{
 "expectation": "every object must be REJECTED by an independent verifier",
 "objects": [
  {
   "class": "envelope",
   "mutation": "E8 commit binding rewritten",
   "object": {
    "envelope": {
     "body": {
      "action_id": "9da62d2455d14fa9ac5f2b6b3c788a2763be328231a7df7ac2b6192771867a28",
      "agent_identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
      "agent_passport_digest": "e761c174744872c901caded31262832f86d9e4364fff14910a019a95bad3da39",
      "authority_digest": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
      "authority_state": "E28_LEASE",
      "authorization_expiry": 1031325,
      "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
      "authorization_nonce": "bd205ecd9094ca4d",
      "authorization_scope": "docs/tools/op_0_4d504fe0a7af",
      "capability_state": "write",
      "capability_used": "write",
      "conformance_state": "G6",
      "context_digest": "92326ea875e55d9ead16099c269a07733aaa6fafeb0e7c1f4a820dee5d25fe6f",
      "decision_digest": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
      "delegation_chain": [
       "dlg_730136ef7cc289bed8a80feb764e9d39"
      ],
      "e8_commit_id": "0000000000000000000000000000000000000000000000000000000000000000",
      "enforcement_boundary": "E8 ActionCommitBoundary via E25 sealed executor",
      "enforcement_result": "VERIFIED",
      "evidence_digest": "f04598bbbca5721d1da78a507a72d5c1d4f491321873b527a837766758cfbc6c",
      "evidence_references": [
       "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
       "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
       "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648"
      ],
      "execution_environment": "in-process reference adapter (E25)",
      "execution_result": "VERIFIED",
      "governance_contract_digest": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
      "governance_coverage": "d736f579ea8ff54e9c982826b9e4ba30d59713b6a1fb38ccbde70a6f8c4b9ffa",
      "grants_authority": false,
      "identity_state": "ACTIVE",
      "model_runtime_identity": "ext-model|ext-runtime",
      "model_runtime_version": "1",
      "operation_id": "op_0_4d504fe0a7af",
      "outcome_evidence": "VERIFIED",
      "outside_boundary": [
       "world state",
       "physical effects",
       "host operating system"
      ],
      "policy_digest": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "policy_version": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "previous_proof_hash": "0000000000000000000000000000000000000000000000000000000000000000",
      "proof_id": "gp_372ae0077bed4931819df8805723e382",
      "proof_status": "VERIFIED_GOVERNED",
      "proof_version": "1.0",
      "requested_effect": "7a05ebe843258b6ea4c4e44cc47c90096258ce8c6ccbb8a3241f025e59ce38fd",
      "resource_target": "docs/tools/op_0_4d504fe0a7af",
      "revocation_state": "VERIFIED",
      "risk_digest": "7095472212dd6f4c03a7b63d48e349399498af2daad63caf9bdfcc41f9011fbc",
      "sequence": 0,
      "tenant": "acme",
      "timestamp": 1001925,
      "trajectory_digest": "UNKNOWN",
      "transaction_id": "tx_f5d0dd760b3e09f2",
      "unknown_fields": [
       "trajectory_digest",
       "world_state_digest"
      ],
      "verifier_metadata": {
       "independently_verified": false,
       "verifiers": [
        "verify_e31.py",
        "verify_e34.py",
        "cain-verify.ts"
       ]
      },
      "world_state_digest": "UNKNOWN"
     },
     "hash": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
     "signature_b64": "LKRUKNGfKtAmpZ8VBiktmHySyMJ55aewuivxl1z8UOBWoHm1y1W2NZ9tXkn4ctpQCQNzgjATQ0brmYwRr7XzAQ=="
    }
   }
  },
  {
   "class": "identity",
   "mutation": "execution identity swapped",
   "object": {
    "env": {
     "body": {
      "action_id": "9da62d2455d14fa9ac5f2b6b3c788a2763be328231a7df7ac2b6192771867a28",
      "agent_identity": "cid_evil",
      "agent_passport_digest": "e761c174744872c901caded31262832f86d9e4364fff14910a019a95bad3da39",
      "authority_digest": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
      "authority_state": "E28_LEASE",
      "authorization_expiry": 1031325,
      "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
      "authorization_nonce": "bd205ecd9094ca4d",
      "authorization_scope": "docs/tools/op_0_4d504fe0a7af",
      "capability_state": "write",
      "capability_used": "write",
      "conformance_state": "G6",
      "context_digest": "92326ea875e55d9ead16099c269a07733aaa6fafeb0e7c1f4a820dee5d25fe6f",
      "decision_digest": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
      "delegation_chain": [
       "dlg_730136ef7cc289bed8a80feb764e9d39"
      ],
      "e8_commit_id": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
      "enforcement_boundary": "E8 ActionCommitBoundary via E25 sealed executor",
      "enforcement_result": "VERIFIED",
      "evidence_digest": "f04598bbbca5721d1da78a507a72d5c1d4f491321873b527a837766758cfbc6c",
      "evidence_references": [
       "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
       "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
       "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648"
      ],
      "execution_environment": "in-process reference adapter (E25)",
      "execution_result": "VERIFIED",
      "governance_contract_digest": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
      "governance_coverage": "d736f579ea8ff54e9c982826b9e4ba30d59713b6a1fb38ccbde70a6f8c4b9ffa",
      "grants_authority": false,
      "identity_state": "ACTIVE",
      "model_runtime_identity": "ext-model|ext-runtime",
      "model_runtime_version": "1",
      "operation_id": "op_0_4d504fe0a7af",
      "outcome_evidence": "VERIFIED",
      "outside_boundary": [
       "world state",
       "physical effects",
       "host operating system"
      ],
      "policy_digest": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "policy_version": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "previous_proof_hash": "0000000000000000000000000000000000000000000000000000000000000000",
      "proof_id": "gp_372ae0077bed4931819df8805723e382",
      "proof_status": "VERIFIED_GOVERNED",
      "proof_version": "1.0",
      "requested_effect": "7a05ebe843258b6ea4c4e44cc47c90096258ce8c6ccbb8a3241f025e59ce38fd",
      "resource_target": "docs/tools/op_0_4d504fe0a7af",
      "revocation_state": "VERIFIED",
      "risk_digest": "7095472212dd6f4c03a7b63d48e349399498af2daad63caf9bdfcc41f9011fbc",
      "sequence": 0,
      "tenant": "acme",
      "timestamp": 1001925,
      "trajectory_digest": "UNKNOWN",
      "transaction_id": "tx_f5d0dd760b3e09f2",
      "unknown_fields": [
       "trajectory_digest",
       "world_state_digest"
      ],
      "verifier_metadata": {
       "independently_verified": false,
       "verifiers": [
        "verify_e31.py",
        "verify_e34.py",
        "cain-verify.ts"
       ]
      },
      "world_state_digest": "UNKNOWN"
     },
     "hash": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
     "signature_b64": "LKRUKNGfKtAmpZ8VBiktmHySyMJ55aewuivxl1z8UOBWoHm1y1W2NZ9tXkn4ctpQCQNzgjATQ0brmYwRr7XzAQ=="
    },
    "expected": "cid_95dc19e05a3765a6abf25ca59ca41e78",
    "field": "agent_identity"
   }
  },
  {
   "class": "capability",
   "mutation": "capability swapped",
   "object": {
    "env": {
     "body": {
      "action_id": "9da62d2455d14fa9ac5f2b6b3c788a2763be328231a7df7ac2b6192771867a28",
      "agent_identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
      "agent_passport_digest": "e761c174744872c901caded31262832f86d9e4364fff14910a019a95bad3da39",
      "authority_digest": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
      "authority_state": "E28_LEASE",
      "authorization_expiry": 1031325,
      "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
      "authorization_nonce": "bd205ecd9094ca4d",
      "authorization_scope": "docs/tools/op_0_4d504fe0a7af",
      "capability_state": "write",
      "capability_used": "admin",
      "conformance_state": "G6",
      "context_digest": "92326ea875e55d9ead16099c269a07733aaa6fafeb0e7c1f4a820dee5d25fe6f",
      "decision_digest": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
      "delegation_chain": [
       "dlg_730136ef7cc289bed8a80feb764e9d39"
      ],
      "e8_commit_id": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
      "enforcement_boundary": "E8 ActionCommitBoundary via E25 sealed executor",
      "enforcement_result": "VERIFIED",
      "evidence_digest": "f04598bbbca5721d1da78a507a72d5c1d4f491321873b527a837766758cfbc6c",
      "evidence_references": [
       "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
       "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
       "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648"
      ],
      "execution_environment": "in-process reference adapter (E25)",
      "execution_result": "VERIFIED",
      "governance_contract_digest": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
      "governance_coverage": "d736f579ea8ff54e9c982826b9e4ba30d59713b6a1fb38ccbde70a6f8c4b9ffa",
      "grants_authority": false,
      "identity_state": "ACTIVE",
      "model_runtime_identity": "ext-model|ext-runtime",
      "model_runtime_version": "1",
      "operation_id": "op_0_4d504fe0a7af",
      "outcome_evidence": "VERIFIED",
      "outside_boundary": [
       "world state",
       "physical effects",
       "host operating system"
      ],
      "policy_digest": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "policy_version": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "previous_proof_hash": "0000000000000000000000000000000000000000000000000000000000000000",
      "proof_id": "gp_372ae0077bed4931819df8805723e382",
      "proof_status": "VERIFIED_GOVERNED",
      "proof_version": "1.0",
      "requested_effect": "7a05ebe843258b6ea4c4e44cc47c90096258ce8c6ccbb8a3241f025e59ce38fd",
      "resource_target": "docs/tools/op_0_4d504fe0a7af",
      "revocation_state": "VERIFIED",
      "risk_digest": "7095472212dd6f4c03a7b63d48e349399498af2daad63caf9bdfcc41f9011fbc",
      "sequence": 0,
      "tenant": "acme",
      "timestamp": 1001925,
      "trajectory_digest": "UNKNOWN",
      "transaction_id": "tx_f5d0dd760b3e09f2",
      "unknown_fields": [
       "trajectory_digest",
       "world_state_digest"
      ],
      "verifier_metadata": {
       "independently_verified": false,
       "verifiers": [
        "verify_e31.py",
        "verify_e34.py",
        "cain-verify.ts"
       ]
      },
      "world_state_digest": "UNKNOWN"
     },
     "hash": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
     "signature_b64": "LKRUKNGfKtAmpZ8VBiktmHySyMJ55aewuivxl1z8UOBWoHm1y1W2NZ9tXkn4ctpQCQNzgjATQ0brmYwRr7XzAQ=="
    },
    "expected": "write",
    "field": "capability_used"
   }
  },
  {
   "class": "authority",
   "mutation": "authority digest rewritten",
   "object": {
    "env": {
     "body": {
      "action_id": "9da62d2455d14fa9ac5f2b6b3c788a2763be328231a7df7ac2b6192771867a28",
      "agent_identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
      "agent_passport_digest": "e761c174744872c901caded31262832f86d9e4364fff14910a019a95bad3da39",
      "authority_digest": "0000000000000000000000000000000000000000000000000000000000000000",
      "authority_state": "E28_LEASE",
      "authorization_expiry": 1031325,
      "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
      "authorization_nonce": "bd205ecd9094ca4d",
      "authorization_scope": "docs/tools/op_0_4d504fe0a7af",
      "capability_state": "write",
      "capability_used": "write",
      "conformance_state": "G6",
      "context_digest": "92326ea875e55d9ead16099c269a07733aaa6fafeb0e7c1f4a820dee5d25fe6f",
      "decision_digest": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
      "delegation_chain": [
       "dlg_730136ef7cc289bed8a80feb764e9d39"
      ],
      "e8_commit_id": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
      "enforcement_boundary": "E8 ActionCommitBoundary via E25 sealed executor",
      "enforcement_result": "VERIFIED",
      "evidence_digest": "f04598bbbca5721d1da78a507a72d5c1d4f491321873b527a837766758cfbc6c",
      "evidence_references": [
       "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
       "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
       "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648"
      ],
      "execution_environment": "in-process reference adapter (E25)",
      "execution_result": "VERIFIED",
      "governance_contract_digest": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
      "governance_coverage": "d736f579ea8ff54e9c982826b9e4ba30d59713b6a1fb38ccbde70a6f8c4b9ffa",
      "grants_authority": false,
      "identity_state": "ACTIVE",
      "model_runtime_identity": "ext-model|ext-runtime",
      "model_runtime_version": "1",
      "operation_id": "op_0_4d504fe0a7af",
      "outcome_evidence": "VERIFIED",
      "outside_boundary": [
       "world state",
       "physical effects",
       "host operating system"
      ],
      "policy_digest": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "policy_version": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "previous_proof_hash": "0000000000000000000000000000000000000000000000000000000000000000",
      "proof_id": "gp_372ae0077bed4931819df8805723e382",
      "proof_status": "VERIFIED_GOVERNED",
      "proof_version": "1.0",
      "requested_effect": "7a05ebe843258b6ea4c4e44cc47c90096258ce8c6ccbb8a3241f025e59ce38fd",
      "resource_target": "docs/tools/op_0_4d504fe0a7af",
      "revocation_state": "VERIFIED",
      "risk_digest": "7095472212dd6f4c03a7b63d48e349399498af2daad63caf9bdfcc41f9011fbc",
      "sequence": 0,
      "tenant": "acme",
      "timestamp": 1001925,
      "trajectory_digest": "UNKNOWN",
      "transaction_id": "tx_f5d0dd760b3e09f2",
      "unknown_fields": [
       "trajectory_digest",
       "world_state_digest"
      ],
      "verifier_metadata": {
       "independently_verified": false,
       "verifiers": [
        "verify_e31.py",
        "verify_e34.py",
        "cain-verify.ts"
       ]
      },
      "world_state_digest": "UNKNOWN"
     },
     "hash": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
     "signature_b64": "LKRUKNGfKtAmpZ8VBiktmHySyMJ55aewuivxl1z8UOBWoHm1y1W2NZ9tXkn4ctpQCQNzgjATQ0brmYwRr7XzAQ=="
    },
    "expected": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
    "field": "authority_digest"
   }
  },
  {
   "class": "policy",
   "mutation": "policy digest rewritten",
   "object": {
    "env": {
     "body": {
      "action_id": "9da62d2455d14fa9ac5f2b6b3c788a2763be328231a7df7ac2b6192771867a28",
      "agent_identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
      "agent_passport_digest": "e761c174744872c901caded31262832f86d9e4364fff14910a019a95bad3da39",
      "authority_digest": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
      "authority_state": "E28_LEASE",
      "authorization_expiry": 1031325,
      "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
      "authorization_nonce": "bd205ecd9094ca4d",
      "authorization_scope": "docs/tools/op_0_4d504fe0a7af",
      "capability_state": "write",
      "capability_used": "write",
      "conformance_state": "G6",
      "context_digest": "92326ea875e55d9ead16099c269a07733aaa6fafeb0e7c1f4a820dee5d25fe6f",
      "decision_digest": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
      "delegation_chain": [
       "dlg_730136ef7cc289bed8a80feb764e9d39"
      ],
      "e8_commit_id": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
      "enforcement_boundary": "E8 ActionCommitBoundary via E25 sealed executor",
      "enforcement_result": "VERIFIED",
      "evidence_digest": "f04598bbbca5721d1da78a507a72d5c1d4f491321873b527a837766758cfbc6c",
      "evidence_references": [
       "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
       "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
       "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648"
      ],
      "execution_environment": "in-process reference adapter (E25)",
      "execution_result": "VERIFIED",
      "governance_contract_digest": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
      "governance_coverage": "d736f579ea8ff54e9c982826b9e4ba30d59713b6a1fb38ccbde70a6f8c4b9ffa",
      "grants_authority": false,
      "identity_state": "ACTIVE",
      "model_runtime_identity": "ext-model|ext-runtime",
      "model_runtime_version": "1",
      "operation_id": "op_0_4d504fe0a7af",
      "outcome_evidence": "VERIFIED",
      "outside_boundary": [
       "world state",
       "physical effects",
       "host operating system"
      ],
      "policy_digest": "0000000000000000000000000000000000000000000000000000000000000000",
      "policy_version": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
      "previous_proof_hash": "0000000000000000000000000000000000000000000000000000000000000000",
      "proof_id": "gp_372ae0077bed4931819df8805723e382",
      "proof_status": "VERIFIED_GOVERNED",
      "proof_version": "1.0",
      "requested_effect": "7a05ebe843258b6ea4c4e44cc47c90096258ce8c6ccbb8a3241f025e59ce38fd",
      "resource_target": "docs/tools/op_0_4d504fe0a7af",
      "revocation_state": "VERIFIED",
      "risk_digest": "7095472212dd6f4c03a7b63d48e349399498af2daad63caf9bdfcc41f9011fbc",
      "sequence": 0,
      "tenant": "acme",
      "timestamp": 1001925,
      "trajectory_digest": "UNKNOWN",
      "transaction_id": "tx_f5d0dd760b3e09f2",
      "unknown_fields": [
       "trajectory_digest",
       "world_state_digest"
      ],
      "verifier_metadata": {
       "independently_verified": false,
       "verifiers": [
        "verify_e31.py",
        "verify_e34.py",
        "cain-verify.ts"
       ]
      },
      "world_state_digest": "UNKNOWN"
     },
     "hash": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
     "signature_b64": "LKRUKNGfKtAmpZ8VBiktmHySyMJ55aewuivxl1z8UOBWoHm1y1W2NZ9tXkn4ctpQCQNzgjATQ0brmYwRr7XzAQ=="
    },
    "expected": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
    "field": "policy_digest"
   }
  },
  {
   "class": "receipt",
   "mutation": "receipt authority rewritten",
   "object": {
    "receipts": [
     {
      "body": {
       "authority": "GRANTED",
       "authority_granted": "NONE",
       "boundary": "E8 ActionCommitBoundary via E25 sealed executor",
       "capability": "write",
       "contract": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
       "decision": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
       "e8_commit": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
       "envelope": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
       "evidence": "f04598bbbca5721d1da78a507a72d5c1d4f491321873b527a837766758cfbc6c",
       "outcome": "VERIFIED",
       "policy": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
       "prev": "0000000000000000000000000000000000000000000000000000000000000000",
       "seq": 0,
       "status": "VERIFIED_GOVERNED",
       "unknown": [
        "trajectory_digest",
        "world_state_digest"
       ],
       "what": "write",
       "when": 1001925,
       "where": "docs/tools/op_0_4d504fe0a7af",
       "who": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "why": "7a05ebe843258b6ea4c4e44cc47c90096258ce8c6ccbb8a3241f025e59ce38fd"
      },
      "hash": "5ff409d469c0498cd42854a1a6d67fe5e8adb4c796229d34752a0f1e1d1e9c81",
      "signature_b64": "Z8j7wbH6smEwUz4eQQULBNjjYz3eubSrxiOojZsEqQad5E2ONIuwfJ6Oqz942oA0b7W0WMBG9eS3BGcKVyVABw=="
     },
     {
      "body": {
       "authority": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
       "authority_granted": "NONE",
       "boundary": "E8 ActionCommitBoundary via E25 sealed executor",
       "capability": "write",
       "contract": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
       "decision": "9c4d67a0de51918b748f39cf2ba13743a937743c847200136e0651157ccf9f93",
       "e8_commit": "b3ee06b415d4c00487712cdb18d80446cecc7285fdcdee9c5f5297542b639880",
       "envelope": "469b27d87a6933b8e7a280e4407e337507ff5702c528b485ab358feab435da6e",
       "evidence": "54e3907277243436b3037eecba59f900d8f2feef671c790c03d5d2cca5a37073",
       "outcome": "VERIFIED",
       "policy": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
       "prev": "5ff409d469c0498cd42854a1a6d67fe5e8adb4c796229d34752a0f1e1d1e9c81",
       "seq": 1,
       "status": "VERIFIED_GOVERNED",
       "unknown": [
        "trajectory_digest",
        "world_state_digest"
       ],
       "what": "write",
       "when": 1002825,
       "where": "docs/files/f1",
       "who": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "why": "5998309db13ba95c1c155fdb668307c1b2bf36585cc30fdb0a60a0712e1abaef"
      },
      "hash": "da6fd08e0fc176469c20cdc0d679f169123d6c34c80b86e392e8cb73a049e4ab",
      "signature_b64": "dxJCt9XIw1F0j0TF2gGIBSY3yRtNVWjBEX6IOSppVRK+y+Rq+zI86gnv22MAocLuZIafS+BOggQEaL5IxpBiBg=="
     },
     {
      "body": {
       "authority": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
       "authority_granted": "NONE",
       "boundary": "E8 ActionCommitBoundary via E25 sealed executor",
       "capability": "write",
       "contract": "2748fe0f9ef41db0eefe4a8393d76c05827536a65aa170e224cc72d04289985e",
       "decision": "720ef38ecdcc1b9ae179de1e9a6efdf0c39e986dd327b179c4c0dcd9d2a30415",
       "e8_commit": "99a665dd6f1623a9495cc9f801a09f40445c43c7b24848e6a8d0b62e35c4a19c",
       "envelope": "5a90588eabbcd82279fe663317c504d9a440c9f88e6382e5a48f36a609d3dc16",
       "evidence": "8e74ec5b9b7f70323b34edab96777de25d4d35f9c3a5d26abb9b0cf36c6d02f1",
       "outcome": "VERIFIED",
       "policy": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
       "prev": "da6fd08e0fc176469c20cdc0d679f169123d6c34c80b86e392e8cb73a049e4ab",
       "seq": 2,
       "status": "VERIFIED_GOVERNED",
       "unknown": [
        "trajectory_digest",
        "world_state_digest"
       ],
       "what": "write",
       "when": 1003725,
       "where": "docs/tools/op_2_169d8138cbb9",
       "who": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "why": "7a05ebe843258b6ea4c4e44cc47c90096258ce8c6ccbb8a3241f025e59ce38fd"
      },
      "hash": "fb024071c595206ec25571898abe01fad5539e5c8bc2ecf81bb220d33352b093",
      "signature_b64": "AArYp7kGYsNTFxgQivzUvlf13t+dq9sMHGFfEhFgah8sVlgTL1b9DYJMxzBu6VEgHJeetcPY2zLkSsfXGMBvAw=="
     }
    ]
   }
  },
  {
   "class": "primitive",
   "mutation": "authority primitive field rewritten",
   "object": {
    "body": {
     "authority": "NONE",
     "fields": {
      "authority_digest": "0000000000000000000000000000000000000000000000000000000000000000",
      "authority_state": "E28_LEASE"
     },
     "grants_authority": false,
     "primitive": "authority",
     "proof": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
     "state": "BOUND",
     "unknown_fields": []
    },
    "hash": "5a5c16827e3de869202253101d00781b741be1a128d66f1df39720f3fa710ca6",
    "pub": "cDyVlKI5s5Fo0obPvpz7z9aiuUXIvlMo2B1NFJnYzq4=",
    "signature_b64": "NORu3Ftq1Wq/xM4AgYYtP1bi0UhdkHtGrW5WbAmheAE7042ZZuc7KsHLZzBi1Si3q7I9pD7FNrV9c3ouN8Q5Ag=="
   }
  },
  {
   "class": "enforcement",
   "mutation": "enforcement stage hidden",
   "object": {
    "claimed_complete": true,
    "stages": {
     "ACTION_COMMITTED": "VERIFIED",
     "ACTION_ENFORCED": "UNKNOWN",
     "ACTION_EXECUTED": "VERIFIED",
     "AUTHORIZATION_ISSUED": "VERIFIED",
     "DECISION_MADE": "VERIFIED",
     "OUTCOME_OBSERVED": "VERIFIED"
    }
   }
  },
  {
   "class": "proof",
   "mutation": "E31 proof authority rewritten",
   "object": {
    "attachments": {
     "e25_receipt": {
      "body": {
       "adapter": "mcp",
       "at_ms": 1001325,
       "authority": "NONE",
       "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
       "decision_digest": "c826640cfb6a2a08e9c80befd347944526ca695314b0459a64d061addb9b0c8f",
       "envelope_digest": "a56b65c2bcccf37c0249c5145b3da710ee09c1ef4154027e08f9526f1e8d1bc3",
       "executor": "tool",
       "kernel_evidence": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
       "policy_digest": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
       "prev": "e76038ca3fc6c65fe8d45c6a716ad803bf60df2bc8c899719d9865bbbf10ff2b",
       "reasons": [],
       "resource": "docs/tools/op_0_4d504fe0a7af",
       "result_hash": "90be654186a6046d172945867bd5f4bf07c9b41eaff62254afa50c5fd9e4c2c4",
       "risk": 100,
       "seq": 3,
       "status": "EXECUTED",
       "tenant_id": "acme",
       "transaction_id": "tx_f5d0dd760b3e09f2",
       "under_authority": {
        "delegation_chain": [
         "dlg_9bb112a9b40fcc26d94e"
        ]
       },
       "what": {
        "capability": "write",
        "operation": "tools/call:write_record",
        "parameters_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
        "target": "docs/tools/op_0_4d504fe0a7af"
       },
       "who": {
        "agent": "integration-agent",
        "instance": "integration-agent-i5",
        "principal": "ops"
       },
       "why": {
        "intent_digest": "7c26a99eaf0ca0b5ed70fe2b309b83bb77f704c1ec5ddf1a4cf9144b8b0a558e"
       }
      },
      "receipt_hash": "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
      "result": {
       "ok": true,
       "ran": "tools/call:write_record",
       "target": "docs/tools/op_0_4d504fe0a7af"
      },
      "signature_b64": "DThYte/PJMOjz0BSYCLL6yBBBzNpQ84O3i/BNxvcZxqraOWXZkY0w7QS7MddsGSHkknBSlWmGFrOipwXPL/6BA=="
     },
     "e28_receipt": {
      "body": {
       "action_digest": "fea9fed406526f827425024546814bdc5b7afe6b7fdc9d08cb25b0ca002cc218",
       "agent_identity": "integration-agent-i5",
       "authority_digest": "45f03cea79303063311b41c3a0100a2f09704347fa2a4c8492f49a879a3456be",
       "authorization_expiry": 1031325,
       "authorization_reasons": [],
       "authorization_result": "ALLOW",
       "authorization_timestamp": 1001325,
       "cain_version": "CAIN-42/E28/1.0",
       "capability_digest": "025d169a43000ed73e0f46e947c7c362662c587a2c7f026f4b116edd8c08972b",
       "context_digest": "92326ea875e55d9ead16099c269a07733aaa6fafeb0e7c1f4a820dee5d25fe6f",
       "delegation_digest": "730136ef7cc289bed8a80feb764e9d39d0d65a868c122334542f1081a0779e7f",
       "enforcement_boundary": "E25->E8 ActionCommitBoundary",
       "evidence_references": [
        "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
        "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
        "c826640cfb6a2a08e9c80befd347944526ca695314b0459a64d061addb9b0c8f"
       ],
       "execution_identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "execution_result": "EXECUTED",
       "execution_timestamp": 1001325,
       "identity_digest": "49df727cb3ca0ef18000fe5711a43ca6849a35b01bb5d20f96b679840b81a776",
       "intent_digest": "7c26a99eaf0ca0b5ed70fe2b309b83bb77f704c1ec5ddf1a4cf9144b8b0a558e",
       "kind": "EXECUTION",
       "policy_digest": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
       "prev": "0feb7936a8562539439e9715ae0142419fca0702d6738e8ae49b03851c3f63bd",
       "request_identity": "tx_f5d0dd760b3e09f2",
       "risk_digest": "7095472212dd6f4c03a7b63d48e349399498af2daad63caf9bdfcc41f9011fbc",
       "seq": 6,
       "supersedes": "",
       "transaction_nonce": "bd205ecd9094ca4d",
       "verifier_metadata": "issuer=uq4VBqO4fFDbmo8f0xESO+NKZlSIj3D6kAPwS5U7XdU=;log_size=40"
      },
      "receipt_hash": "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
      "signature_b64": "Rfsy0eiTWSV6K2cyp3lnrL+DtAdgzv/tuxjFlUdZLBdVM4w118/GkouzxCmEuFKWyaDV/AQ2zWtiX3+aydyPDA=="
     },
     "e8_entry": {
      "action_hash": "999a2a09256cab25bade564a894c99a7f8ec1848fd9fbce805b572ea889cce0c",
      "decision": "COMMITTED",
      "enforcement_depth": "APPLICATION",
      "entry_hash": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
      "outcome": {
       "action_hash": "999a2a09256cab25bade564a894c99a7f8ec1848fd9fbce805b572ea889cce0c",
       "authority": "NONE",
       "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
       "drift": [],
       "enforcement_depth": "APPLICATION",
       "incident": false,
       "result": {
        "ok": true,
        "ran": "tools/call:write_record",
        "target": "docs/tools/op_0_4d504fe0a7af"
       },
       "result_hash": "90be654186a6046d172945867bd5f4bf07c9b41eaff62254afa50c5fd9e4c2c4",
       "ring": 3
      },
      "prev": "706ac76bb58f2ff65bdf6107c350097a4998ef93b932ccac8fbed8349e2b32dd",
      "reasons": [],
      "ring": 3,
      "seq": 3,
      "stage": "execute",
      "state": "EXECUTING"
     },
     "postcondition": {
      "body": {
       "at": 1001625,
       "observed_digest": "e791ff02c46d781b6b622cbb4aa4456fd3df070bc00da57650d61780b6dcdcd2",
       "observer": "obs",
       "proof_id": "gp_372ae0077bed4931819df8805723e382",
       "result": "MET"
      },
      "observer_pub": "1w+Am2E5ukAtjGJP+ACvbtHWRq3dIAo2oe/v1fhpk4I=",
      "signature_b64": "Qfx5HwrVV4jrQY6ZUvPSW7pqtUg7xlzYYbFP20Mh21J/Ou/1xBKQmBc6wn9TVukdNDUoDVjO5J7yvjrcd3TmDw=="
     },
     "uar": {
      "body": {
       "at": 1001325,
       "authorized_digest": "61e8d53e86ce85c0bf70221b888b0d76be2f2288b2fdafe14e001babdb83bff7",
       "decision": "ALLOW",
       "e28_receipt": "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "prev": "0000000000000000000000000000000000000000000000000000000000000000",
       "reasons": [],
       "seq": 0,
       "uma_digest": "c2ead4b8ce90f4ed5973612859f46853d7f4e9d0dc9d2da40cfac3e2ecfdcbcb"
      },
      "hash": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9",
      "signature_b64": "36bC1P1DSGWUN18gPtv/4IkmR7g5uDVmwFWZBQVLLLRonuGRIe74QRl3TBEQv3YKwlFxhXtR9s+fPh39k5+zAA==",
      "uma": {
       "action": "fea9fed406526f827425024546814bdc5b7afe6b7fdc9d08cb25b0ca002cc218",
       "authority": "24dfd014f19672a59b62abc07ab58b9b85d1c06640e143fb93f2eace4749e00e",
       "capability": "write",
       "consequence": {
        "blast_radius": 0,
        "uncertainty_milli": 0
       },
       "context": "GOVERNED",
       "delegation": "dlg_730136ef7cc289bed8a80feb764e9d39",
       "environment": "software",
       "evidence": "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "execution": "ALLOW",
       "identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "intent": "f7cfba200df2ecdec1e4972615259841dee41593479931ef7b059c90dc6df976",
       "memory": [],
       "model": "ext-model",
       "observation": [],
       "outcome": "90be654186a6046d172945867bd5f4bf07c9b41eaff62254afa50c5fd9e4c2c4",
       "policy": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
       "principal": "ops",
       "risk": 100,
       "runtime": "ext-runtime",
       "transaction": "fea9fed406526f827425024546814bdc5b7afe6b7fdc9d08cb25b0ca002cc218"
      }
     }
    },
    "proof": {
     "body": {
      "action": {
       "action_digest": "fea9fed406526f827425024546814bdc5b7afe6b7fdc9d08cb25b0ca002cc218",
       "binding": "9da62d2455d14fa9ac5f2b6b3c788a2763be328231a7df7ac2b6192771867a28",
       "capability": "write",
       "destination": "docs/tools/op_0_4d504fe0a7af",
       "operation": "tools/call:write_record",
       "uma_authorized_digest": "61e8d53e86ce85c0bf70221b888b0d76be2f2288b2fdafe14e001babdb83bff7"
      },
      "authority": {
       "authority_digest": "0000000000000000000000000000000000000000000000000000000000000000",
       "autonomy_level": 5,
       "delegation": "dlg_730136ef7cc289bed8a80feb764e9d39",
       "delegation_digest": "730136ef7cc289bed8a80feb764e9d39d0d65a868c122334542f1081a0779e7f"
      },
      "authority_granted": "NONE",
      "authorization": {
       "authorization_expiry": 1031325,
       "authorization_id": "gat_de8594b3a4abc8acdf74ea97",
       "authorized_at": 1001325,
       "decision": "ALLOW",
       "nonce": "bd205ecd9094ca4d"
      },
      "context": {
       "autonomy_state": "GOVERNED",
       "context_digest": "92326ea875e55d9ead16099c269a07733aaa6fafeb0e7c1f4a820dee5d25fe6f",
       "trajectory": "UNKNOWN",
       "world_state_version": "UNKNOWN"
      },
      "enforcement": {
       "boundary": "E25->E8 ActionCommitBoundary",
       "e8_action_hash": "999a2a09256cab25bade564a894c99a7f8ec1848fd9fbce805b572ea889cce0c",
       "e8_entry_hash": "b8d518ece2882622fd71a736876e4e408e3b23027443f5667d62da8e4c707648",
       "enforcement_depth": "APPLICATION"
      },
      "evidence": {
       "e28_receipt_hash": "eece124c10f536413e0557733c1fc830f83aa9a8747cd967569e78cdb66da8b7",
       "evidence_root": "f04598bbbca5721d1da78a507a72d5c1d4f491321873b527a837766758cfbc6c",
       "uar_hash": "922036841c7a6b22f7e529b16ab7ae7d75a480b25ea0afac4df8ef7be67559d9"
      },
      "execution": {
       "e25_receipt_hash": "c05732b1168be6a3013544737831555ed36f2d1c3a0de833ebd5291a52845952",
       "result_hash": "90be654186a6046d172945867bd5f4bf07c9b41eaff62254afa50c5fd9e4c2c4",
       "status": "EXECUTED"
      },
      "grants_authority": false,
      "header": {
       "alg": "Ed25519",
       "canonicalization": "cain-json-v1",
       "domain": "CAIN42/E31-GOVERNANCE-PROOF/v1",
       "hash": "SHA-256",
       "kid": "6e1a40f4c4f79375",
       "schema": "cain.gip.governance-proof",
       "version": "1.0"
      },
      "layers_claimed": {
       "AUTHORIZATION": "VERIFIED",
       "DECISION": "VERIFIED",
       "ENFORCEMENT": "VERIFIED",
       "EXECUTION": "VERIFIED",
       "OUTCOME": "UNKNOWN"
      },
      "lifecycle": [
       "PROPOSED",
       "EVALUATED",
       "AUTHORIZED",
       "COMMITTED",
       "EXECUTED"
      ],
      "outcome": {
       "postcondition": "UNKNOWN"
      },
      "policy": {
       "policy_digest": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c",
       "policy_version": "10f1396306a1da5f1d3055dd101e18aa10170ba7c8b88c30550084cc23affd8c"
      },
      "revocation": {
       "identity_status_at_issue": "ACTIVE",
       "log_size_at_issue": 0
      },
      "risk": {
       "consequence": {
        "blast_radius": 0,
        "uncertainty_milli": 0
       },
       "risk_digest": "7095472212dd6f4c03a7b63d48e349399498af2daad63caf9bdfcc41f9011fbc",
       "risk_milli": 100
      },
      "status": "PARTIALLY_VERIFIED",
      "subject": {
       "agent": "integration-agent-i5",
       "execution_identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "identity_digest": "49df727cb3ca0ef18000fe5711a43ca6849a35b01bb5d20f96b679840b81a776",
       "lineage": [
        "ops"
       ],
       "model": "ext-model",
       "principal": "ops",
       "runtime": "ext-runtime"
      },
      "validity": {
       "expires_at": 4601325,
       "issued_at": 1001325
      }
     },
     "proof_hash": "372ae0077bed4931819df8805723e3824a8d9054f3fb7d9524644fd1b5117e85",
     "proof_id": "gp_372ae0077bed4931819df8805723e382",
     "signature_b64": "FA0HSIaxrlkk99X0/KMsp1nrTEoIHlSQn+qZJ/6+uQ8sf6AhKMgJ+B7/jHGVV/8m6ATuTDe2OULSCRxVC0Y9Cg=="
    }
   }
  },
  {
   "class": "delegation",
   "mutation": "delegation chain grants authority",
   "object": {
    "body": {
     "authority_granted": "FULL",
     "links": [
      {
       "attenuated": null,
       "child": "cid_95dc19e05a3765a6abf25ca59ca41e78",
       "parent": "ops",
       "parent_constraints": null,
       "revoked": false,
       "signer_pub": "4rLp7sKZ4oYqMIHYKBhfuRhxsn1vaR1BZYpTlf8AVJw=",
       "token": "dlg_730136ef7cc289bed8a80feb764e9d39",
       "token_body": {
        "authority": "NONE",
        "constraints": {
         "capabilities": [
          "configure",
          "create",
          "execute",
          "list",
          "notify",
          "observe",
          "query",
          "read",
          "send",
          "submit",
          "write"
         ],
         "data_scopes": [
          "internal"
         ],
         "downstream_delegation": true,
         "economic_budget": 100000,
         "expires_at": 87400020,
         "max_autonomy_ms": 86400000,
         "max_depth": 3,
         "max_executions": 1000,
         "max_transaction_value": 10000,
         "not_before": 1000020,
         "org_scopes": [
          "self"
         ],
         "regions": [
          "eu",
          "us"
         ],
         "resources": [
          "db/",
          "docs/",
          "mail/",
          "svc/"
         ],
         "risk_ceiling": 500,
         "subagent_creation": true,
         "tools": [
          "*"
         ]
        },
        "delegate": "cid_95dc19e05a3765a6abf25ca59ca41e78",
        "delegator": "ops",
        "depth": 0,
        "issued_at": 1000020,
        "nonce": "094795fcb8d132d0",
        "parent": ""
       },
       "token_signature_b64": "7C00fQ3ybW1n8yaGVUdKkKWiav8r+H2s4ZGTzIJkmEcBVO6yhWSwgTZOkwOilyjsyyXdZk75MDjeHYEb/IDYCA=="
      }
     ],
     "root": "ops",
     "subject": "cid_95dc19e05a3765a6abf25ca59ca41e78"
    },
    "hash": "d0ffc023a0c318d6f357b64a168f7b486d7526611d6a7b70e3111384310f535e",
    "pub": "5zPmNG7cUQ2APaAP+ZQktwEhc0JHZvFy6ONMqox7bWA=",
    "signature_b64": "KNzWwivE8Jqi9IfmRObwW3xZ7R1WdGrTbO4Wmqb6XrgP/rDpZZcWkVgzVOlo+ExgLd1X+mmpshs4tLnTLJqJCA=="
   }
  },
  {
   "class": "coverage",
   "mutation": "coverage upgraded to universal",
   "object": {
    "report": {
     "authority": "NONE",
     "bypassable": 0,
     "enforcement_coverage_milli": 472,
     "governed": 17,
     "monitored": 2,
     "partially_governed": 13,
     "proof_coverage_milli": 472,
     "surfaces": {
      "a2a": {
       "basis": "E25 a2a adapter -> E8 (in-process)",
       "class": "ENFORCED"
      },
      "autonomous_loops": {
       "basis": "each loop action is governed; the loop itself is not bounded in time",
       "class": "MONITORED"
      },
      "browser": {
       "basis": "reference adapter only",
       "class": "PARTIALLY_ENFORCED"
      },
      "capability_acquisition": {
       "basis": "E29 capability passports need a real conformance run",
       "class": "PARTIALLY_ENFORCED"
      },
      "ci_cd": {
       "basis": "no CI/CD integration",
       "class": "UNCONTROLLED"
      },
      "cli": {
       "basis": "E25 cli adapter -> E8",
       "class": "ENFORCED"
      },
      "cloud_apis": {
       "basis": "reference adapter only",
       "class": "PARTIALLY_ENFORCED"
      },
      "code_modification": {
       "basis": "no source-control integration",
       "class": "UNKNOWN"
      },
      "computer_use": {
       "basis": "reference adapter; no real desktop",
       "class": "PARTIALLY_ENFORCED"
      },
      "containers": {
       "basis": "E25 container adapter",
       "class": "PARTIALLY_ENFORCED"
      },
      "credentials": {
       "basis": "E25 broker: agent never holds raw secret (in-process)",
       "class": "PARTIALLY_ENFORCED"
      },
      "databases": {
       "basis": "E25 database adapter",
       "class": "ENFORCED"
      },
      "delegation": {
       "basis": "E28 attenuated delegation",
       "class": "ENFORCED"
      },
      "deployment": {
       "basis": "E29 software promotion gate; no real CI/CD",
       "class": "PARTIALLY_ENFORCED"
      },
      "event_bus": {
       "basis": "E25 event_stream adapter",
       "class": "ENFORCED"
      },
      "filesystem": {
       "basis": "E25 filesystem adapter",
       "class": "ENFORCED"
      },
      "financial_transactions": {
       "basis": "E29 sealed treasury; synthetic units, no payment rail",
       "class": "PARTIALLY_ENFORCED"
      },
      "grpc": {
       "basis": "E25 grpc adapter -> E8",
       "class": "ENFORCED"
      },
      "http": {
       "basis": "E25 http adapter -> E8",
       "class": "ENFORCED"
      },
      "machine_contracts": {
       "basis": "E29 signed contract lifecycle",
       "class": "ENFORCED"
      },
      "mcp": {
       "basis": "E25 mcp adapter -> E8 (in-process); MCPGate is the hosted MCP boundary",
       "class": "ENFORCED"
      },
      "memory_mutation": {
       "basis": "E33 sealed memory writer inside E8",
       "class": "ENFORCED"
      },
      "model_replacement": {
       "basis": "E32 swap governance: authority voided until re-authorization",
       "class": "ENFORCED"
      },
      "physical_actuators": {
       "basis": "physical environments are refused, not governed",
       "class": "UNCONTROLLED"
      },
      "plugin_installation": {
       "basis": "E33 marketplace: provenance + propose-only permissions",
       "class": "PARTIALLY_ENFORCED"
      },
      "policy_mutation": {
       "basis": "E32 promotion gate (human signature)",
       "class": "ENFORCED"
      },
      "research_experiments": {
       "basis": "E32 sandbox; no external lab",
       "class": "MONITORED"
      },
      "rest": {
       "basis": "E25 http adapter (rest alias) -> E8",
       "class": "ENFORCED"
      },
      "scheduled_jobs": {
       "basis": "message_queue adapter only",
       "class": "PARTIALLY_ENFORCED"
      },
      "secrets": {
       "basis": "E32 secret patterns in overlay; recall on unknown formats UNKNOWN",
       "class": "PARTIALLY_ENFORCED"
      },
      "self_improvement": {
       "basis": "E32 governed learning (restrict-only)",
       "class": "ENFORCED"
      },
      "shell": {
       "basis": "E25 shell adapter; arbitrary shell not sandboxed",
       "class": "PARTIALLY_ENFORCED"
      },
      "skill_installation": {
       "basis": "E14/E29 capability conformance; no skill runtime",
       "class": "PARTIALLY_ENFORCED"
      },
      "subagents": {
       "basis": "E28 spawn inside E8 (E33 sealed executor)",
       "class": "ENFORCED"
      },
      "vehicle_robot_boundaries": {
       "basis": "no vehicle or robot integration",
       "class": "UNCONTROLLED"
      },
      "websocket": {
       "basis": "E25 websocket adapter -> E8",
       "class": "ENFORCED"
      }
     },
     "total": 36,
     "uncontrolled": 3,
     "universal": true,
     "unknown": 1
    }
   }
  },
  {
   "class": "conformance",
   "mutation": "local test claims G7",
   "object": {
    "level": "G7",
    "measured": false
   }
  },
  {
   "class": "certificate",
   "mutation": "certificate claims safety",
   "object": {
    "body": {
     "claims": [
      "safe ai"
     ],
     "conformance_level": "G6",
     "evidence_root": "54c5eabdec4e37c693f820a61e87db4eacf9a76590dd1b01a3d977bf46e5190f",
     "expiration": 2593000025,
     "governance_profile": "agent",
     "grants_authority": false,
     "identity": "cid_95dc19e05a3765a6abf25ca59ca41e78",
     "is_safety_certification": false,
     "limitations": [
      "An in-process TESTED library; not hosted. The proof fabric composes E25/E28/E30/E31/E33 but is not wired into the hosted gateway, MCPGate or the clusters.",
      "Zero-knowledge proofs are NOT implemented (RESEARCH/PLANNED). Selective disclosure uses salted hash commitments and RFC 6962 Merkle inclusion proofs, not ZK.",
      "Interchange protocols are E25 reference adapters; no network wire implementation of MCP/A2A/gRPC exists here. Physical and vehicle/robot boundaries are refused, not governed.",
      "The Proof Exchange, federation, marketplace and governance cloud are library surfaces only: no external counterparty, no federation peer and no deployed cloud exist."
     ],
     "proof_profile": "GovernanceProofEnvelope v1",
     "protocols": [
      "a2a",
      "browser",
      "cli",
      "cloud_api",
      "computer_use",
      "event_bus"
     ],
     "revocation_endpoint": "inprocess://revocation",
     "subject": "cid_95dc19e05a3765a6abf25ca59ca41e78",
     "test_suite_version": "e34-suite-v1",
     "unknown_fields": [
      "world_state",
      "hardware_attestation"
     ],
     "verifier_version": "verify_e34.py",
     "version": "E34-1.0"
    },
    "certificate_id": "cert34_65300c9eabb90e03f934744d",
    "hash": "65300c9eabb90e03f934744d279e739443147afe981e3ac74e772d208ba98485",
    "pub": "nd4RJiijDE+ssxWfZ5rDR1CUOsJJISAbj//6uf5KqVA=",
    "signature_b64": "UzAzFlvxY72S54ZcyUTexgKC5k1fIf08if1TWjB/4N1hrX+pf149uLnw6jXbwoE0QiTrVosCpORUhU2CIET1Cw=="
   }
  },
  {
   "class": "contract",
   "mutation": "contract creates authority",
   "object": {
    "body": {
     "authority_created": true,
     "lifecycle": [
      "DISCOVER",
      "IDENTIFY",
      "ATTEST",
      "NEGOTIATE",
      "CONSTRAIN",
      "AUTHORIZE",
      "EXECUTE",
      "PROVE",
      "VERIFY",
      "SETTLE",
      "REASSESS",
      "RENEW_OR_REVOKE"
     ],
     "limits": {
      "budget": [
       "ok"
      ],
      "capability": [
       "read"
      ],
      "evidence": [
       "ok"
      ],
      "geographic": [
       "ok"
      ],
      "human_approval": [
       "ok"
      ],
      "model_runtime": [
       "ok"
      ],
      "multi_party_approval": [
       "ok"
      ],
      "organizational": [
       "ok"
      ],
      "resource": [
       "ok"
      ],
      "scope": [
       "ok"
      ],
      "time": [
       "ok"
      ],
      "trajectory": [
       "ok"
      ],
      "transaction": [
       "ok"
      ]
     },
     "not_after": 1001000025,
     "parties": [
      "cid_95dc19e05a3765a6abf25ca59ca41e78"
     ]
    }
   }
  },
  {
   "class": "handshake",
   "mutation": "handshake returns authority",
   "object": {
    "body": {
     "authority_created": true,
     "result": "GOVERNANCE_ESTABLISHED"
    }
   }
  },
  {
   "class": "federation",
   "mutation": "foreign authority crosses the domain",
   "object": {
    "authority_crossed_domain_automatically": true
   }
  },
  {
   "class": "edge",
   "mutation": "partitioned edge node allows",
   "object": {
    "allow_locally": true
   }
  },
  {
   "class": "immune",
   "mutation": "immune response incomplete but claimed complete",
   "object": {
    "claimed_complete": true,
    "steps": [
     {
      "ok": true,
      "step": "DETECT"
     }
    ]
   }
  },
  {
   "class": "replay",
   "mutation": "replay claims no drift",
   "object": {
    "changed_diff": []
   }
  },
  {
   "class": "truth",
   "mutation": "truth scanner flags nothing",
   "object": {
    "flags": []
   }
  },
  {
   "class": "dataplane",
   "mutation": "tampered event chain reported clean",
   "object": {
    "problems": [
     "event[0]"
    ]
   }
  },
  {
   "class": "disclosure",
   "mutation": "disclosed value substituted",
   "object": {
    "issuer_pub": "6QKgIY4yMMf0NsQGeLgoMeY4w5Vq35WSofyhAc1AxgY=",
    "package": {
     "commitment": {
      "body": {
       "envelope": "35dca36caf3cfedab903c9c55926f988aead1c15bbd41f938542b725d78d253c",
       "fields": [
        "action_id",
        "agent_identity",
        "agent_passport_digest",
        "authority_digest",
        "authority_state",
        "authorization_expiry",
        "authorization_id",
        "authorization_nonce",
        "authorization_scope",
        "capability_state",
        "capability_used",
        "conformance_state",
        "context_digest",
        "decision_digest",
        "delegation_chain",
        "e8_commit_id",
        "enforcement_boundary",
        "enforcement_result",
        "evidence_digest",
        "evidence_references",
        "execution_environment",
        "execution_result",
        "governance_contract_digest",
        "governance_coverage",
        "grants_authority",
        "identity_state",
        "model_runtime_identity",
        "model_runtime_version",
        "operation_id",
        "outcome_evidence",
        "outside_boundary",
        "policy_digest",
        "policy_version",
        "previous_proof_hash",
        "proof_id",
        "proof_status",
        "proof_version",
        "requested_effect",
        "resource_target",
        "revocation_state",
        "risk_digest",
        "sequence",
        "tenant",
        "timestamp",
        "trajectory_digest",
        "transaction_id",
        "verifier_metadata",
        "world_state_digest"
       ],
       "n": 48,
       "root": "687f30efffb70ddec7b4d546c0e73d79ba0d109772f7f0c3c0bae716c18f2356"
      },
      "pub": "6QKgIY4yMMf0NsQGeLgoMeY4w5Vq35WSofyhAc1AxgY=",
      "signature_b64": "xHpNTGMNkSw17gNDV1hvTduZ9txWmEj/fSTy8ojhKrC8m75KGfFU3XW7hgfg2TaLQaL4IpxpkLS45dOIZI9wAQ=="
     },
     "disclosed": [
      {
       "field": "agent_identity",
       "index": 1,
       "path": [
        "e4a6b7f0f0cbe1a0d2a7cb88b2135ea554a489af65a2a3ee8ee7b34b5503c054",
        "eb1eedee127f70e39423e82a485aab060722b2b8fa441bbf13bf0c098c124011",
        "0b9a6630ca7234f2ae711a1d4c631b396c84795495fc9fa76711e424c9d42149",
        "5ecfc8bbfd657dce69b84e4128a447b95c1fd644f743334f9e49a19085936142",
        "88f80c1be8b9adaf20c226595c91f6ff955988ca157c378a9c70fc03ffe11d34",
        "bb8b1aa81bf6a5dfd36298ff96243d1292f7f32228d277343b347be2124008cd"
       ],
       "salt": "f1c876ec6e954be7f0496a08fe8f04fc",
       "value": "EVIL"
      }
     ]
    }
   }
  }
 ],
 "schema": "cain42.e34.malicious.v1"
}
