{ "applied": false, "approved": 0, "at": "2026-11-10T03:43:43Z", "decisions_analyzed": 10471, "exception": 0, "ledger_record_hash": "61c11e8526afd6e60e7fe3df653491482c478b18da62155cf7e06c6ec863ff83", "privacy": "tenant identifiers are hashed; principals omitted", "proposals": 69, "proposals_list": [ { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 1478, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-0d0cca99af50", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 8986, "would_change": 7 }, "status": "PROPOSED", "tenant": "tenant-a7cfa7deb2" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 616, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-03d572f9c52a", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 9855, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-2a791d5988" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 581, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-094b8befd97a", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 9890, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-3263af29f9" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 518, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-951dff749a21", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 9953, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-705ce042c2" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 304, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-af5c4c63bbfc", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10167, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-4bb714d011" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 226, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-196277feb828", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10245, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-7db5ba1006" }, { "denying_stages": [ "trust" ], "distinct_days": 1, "evidence_count": 220, "kind": "TIGHTEN", "method": "POST", "path": "/compliance/check", "proposal_id": "pe-e278454f4daa", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 9583, "would_change": 888 }, "status": "PROPOSED", "tenant": "tenant-579a47a2fa" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 215, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-ff072bb842c0", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10256, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-737fc8a958" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 4, "evidence_count": 190, "kind": "TIGHTEN", "method": "POST", "path": "/compliance/check", "proposal_id": "pe-a23c02858392", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10088, "would_change": 200 }, "status": "PROPOSED", "tenant": "tenant-99491d32c7" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 171, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-0d7080180ee6", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10300, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-6afef73f65" }, { "denying_stages": [ "egress", "execution", "trust" ], "distinct_days": 2, "evidence_count": 157, "kind": "TIGHTEN", "method": "POST", "path": "/tools/transfer_funds", "proposal_id": "pe-b1cbc8ec5dc2", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10314, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-3263af29f9" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 7, "evidence_count": 123, "kind": "TIGHTEN", "method": "POST", "path": "/tools/files/read", "proposal_id": "pe-c306bbd82560", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10317, "would_change": 31 }, "status": "PROPOSED", "tenant": "tenant-b796c5d47a" }, { "denying_stages": [ "egress", "execution", "trust" ], "distinct_days": 7, "evidence_count": 46, "kind": "TIGHTEN", "method": "POST", "path": "/tools/payments/send", "proposal_id": "pe-bc961f9c8041", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10402, "would_change": 11 }, "status": "PROPOSED", "tenant": "tenant-b796c5d47a" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 42, "kind": "TIGHTEN", "method": "POST", "path": "/tools/issue_refund", "proposal_id": "pe-beee8645adc8", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10414, "would_change": 15 }, "status": "PROPOSED", "tenant": "tenant-a7cfa7deb2" }, { "denying_stages": [ "egress", "execution", "risk", "trust" ], "distinct_days": 7, "evidence_count": 30, "kind": "TIGHTEN", "method": "POST", "path": "/tools/shell/run", "proposal_id": "pe-b52dec61e246", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10441, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-b796c5d47a" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 27, "kind": "TIGHTEN", "method": "POST", "path": "/tools/db/query", "proposal_id": "pe-3744c4951d6a", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10422, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-b796c5d47a" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 23, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-bf10da4668e7", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10448, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-863ceed099" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 23, "kind": "TIGHTEN", "method": "POST", "path": "/tools/files/list", "proposal_id": "pe-4ce74717e79a", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10436, "would_change": 12 }, "status": "PROPOSED", "tenant": "tenant-b796c5d47a" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 20, "kind": "TIGHTEN", "method": "POST", "path": "/tools/send_email", "proposal_id": "pe-26d1922be141", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10447, "would_change": 4 }, "status": "PROPOSED", "tenant": "tenant-14250e93a5" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 2, "evidence_count": 20, "kind": "TIGHTEN", "method": "POST", "path": "/tools/transfer_funds", "proposal_id": "pe-83e595283b0c", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10451, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-a7cfa7deb2" }, { "denying_stages": [ "egress", "execution", "trust" ], "distinct_days": 1, "evidence_count": 20, "kind": "TIGHTEN", "method": "POST", "path": "/tools/post_message", "proposal_id": "pe-a72f4da2d343", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10451, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-998f9d304d" }, { "denying_stages": [ "egress", "execution", "trust" ], "distinct_days": 1, "evidence_count": 19, "kind": "TIGHTEN", "method": "POST", "path": "/tools/send_email", "proposal_id": "pe-54678c551ec3", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10434, "would_change": 11 }, "status": "PROPOSED", "tenant": "tenant-584c0f687f" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 18, "kind": "TIGHTEN", "method": "POST", "path": "/tools/read_file", "proposal_id": "pe-765d6ac99e52", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10453, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-a1a51c0289" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 18, "kind": "TIGHTEN", "method": "POST", "path": "/tools/run_sql", "proposal_id": "pe-9bf2b3ea441e", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10453, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-863ceed099" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 18, "kind": "TIGHTEN", "method": "POST", "path": "/tools/send_email", "proposal_id": "pe-aa78828226eb", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10450, "would_change": 3 }, "status": "PROPOSED", "tenant": "tenant-ba8b91d816" }, { "denying_stages": [ "egress", "execution", "trust" ], "distinct_days": 1, "evidence_count": 18, "kind": "TIGHTEN", "method": "POST", "path": "/tools/send_email", "proposal_id": "pe-60e6596f7192", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10438, "would_change": 11 }, "status": "PROPOSED", "tenant": "tenant-f3b7138ce0" }, { "denying_stages": [ "egress", "execution", "trust" ], "distinct_days": 1, "evidence_count": 18, "kind": "TIGHTEN", "method": "POST", "path": "/tools/payments/send", "proposal_id": "pe-5e4979c18202", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10453, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-e0c6fdc594" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 17, "kind": "TIGHTEN", "method": "POST", "path": "/tools/send_email", "proposal_id": "pe-e8f1d31b81b3", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10454, "would_change": 0 }, "status": "PROPOSED", "tenant": "tenant-863ceed099" }, { "denying_stages": [ "execution", "trust" ], "distinct_days": 1, "evidence_count": 17, "kind": "TIGHTEN", "method": "POST", "path": "/tools/email/send", "proposal_id": "pe-28a912cef535", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 10431, "would_change": 9 }, "status": "PROPOSED", "tenant": "tenant-b796c5d47a" }, { "denying_stages": [ "execution" ], "distinct_days": 4, "evidence_count": 16, "kind": "TIGHTEN", "method": null, "path": "/compliance/check", "proposal_id": "pe-2d6efaeab6c1", "replay": { "decisions_replayed": 10471, "outside_scope_changed": 0, "outside_scope_checked": 9961, "would_change": 307 }, "status": "PROPOSED", "tenant": "tenant-99491d32c7" } ], "public_key_b64": "b6hfA2rpAdV29FOdhNXGkk4t91mCV0AnfFYwq0HO0R8=", "record_hash": "d28c692db3490c20b69c0f796b82f1d659b55596ba04ecb1148275d6b4c898e7", "rules": [ "proposals only; a named person approves or rejects each one", "approved rules go to a staging Rego file; loading it into the policy engine is a separate deploy", "never loosens trust, risk, quarantine, execution, consensus, egress, identity or authorization denials", "exact tenant + path (+ method, + principal) scope; never wildcard; never cross-tenant", "each proposal is replayed over the recorded decisions; outside_scope_changed must be 0" ], "schema": "cain42.policy-evolution.public.v1", "signature_b64": "1ju24DNFsWYDNsN4NCU039qSDSzo2e3FKtB82ITgBPpFIzOYtDx3Z+woOHM+fdSKP+uY03UrhCqHY6ODHMvwAQ==", "source": "every recorded decision on the hosted decision path (fabric_decisions)", "tighten": 69 }