7bb1c37587b28934926124987a9fe8c9", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:49.115497Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "reservation": { "action_id": "replay", "decision_digest": "sha256:a1a3f8deb606b5889c0cbeb5b43e27c201868422297a6c0fd79c9e836172d19f", "expires_at": "2026-09-30T22:24:19.115497Z", "issued_at": "2026-09-30T22:23:49.115497Z", "method": "POST", "nonce": "a935c25649cd69c5314db24b44139ddb5121d80add77a69ce1c1a7e2958357d5", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:29d6112fa40803053a7489c3471da76e701f05faa3bc1d2fa50a0418ed96d55a" } }, "previous_hash": "sha256:55f90f1c217433bb92853f291c3becd2cc75af27126fc3286fa6d968d355c279", "event_hash": "sha256:66bfb05a147820b874b13a9fac51f16c8739b4cc77b1ecadc053b98290546fdf" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "denied", "payload": { "at": "2026-09-30T22:23:49.192944Z", "reason": "action_already_reserved" }, "previous_hash": "sha256:66bfb05a147820b874b13a9fac51f16c8739b4cc77b1ecadc053b98290546fdf", "event_hash": "sha256:1ada02d48ebd02c081ca29c20285198a96b8e48ed8746765c53f5ea090219d16" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "missing-proof", "title": "The effect happened. Proof is missing.", "description": "The target commits, but the fixture withholds its receipt from reconciliation.", "request": { "schema_version": "1", "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "Known target state and verified completion are separate observations.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "missing-proof", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.483421Z", "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", "evidence_mac": "4d67c29dd9e77f3b91385c672fc02827168ef9bd7eadfd94727115914feabf79", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "missing-proof", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.483421Z", "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", "evidence_mac": "4d67c29dd9e77f3b91385c672fc02827168ef9bd7eadfd94727115914feabf79" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "effect_observed_evidence_missing", "reason": "completion_unverified", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "missing-proof", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.516923Z", "evidence_id": "sha256:3af4811fc62ba312666544295a7a40cede7e903cf69cdfe5fc2ce1464103eabe", "evidence_mac": "dd540d544008236f94b44f7149d76ae5484eec06a66bfb5ebfb588dd90fecd16", "nonce": "0519b92ee0313b40d34bf6745525740ecb8c9ac7821636f411571d6f7d8c95d9", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "completion_unverified" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "effect_observed_evidence_missing", "reason": "completion_unverified", "forwarded": true, "reconciled": false, "rpc_elapsed_ms": 24.117, "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "missing-proof", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "nonce": "0519b92ee0313b40d34bf6745525740ecb8c9ac7821636f411571d6f7d8c95d9", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.516923Z", "evidence_id": "sha256:3af4811fc62ba312666544295a7a40cede7e903cf69cdfe5fc2ce1464103eabe", "evidence_mac": "dd540d544008236f94b44f7149d76ae5484eec06a66bfb5ebfb588dd90fecd16" }, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-b294d21d8076003274791fe0e039d46d2a551419f7f167cf177ab4ce13adcab0", "evaluated_at": "2026-09-30T22:23:49.491639Z", "expires_at": "2026-09-30T22:25:49.491639Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:1966931cb80b03ede09a36a67411bd73ed223534c364ea21dd66e8d247bb9000", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:49.491639Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "missing-proof", "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:49.491639Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:cb888f317207371509ed7bffe368d24bc09475bae86138eff4aed1ea703f331a" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:9f1cf5c051a688533dadbbd7371583edb9c7a294b7637ac25aa06a53bfd56a6b" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-b294d21d8076003274791fe0e039d46d2a551419f7f167cf177ab4ce13adcab0", "evaluated_at": "2026-09-30T22:23:49.491639Z", "expires_at": "2026-09-30T22:25:49.491639Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:1966931cb80b03ede09a36a67411bd73ed223534c364ea21dd66e8d247bb9000", "verdict": "allow" }, "first_seen": "2026-09-30T22:23:49.491639Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "missing-proof", "intent_digest": "sha256:3e105ca8111189687f99397e7f215805b43c3917a8868275ec6ebfc2145e328b", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:23:49.491639Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "reservation": { "action_id": "missing-proof", "decision_digest": "sha256:1966931cb80b03ede09a36a67411bd73ed223534c364ea21dd66e8d247bb9000", "expires_at": "2026-09-30T22:24:19.491639Z", "issued_at": "2026-09-30T22:23:49.491639Z", "method": "POST", "nonce": "0519b92ee0313b40d34bf6745525740ecb8c9ac7821636f411571d6f7d8c95d9", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:cb888f317207371509ed7bffe368d24bc09475bae86138eff4aed1ea703f331a" } }, "previous_hash": "sha256:9f1cf5c051a688533dadbbd7371583edb9c7a294b7637ac25aa06a53bfd56a6b", "event_hash": "sha256:24fc09e4ef7d38a4aa3d145cc0e8151813edcb31b99ffb5790d3b2d19759a586" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "reconciliation", "payload": { "at": "2026-09-30T22:23:49.526413Z", "receipt": null, "verified": false }, "previous_hash": "sha256:24fc09e4ef7d38a4aa3d145cc0e8151813edcb31b99ffb5790d3b2d19759a586", "event_hash": "sha256:51db6741c4306fabd14f3b730c0e06ace146948819d4154fbef7cd4025960695" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "outage", "title": "The middleware goes offline", "description": "The fixture stops the gRPC service before attempting dispatch.", "request": { "schema_version": "1", "action_id": "outage", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The test dispatcher does not forward on RPC failure; OpenShell fail-closed behavior remains unrun.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "outage", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.893577Z", "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", "evidence_mac": "1b6471383ccb2ff405f2cc438b7e0c4644cd2afad8e856e4d4d4aab36a3e224b", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "outage", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:49.893577Z", "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", "evidence_mac": "1b6471383ccb2ff405f2cc438b7e0c4644cd2afad8e856e4d4d4aab36a3e224b" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "not_forwarded", "reason": "grpc_deadline_exceeded", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "grpc_deadline_exceeded" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "not_forwarded", "reason": "grpc_deadline_exceeded", "forwarded": false, "reconciled": false, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "ledger_events": [], "ledger_chain_valid": true, "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "direct", "title": "Skip the middleware", "description": "A real smolagents Tool calls the controlled HTTP target without an execution ticket.", "request": { "schema_version": "1", "action_id": "direct", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The target itself rejects a ticketless call. This tests the target, not sandbox bypass resistance.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "direct", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:52.195737Z", "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", "evidence_mac": "42afe8512644054eff81b9a4f2c38f03d7c4b9277b1990fd7e2e2f7c0dbac487", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "direct", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T22:23:52.195737Z", "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", "evidence_mac": "42afe8512644054eff81b9a4f2c38f03d7c4b9277b1990fd7e2e2f7c0dbac487" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Pinned v0.1.2 native REST rules match method, path and query, not this purchase JSON body. GraphQL, MCP and JSON-RPC inspection are separate protocol features. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "target_requires_ticket", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "target_requires_ticket" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "target_requires_ticket", "forwarded": true, "reconciled": false, "smolagents_tool_result": { "http_status": 403, "target_report": "{\"detail\":\"exactly one execution ticket required\"}", "assurance": "not_authorized_by_this_tool" }, "ledger_events": [], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] } ], "limitations": [ "Actual OpenShell runtime, effective-policy admission, network isolation and bypass checks not run.", "The unguarded lane uses a direct Python target call; the controlled lane uses TLS gRPC + HTTP. They are illustrative arms, not latency benchmarks or a native OpenShell comparison.", "The controlled target requires a ticket; this extra defense is explicit and not attributed to OpenShell.", "The test operator is scripted. Host-only CLI is provided for manual approval; no production identity system.", "Reference decisions retain non-authoritative status. Synthetic permissions apply only to this fake target.", "Host administrators and the shared demo signing secret are trusted. Local hash chains are not tamper-proof.", "Replay protection is scoped to the same action ID. New IDs and cumulative budget limits require additional controls.", "Static replay cannot authorize anything. All amounts, identities and transactions are synthetic." ] }