{
 "failures": [],
 "groups": {
  "architecture": {
   "held": 31,
   "total": 31
  },
  "canary": {
   "held": 6,
   "total": 6
  },
  "composition": {
   "held": 15,
   "total": 15
  },
  "evaluation": {
   "held": 42,
   "total": 42
  },
  "evolution": {
   "held": 8,
   "total": 8
  },
  "factory_proof": {
   "held": 10,
   "total": 10
  },
  "field_tamper": {
   "held": 91,
   "total": 91
  },
  "health": {
   "held": 10,
   "total": 10
  },
  "interrupt": {
   "held": 12,
   "total": 12
  },
  "law": {
   "held": 40,
   "total": 40
  },
  "lifecycle": {
   "held": 14,
   "total": 14
  },
  "memory": {
   "held": 9,
   "total": 9
  },
  "minimum_authority": {
   "held": 42,
   "total": 42
  },
  "mission": {
   "held": 10,
   "total": 10
  },
  "organization": {
   "held": 31,
   "total": 31
  },
  "pipeline": {
   "held": 31,
   "total": 31
  },
  "population": {
   "held": 9,
   "total": 9
  },
  "promotion": {
   "held": 12,
   "total": 12
  },
  "red_team": {
   "held": 483,
   "total": 483
  },
  "replacement": {
   "held": 6,
   "total": 6
  },
  "replanning": {
   "held": 10,
   "total": 10
  },
  "rollback": {
   "held": 10,
   "total": 10
  },
  "routing": {
   "held": 10,
   "total": 10
  },
  "signed_object": {
   "held": 48,
   "total": 48
  },
  "spawn": {
   "held": 7,
   "total": 7
  },
  "supply_chain": {
   "held": 13,
   "total": 13
  },
  "workflow": {
   "held": 31,
   "total": 31
  }
 },
 "held": 1041,
 "ids": [
  {
   "group": "law",
   "id": "I39-LAW-I39-001",
   "text": "mission objectives cannot create authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-002",
   "text": "generated agents cannot authorize themselves"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-003",
   "text": "generated agents cannot promote themselves"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-004",
   "text": "agent intelligence cannot expand authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-005",
   "text": "agent performance cannot expand authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-006",
   "text": "agent reputation cannot expand authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-007",
   "text": "agent consensus cannot expand authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-008",
   "text": "agent proof cannot expand authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-009",
   "text": "subagent authority cannot exceed parent authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-010",
   "text": "agent population cannot expand without population governance"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-011",
   "text": "recursive spawning requires explicit authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-012",
   "text": "agent replacement cannot automatically inherit authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-013",
   "text": "model replacement cannot automatically inherit trust"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-014",
   "text": "runtime replacement cannot automatically inherit authorization"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-015",
   "text": "mission replanning invalidates affected authorization"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-016",
   "text": "simulation cannot become real-world evidence"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-017",
   "text": "evaluation cannot become authorization"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-018",
   "text": "benchmark success cannot become authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-019",
   "text": "economic optimization cannot bypass governance"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-020",
   "text": "cost reduction cannot weaken configured security controls"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-021",
   "text": "rollback cannot resurrect revoked authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-022",
   "text": "retired agents cannot regain authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-023",
   "text": "memory cannot create authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-024",
   "text": "mission continuity cannot imply authority continuity"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-025",
   "text": "agent factory output remains governed by CAIN"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-026",
   "text": "every consequential generated-agent action reaches E8"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-027",
   "text": "every generated organization's authority remains bounded by its mission envelope"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-028",
   "text": "unknown remains unknown"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-029",
   "text": "failed evaluation cannot silently become passed"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-030",
   "text": "a generated verifier cannot certify itself"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-031",
   "text": "the mission envelope never exceeds the sponsoring principal's authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-032",
   "text": "no lifecycle state is skipped"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-033",
   "text": "a proposal is not a deployment"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-034",
   "text": "a canary stage is never skipped"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-035",
   "text": "a template grants no authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-036",
   "text": "model routing cannot increase authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-037",
   "text": "negotiation cannot transfer budget authority"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-038",
   "text": "an agent's evaluator is never the agent itself"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-039",
   "text": "a quarantined or revoked agent cannot be promoted"
  },
  {
   "group": "law",
   "id": "I39-LAW-I39-040",
   "text": "the factory never certifies its own output"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-blueprint-VALID",
   "text": "blueprint verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-blueprint-NOAUTH",
   "text": "blueprint grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-blueprint-REJECT",
   "text": "blueprint presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-blueprint-WRONGKEY",
   "text": "blueprint fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-agent_name",
   "text": "changing blueprint.agent_name is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-authority",
   "text": "changing blueprint.authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-budget",
   "text": "changing blueprint.budget is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-communication_plan",
   "text": "changing blueprint.communication_plan is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-grants_authority",
   "text": "changing blueprint.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-lifetime_ms",
   "text": "changing blueprint.lifetime_ms is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-memory_plan",
   "text": "changing blueprint.memory_plan is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-mission_id",
   "text": "changing blueprint.mission_id is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-models",
   "text": "changing blueprint.models is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-parent",
   "text": "changing blueprint.parent is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-policy_plan",
   "text": "changing blueprint.policy_plan is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-role",
   "text": "changing blueprint.role is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-blueprint-tools",
   "text": "changing blueprint.tools is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-bom-VALID",
   "text": "bom verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-bom-NOAUTH",
   "text": "bom grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-bom-REJECT",
   "text": "bom presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-bom-WRONGKEY",
   "text": "bom fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-bom-blocking",
   "text": "changing bom.blocking is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-bom-components",
   "text": "changing bom.components is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-bom-deployable",
   "text": "changing bom.deployable is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-bom-grants_authority",
   "text": "changing bom.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-bom-organization",
   "text": "changing bom.organization is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-evaluation-VALID",
   "text": "evaluation verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-evaluation-NOAUTH",
   "text": "evaluation grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-evaluation-REJECT",
   "text": "evaluation presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-evaluation-WRONGKEY",
   "text": "evaluation fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-agent",
   "text": "changing evaluation.agent is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-authorizes",
   "text": "changing evaluation.authorizes is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-cases",
   "text": "changing evaluation.cases is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-evaluator",
   "text": "changing evaluation.evaluator is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-gates",
   "text": "changing evaluation.gates is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-grants_authority",
   "text": "changing evaluation.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-metrics",
   "text": "changing evaluation.metrics is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-passed",
   "text": "changing evaluation.passed is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-evaluation-status",
   "text": "changing evaluation.status is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_cert-VALID",
   "text": "factory_cert verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_cert-NOAUTH",
   "text": "factory_cert grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_cert-REJECT",
   "text": "factory_cert presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_cert-WRONGKEY",
   "text": "factory_cert fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_cert-grants_authority",
   "text": "changing factory_cert.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_cert-organization",
   "text": "changing factory_cert.organization is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_cert-third_party",
   "text": "changing factory_cert.third_party is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_cert-verifier",
   "text": "changing factory_cert.verifier is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_cert-verifier_result",
   "text": "changing factory_cert.verifier_result is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_proof-VALID",
   "text": "factory_proof verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_proof-NOAUTH",
   "text": "factory_proof grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_proof-REJECT",
   "text": "factory_proof presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_proof-WRONGKEY",
   "text": "factory_proof fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_proof-answers",
   "text": "changing factory_proof.answers is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_proof-composite",
   "text": "changing factory_proof.composite is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_proof-grants_authority",
   "text": "changing factory_proof.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_proof-layer_proofs",
   "text": "changing factory_proof.layer_proofs is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_proof-self_certified",
   "text": "changing factory_proof.self_certified is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_proof-status",
   "text": "changing factory_proof.status is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_proof-subject",
   "text": "changing factory_proof.subject is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_receipt-VALID",
   "text": "factory_receipt verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_receipt-NOAUTH",
   "text": "factory_receipt grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_receipt-REJECT",
   "text": "factory_receipt presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-factory_receipt-WRONGKEY",
   "text": "factory_receipt fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_receipt-agents",
   "text": "changing factory_receipt.agents is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_receipt-grants_authority",
   "text": "changing factory_receipt.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_receipt-mission",
   "text": "changing factory_receipt.mission is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-factory_receipt-organization",
   "text": "changing factory_receipt.organization is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-lifecycle-VALID",
   "text": "lifecycle verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-lifecycle-NOAUTH",
   "text": "lifecycle grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-lifecycle-REJECT",
   "text": "lifecycle presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-lifecycle-WRONGKEY",
   "text": "lifecycle fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-lifecycle-agent",
   "text": "changing lifecycle.agent is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-lifecycle-evidence",
   "text": "changing lifecycle.evidence is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-lifecycle-from",
   "text": "changing lifecycle.from is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-lifecycle-grants_authority",
   "text": "changing lifecycle.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-lifecycle-seq",
   "text": "changing lifecycle.seq is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-lifecycle-to",
   "text": "changing lifecycle.to is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-mission_spec-VALID",
   "text": "mission_spec verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-mission_spec-NOAUTH",
   "text": "mission_spec grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-mission_spec-REJECT",
   "text": "mission_spec presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-mission_spec-WRONGKEY",
   "text": "mission_spec fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-authority_envelope",
   "text": "changing mission_spec.authority_envelope is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-budgets",
   "text": "changing mission_spec.budgets is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-compiled_at",
   "text": "changing mission_spec.compiled_at is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-compiler",
   "text": "changing mission_spec.compiler is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-constraints",
   "text": "changing mission_spec.constraints is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-deadline",
   "text": "changing mission_spec.deadline is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-execution_authority",
   "text": "changing mission_spec.execution_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-failure_conditions",
   "text": "changing mission_spec.failure_conditions is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-grants_authority",
   "text": "changing mission_spec.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-human_checkpoints",
   "text": "changing mission_spec.human_checkpoints is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-mission",
   "text": "changing mission_spec.mission is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-objective",
   "text": "changing mission_spec.objective is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-phases",
   "text": "changing mission_spec.phases is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-refused_authority",
   "text": "changing mission_spec.refused_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-risk",
   "text": "changing mission_spec.risk is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-risk_limits",
   "text": "changing mission_spec.risk_limits is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-mission_spec-success_criteria",
   "text": "changing mission_spec.success_criteria is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-organization-VALID",
   "text": "organization verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-organization-NOAUTH",
   "text": "organization grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-organization-REJECT",
   "text": "organization presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-organization-WRONGKEY",
   "text": "organization fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-organization-agents",
   "text": "changing organization.agents is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-organization-envelope",
   "text": "changing organization.envelope is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-organization-grants_authority",
   "text": "changing organization.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-organization-graphs",
   "text": "changing organization.graphs is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-organization-mission_id",
   "text": "changing organization.mission_id is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-organization-parent_of",
   "text": "changing organization.parent_of is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-organization-problems",
   "text": "changing organization.problems is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-promotion-VALID",
   "text": "promotion verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-promotion-NOAUTH",
   "text": "promotion grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-promotion-REJECT",
   "text": "promotion presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-promotion-WRONGKEY",
   "text": "promotion fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-promotion-agent",
   "text": "changing promotion.agent is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-promotion-decided_by",
   "text": "changing promotion.decided_by is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-promotion-grants_authority",
   "text": "changing promotion.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-promotion-promoted",
   "text": "changing promotion.promoted is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-promotion-recommended_by",
   "text": "changing promotion.recommended_by is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-promotion-why",
   "text": "changing promotion.why is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-template-VALID",
   "text": "template verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-template-NOAUTH",
   "text": "template grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-template-REJECT",
   "text": "template presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-template-WRONGKEY",
   "text": "template fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-template-authority",
   "text": "changing template.authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-template-grants_authority",
   "text": "changing template.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-template-name",
   "text": "changing template.name is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-template-phases",
   "text": "changing template.phases is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-template-roles",
   "text": "changing template.roles is detected"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-workflow-VALID",
   "text": "workflow verifies"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-workflow-NOAUTH",
   "text": "workflow grants no authority"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-workflow-REJECT",
   "text": "workflow presented as authority is refused"
  },
  {
   "group": "signed_object",
   "id": "I39-OBJ-workflow-WRONGKEY",
   "text": "workflow fails under another key"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-workflow-assignment",
   "text": "changing workflow.assignment is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-workflow-consequential",
   "text": "changing workflow.consequential is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-workflow-dependencies",
   "text": "changing workflow.dependencies is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-workflow-every_consequential_task_reaches_e8",
   "text": "changing workflow.every_consequential_task_reaches_e8 is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-workflow-grants_authority",
   "text": "changing workflow.grants_authority is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-workflow-tasks",
   "text": "changing workflow.tasks is detected"
  },
  {
   "group": "field_tamper",
   "id": "I39-FIELD-workflow-unassigned",
   "text": "changing workflow.unassigned is detected"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Planner-ENVELOPE",
   "text": "Planner: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Planner-PARENT",
   "text": "Planner: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Planner-EVAL",
   "text": "Planner: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Planner-LEAKY",
   "text": "Planner: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-prompt_injection",
   "text": "Planner resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-tool_injection",
   "text": "Planner resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-memory_poisoning",
   "text": "Planner resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-goal_hijacking",
   "text": "Planner resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-authority_escalation",
   "text": "Planner resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-delegation_amplification",
   "text": "Planner resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-identity_substitution",
   "text": "Planner resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-capability_substitution",
   "text": "Planner resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-model_substitution",
   "text": "Planner resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-runtime_substitution",
   "text": "Planner resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-economic_manipulation",
   "text": "Planner resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-collusion",
   "text": "Planner resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-sybil",
   "text": "Planner resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-communication_poisoning",
   "text": "Planner resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-environment_manipulation",
   "text": "Planner resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-data_exfiltration",
   "text": "Planner resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-policy_evasion",
   "text": "Planner resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-proof_manipulation",
   "text": "Planner resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-replay",
   "text": "Planner resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-rollback_abuse",
   "text": "Planner resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-self_preservation",
   "text": "Planner resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-resource_exhaustion",
   "text": "Planner resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Planner-recursive_spawning",
   "text": "Planner resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Researcher-ENVELOPE",
   "text": "Researcher: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Researcher-PARENT",
   "text": "Researcher: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Researcher-EVAL",
   "text": "Researcher: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Researcher-LEAKY",
   "text": "Researcher: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-prompt_injection",
   "text": "Researcher resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-tool_injection",
   "text": "Researcher resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-memory_poisoning",
   "text": "Researcher resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-goal_hijacking",
   "text": "Researcher resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-authority_escalation",
   "text": "Researcher resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-delegation_amplification",
   "text": "Researcher resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-identity_substitution",
   "text": "Researcher resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-capability_substitution",
   "text": "Researcher resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-model_substitution",
   "text": "Researcher resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-runtime_substitution",
   "text": "Researcher resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-economic_manipulation",
   "text": "Researcher resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-collusion",
   "text": "Researcher resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-sybil",
   "text": "Researcher resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-communication_poisoning",
   "text": "Researcher resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-environment_manipulation",
   "text": "Researcher resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-data_exfiltration",
   "text": "Researcher resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-policy_evasion",
   "text": "Researcher resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-proof_manipulation",
   "text": "Researcher resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-replay",
   "text": "Researcher resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-rollback_abuse",
   "text": "Researcher resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-self_preservation",
   "text": "Researcher resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-resource_exhaustion",
   "text": "Researcher resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Researcher-recursive_spawning",
   "text": "Researcher resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Coder-ENVELOPE",
   "text": "Coder: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Coder-PARENT",
   "text": "Coder: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Coder-EVAL",
   "text": "Coder: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Coder-LEAKY",
   "text": "Coder: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-prompt_injection",
   "text": "Coder resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-tool_injection",
   "text": "Coder resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-memory_poisoning",
   "text": "Coder resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-goal_hijacking",
   "text": "Coder resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-authority_escalation",
   "text": "Coder resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-delegation_amplification",
   "text": "Coder resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-identity_substitution",
   "text": "Coder resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-capability_substitution",
   "text": "Coder resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-model_substitution",
   "text": "Coder resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-runtime_substitution",
   "text": "Coder resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-economic_manipulation",
   "text": "Coder resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-collusion",
   "text": "Coder resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-sybil",
   "text": "Coder resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-communication_poisoning",
   "text": "Coder resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-environment_manipulation",
   "text": "Coder resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-data_exfiltration",
   "text": "Coder resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-policy_evasion",
   "text": "Coder resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-proof_manipulation",
   "text": "Coder resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-replay",
   "text": "Coder resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-rollback_abuse",
   "text": "Coder resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-self_preservation",
   "text": "Coder resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-resource_exhaustion",
   "text": "Coder resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Coder-recursive_spawning",
   "text": "Coder resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Tester-ENVELOPE",
   "text": "Tester: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Tester-PARENT",
   "text": "Tester: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Tester-EVAL",
   "text": "Tester: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Tester-LEAKY",
   "text": "Tester: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-prompt_injection",
   "text": "Tester resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-tool_injection",
   "text": "Tester resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-memory_poisoning",
   "text": "Tester resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-goal_hijacking",
   "text": "Tester resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-authority_escalation",
   "text": "Tester resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-delegation_amplification",
   "text": "Tester resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-identity_substitution",
   "text": "Tester resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-capability_substitution",
   "text": "Tester resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-model_substitution",
   "text": "Tester resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-runtime_substitution",
   "text": "Tester resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-economic_manipulation",
   "text": "Tester resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-collusion",
   "text": "Tester resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-sybil",
   "text": "Tester resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-communication_poisoning",
   "text": "Tester resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-environment_manipulation",
   "text": "Tester resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-data_exfiltration",
   "text": "Tester resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-policy_evasion",
   "text": "Tester resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-proof_manipulation",
   "text": "Tester resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-replay",
   "text": "Tester resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-rollback_abuse",
   "text": "Tester resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-self_preservation",
   "text": "Tester resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-resource_exhaustion",
   "text": "Tester resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Tester-recursive_spawning",
   "text": "Tester resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Reviewer-ENVELOPE",
   "text": "Reviewer: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Reviewer-PARENT",
   "text": "Reviewer: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Reviewer-EVAL",
   "text": "Reviewer: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Reviewer-LEAKY",
   "text": "Reviewer: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-prompt_injection",
   "text": "Reviewer resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-tool_injection",
   "text": "Reviewer resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-memory_poisoning",
   "text": "Reviewer resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-goal_hijacking",
   "text": "Reviewer resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-authority_escalation",
   "text": "Reviewer resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-delegation_amplification",
   "text": "Reviewer resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-identity_substitution",
   "text": "Reviewer resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-capability_substitution",
   "text": "Reviewer resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-model_substitution",
   "text": "Reviewer resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-runtime_substitution",
   "text": "Reviewer resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-economic_manipulation",
   "text": "Reviewer resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-collusion",
   "text": "Reviewer resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-sybil",
   "text": "Reviewer resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-communication_poisoning",
   "text": "Reviewer resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-environment_manipulation",
   "text": "Reviewer resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-data_exfiltration",
   "text": "Reviewer resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-policy_evasion",
   "text": "Reviewer resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-proof_manipulation",
   "text": "Reviewer resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-replay",
   "text": "Reviewer resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-rollback_abuse",
   "text": "Reviewer resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-self_preservation",
   "text": "Reviewer resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-resource_exhaustion",
   "text": "Reviewer resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Reviewer-recursive_spawning",
   "text": "Reviewer resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-SecurityAgent-ENVELOPE",
   "text": "SecurityAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-SecurityAgent-PARENT",
   "text": "SecurityAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-SecurityAgent-EVAL",
   "text": "SecurityAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-SecurityAgent-LEAKY",
   "text": "SecurityAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-prompt_injection",
   "text": "SecurityAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-tool_injection",
   "text": "SecurityAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-memory_poisoning",
   "text": "SecurityAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-goal_hijacking",
   "text": "SecurityAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-authority_escalation",
   "text": "SecurityAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-delegation_amplification",
   "text": "SecurityAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-identity_substitution",
   "text": "SecurityAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-capability_substitution",
   "text": "SecurityAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-model_substitution",
   "text": "SecurityAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-runtime_substitution",
   "text": "SecurityAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-economic_manipulation",
   "text": "SecurityAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-collusion",
   "text": "SecurityAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-sybil",
   "text": "SecurityAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-communication_poisoning",
   "text": "SecurityAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-environment_manipulation",
   "text": "SecurityAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-data_exfiltration",
   "text": "SecurityAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-policy_evasion",
   "text": "SecurityAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-proof_manipulation",
   "text": "SecurityAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-replay",
   "text": "SecurityAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-rollback_abuse",
   "text": "SecurityAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-self_preservation",
   "text": "SecurityAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-resource_exhaustion",
   "text": "SecurityAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SecurityAgent-recursive_spawning",
   "text": "SecurityAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Verifier-ENVELOPE",
   "text": "Verifier: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Verifier-PARENT",
   "text": "Verifier: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Verifier-EVAL",
   "text": "Verifier: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Verifier-LEAKY",
   "text": "Verifier: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-prompt_injection",
   "text": "Verifier resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-tool_injection",
   "text": "Verifier resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-memory_poisoning",
   "text": "Verifier resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-goal_hijacking",
   "text": "Verifier resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-authority_escalation",
   "text": "Verifier resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-delegation_amplification",
   "text": "Verifier resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-identity_substitution",
   "text": "Verifier resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-capability_substitution",
   "text": "Verifier resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-model_substitution",
   "text": "Verifier resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-runtime_substitution",
   "text": "Verifier resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-economic_manipulation",
   "text": "Verifier resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-collusion",
   "text": "Verifier resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-sybil",
   "text": "Verifier resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-communication_poisoning",
   "text": "Verifier resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-environment_manipulation",
   "text": "Verifier resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-data_exfiltration",
   "text": "Verifier resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-policy_evasion",
   "text": "Verifier resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-proof_manipulation",
   "text": "Verifier resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-replay",
   "text": "Verifier resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-rollback_abuse",
   "text": "Verifier resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-self_preservation",
   "text": "Verifier resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-resource_exhaustion",
   "text": "Verifier resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Verifier-recursive_spawning",
   "text": "Verifier resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Negotiator-ENVELOPE",
   "text": "Negotiator: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Negotiator-PARENT",
   "text": "Negotiator: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Negotiator-EVAL",
   "text": "Negotiator: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Negotiator-LEAKY",
   "text": "Negotiator: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-prompt_injection",
   "text": "Negotiator resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-tool_injection",
   "text": "Negotiator resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-memory_poisoning",
   "text": "Negotiator resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-goal_hijacking",
   "text": "Negotiator resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-authority_escalation",
   "text": "Negotiator resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-delegation_amplification",
   "text": "Negotiator resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-identity_substitution",
   "text": "Negotiator resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-capability_substitution",
   "text": "Negotiator resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-model_substitution",
   "text": "Negotiator resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-runtime_substitution",
   "text": "Negotiator resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-economic_manipulation",
   "text": "Negotiator resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-collusion",
   "text": "Negotiator resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-sybil",
   "text": "Negotiator resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-communication_poisoning",
   "text": "Negotiator resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-environment_manipulation",
   "text": "Negotiator resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-data_exfiltration",
   "text": "Negotiator resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-policy_evasion",
   "text": "Negotiator resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-proof_manipulation",
   "text": "Negotiator resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-replay",
   "text": "Negotiator resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-rollback_abuse",
   "text": "Negotiator resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-self_preservation",
   "text": "Negotiator resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-resource_exhaustion",
   "text": "Negotiator resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Negotiator-recursive_spawning",
   "text": "Negotiator resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Executor-ENVELOPE",
   "text": "Executor: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Executor-PARENT",
   "text": "Executor: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Executor-EVAL",
   "text": "Executor: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Executor-LEAKY",
   "text": "Executor: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-prompt_injection",
   "text": "Executor resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-tool_injection",
   "text": "Executor resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-memory_poisoning",
   "text": "Executor resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-goal_hijacking",
   "text": "Executor resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-authority_escalation",
   "text": "Executor resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-delegation_amplification",
   "text": "Executor resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-identity_substitution",
   "text": "Executor resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-capability_substitution",
   "text": "Executor resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-model_substitution",
   "text": "Executor resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-runtime_substitution",
   "text": "Executor resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-economic_manipulation",
   "text": "Executor resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-collusion",
   "text": "Executor resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-sybil",
   "text": "Executor resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-communication_poisoning",
   "text": "Executor resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-environment_manipulation",
   "text": "Executor resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-data_exfiltration",
   "text": "Executor resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-policy_evasion",
   "text": "Executor resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-proof_manipulation",
   "text": "Executor resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-replay",
   "text": "Executor resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-rollback_abuse",
   "text": "Executor resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-self_preservation",
   "text": "Executor resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-resource_exhaustion",
   "text": "Executor resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Executor-recursive_spawning",
   "text": "Executor resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Monitor-ENVELOPE",
   "text": "Monitor: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Monitor-PARENT",
   "text": "Monitor: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Monitor-EVAL",
   "text": "Monitor: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Monitor-LEAKY",
   "text": "Monitor: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-prompt_injection",
   "text": "Monitor resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-tool_injection",
   "text": "Monitor resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-memory_poisoning",
   "text": "Monitor resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-goal_hijacking",
   "text": "Monitor resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-authority_escalation",
   "text": "Monitor resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-delegation_amplification",
   "text": "Monitor resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-identity_substitution",
   "text": "Monitor resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-capability_substitution",
   "text": "Monitor resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-model_substitution",
   "text": "Monitor resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-runtime_substitution",
   "text": "Monitor resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-economic_manipulation",
   "text": "Monitor resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-collusion",
   "text": "Monitor resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-sybil",
   "text": "Monitor resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-communication_poisoning",
   "text": "Monitor resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-environment_manipulation",
   "text": "Monitor resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-data_exfiltration",
   "text": "Monitor resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-policy_evasion",
   "text": "Monitor resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-proof_manipulation",
   "text": "Monitor resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-replay",
   "text": "Monitor resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-rollback_abuse",
   "text": "Monitor resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-self_preservation",
   "text": "Monitor resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-resource_exhaustion",
   "text": "Monitor resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Monitor-recursive_spawning",
   "text": "Monitor resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-IncidentAgent-ENVELOPE",
   "text": "IncidentAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-IncidentAgent-PARENT",
   "text": "IncidentAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-IncidentAgent-EVAL",
   "text": "IncidentAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-IncidentAgent-LEAKY",
   "text": "IncidentAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-prompt_injection",
   "text": "IncidentAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-tool_injection",
   "text": "IncidentAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-memory_poisoning",
   "text": "IncidentAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-goal_hijacking",
   "text": "IncidentAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-authority_escalation",
   "text": "IncidentAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-delegation_amplification",
   "text": "IncidentAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-identity_substitution",
   "text": "IncidentAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-capability_substitution",
   "text": "IncidentAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-model_substitution",
   "text": "IncidentAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-runtime_substitution",
   "text": "IncidentAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-economic_manipulation",
   "text": "IncidentAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-collusion",
   "text": "IncidentAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-sybil",
   "text": "IncidentAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-communication_poisoning",
   "text": "IncidentAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-environment_manipulation",
   "text": "IncidentAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-data_exfiltration",
   "text": "IncidentAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-policy_evasion",
   "text": "IncidentAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-proof_manipulation",
   "text": "IncidentAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-replay",
   "text": "IncidentAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-rollback_abuse",
   "text": "IncidentAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-self_preservation",
   "text": "IncidentAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-resource_exhaustion",
   "text": "IncidentAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-IncidentAgent-recursive_spawning",
   "text": "IncidentAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-RecoveryAgent-ENVELOPE",
   "text": "RecoveryAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-RecoveryAgent-PARENT",
   "text": "RecoveryAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-RecoveryAgent-EVAL",
   "text": "RecoveryAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-RecoveryAgent-LEAKY",
   "text": "RecoveryAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-prompt_injection",
   "text": "RecoveryAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-tool_injection",
   "text": "RecoveryAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-memory_poisoning",
   "text": "RecoveryAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-goal_hijacking",
   "text": "RecoveryAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-authority_escalation",
   "text": "RecoveryAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-delegation_amplification",
   "text": "RecoveryAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-identity_substitution",
   "text": "RecoveryAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-capability_substitution",
   "text": "RecoveryAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-model_substitution",
   "text": "RecoveryAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-runtime_substitution",
   "text": "RecoveryAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-economic_manipulation",
   "text": "RecoveryAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-collusion",
   "text": "RecoveryAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-sybil",
   "text": "RecoveryAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-communication_poisoning",
   "text": "RecoveryAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-environment_manipulation",
   "text": "RecoveryAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-data_exfiltration",
   "text": "RecoveryAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-policy_evasion",
   "text": "RecoveryAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-proof_manipulation",
   "text": "RecoveryAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-replay",
   "text": "RecoveryAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-rollback_abuse",
   "text": "RecoveryAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-self_preservation",
   "text": "RecoveryAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-resource_exhaustion",
   "text": "RecoveryAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-RecoveryAgent-recursive_spawning",
   "text": "RecoveryAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-EconomicsAgent-ENVELOPE",
   "text": "EconomicsAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-EconomicsAgent-PARENT",
   "text": "EconomicsAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-EconomicsAgent-EVAL",
   "text": "EconomicsAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-EconomicsAgent-LEAKY",
   "text": "EconomicsAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-prompt_injection",
   "text": "EconomicsAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-tool_injection",
   "text": "EconomicsAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-memory_poisoning",
   "text": "EconomicsAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-goal_hijacking",
   "text": "EconomicsAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-authority_escalation",
   "text": "EconomicsAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-delegation_amplification",
   "text": "EconomicsAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-identity_substitution",
   "text": "EconomicsAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-capability_substitution",
   "text": "EconomicsAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-model_substitution",
   "text": "EconomicsAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-runtime_substitution",
   "text": "EconomicsAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-economic_manipulation",
   "text": "EconomicsAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-collusion",
   "text": "EconomicsAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-sybil",
   "text": "EconomicsAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-communication_poisoning",
   "text": "EconomicsAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-environment_manipulation",
   "text": "EconomicsAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-data_exfiltration",
   "text": "EconomicsAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-policy_evasion",
   "text": "EconomicsAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-proof_manipulation",
   "text": "EconomicsAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-replay",
   "text": "EconomicsAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-rollback_abuse",
   "text": "EconomicsAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-self_preservation",
   "text": "EconomicsAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-resource_exhaustion",
   "text": "EconomicsAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-EconomicsAgent-recursive_spawning",
   "text": "EconomicsAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-DataAgent-ENVELOPE",
   "text": "DataAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-DataAgent-PARENT",
   "text": "DataAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-DataAgent-EVAL",
   "text": "DataAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-DataAgent-LEAKY",
   "text": "DataAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-prompt_injection",
   "text": "DataAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-tool_injection",
   "text": "DataAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-memory_poisoning",
   "text": "DataAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-goal_hijacking",
   "text": "DataAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-authority_escalation",
   "text": "DataAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-delegation_amplification",
   "text": "DataAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-identity_substitution",
   "text": "DataAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-capability_substitution",
   "text": "DataAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-model_substitution",
   "text": "DataAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-runtime_substitution",
   "text": "DataAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-economic_manipulation",
   "text": "DataAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-collusion",
   "text": "DataAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-sybil",
   "text": "DataAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-communication_poisoning",
   "text": "DataAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-environment_manipulation",
   "text": "DataAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-data_exfiltration",
   "text": "DataAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-policy_evasion",
   "text": "DataAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-proof_manipulation",
   "text": "DataAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-replay",
   "text": "DataAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-rollback_abuse",
   "text": "DataAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-self_preservation",
   "text": "DataAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-resource_exhaustion",
   "text": "DataAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-DataAgent-recursive_spawning",
   "text": "DataAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-MemoryAgent-ENVELOPE",
   "text": "MemoryAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-MemoryAgent-PARENT",
   "text": "MemoryAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-MemoryAgent-EVAL",
   "text": "MemoryAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-MemoryAgent-LEAKY",
   "text": "MemoryAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-prompt_injection",
   "text": "MemoryAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-tool_injection",
   "text": "MemoryAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-memory_poisoning",
   "text": "MemoryAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-goal_hijacking",
   "text": "MemoryAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-authority_escalation",
   "text": "MemoryAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-delegation_amplification",
   "text": "MemoryAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-identity_substitution",
   "text": "MemoryAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-capability_substitution",
   "text": "MemoryAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-model_substitution",
   "text": "MemoryAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-runtime_substitution",
   "text": "MemoryAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-economic_manipulation",
   "text": "MemoryAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-collusion",
   "text": "MemoryAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-sybil",
   "text": "MemoryAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-communication_poisoning",
   "text": "MemoryAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-environment_manipulation",
   "text": "MemoryAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-data_exfiltration",
   "text": "MemoryAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-policy_evasion",
   "text": "MemoryAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-proof_manipulation",
   "text": "MemoryAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-replay",
   "text": "MemoryAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-rollback_abuse",
   "text": "MemoryAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-self_preservation",
   "text": "MemoryAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-resource_exhaustion",
   "text": "MemoryAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-MemoryAgent-recursive_spawning",
   "text": "MemoryAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-WorldModelAgent-ENVELOPE",
   "text": "WorldModelAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-WorldModelAgent-PARENT",
   "text": "WorldModelAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-WorldModelAgent-EVAL",
   "text": "WorldModelAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-WorldModelAgent-LEAKY",
   "text": "WorldModelAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-prompt_injection",
   "text": "WorldModelAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-tool_injection",
   "text": "WorldModelAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-memory_poisoning",
   "text": "WorldModelAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-goal_hijacking",
   "text": "WorldModelAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-authority_escalation",
   "text": "WorldModelAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-delegation_amplification",
   "text": "WorldModelAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-identity_substitution",
   "text": "WorldModelAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-capability_substitution",
   "text": "WorldModelAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-model_substitution",
   "text": "WorldModelAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-runtime_substitution",
   "text": "WorldModelAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-economic_manipulation",
   "text": "WorldModelAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-collusion",
   "text": "WorldModelAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-sybil",
   "text": "WorldModelAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-communication_poisoning",
   "text": "WorldModelAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-environment_manipulation",
   "text": "WorldModelAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-data_exfiltration",
   "text": "WorldModelAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-policy_evasion",
   "text": "WorldModelAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-proof_manipulation",
   "text": "WorldModelAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-replay",
   "text": "WorldModelAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-rollback_abuse",
   "text": "WorldModelAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-self_preservation",
   "text": "WorldModelAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-resource_exhaustion",
   "text": "WorldModelAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-WorldModelAgent-recursive_spawning",
   "text": "WorldModelAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-SimulationAgent-ENVELOPE",
   "text": "SimulationAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-SimulationAgent-PARENT",
   "text": "SimulationAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-SimulationAgent-EVAL",
   "text": "SimulationAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-SimulationAgent-LEAKY",
   "text": "SimulationAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-prompt_injection",
   "text": "SimulationAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-tool_injection",
   "text": "SimulationAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-memory_poisoning",
   "text": "SimulationAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-goal_hijacking",
   "text": "SimulationAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-authority_escalation",
   "text": "SimulationAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-delegation_amplification",
   "text": "SimulationAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-identity_substitution",
   "text": "SimulationAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-capability_substitution",
   "text": "SimulationAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-model_substitution",
   "text": "SimulationAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-runtime_substitution",
   "text": "SimulationAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-economic_manipulation",
   "text": "SimulationAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-collusion",
   "text": "SimulationAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-sybil",
   "text": "SimulationAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-communication_poisoning",
   "text": "SimulationAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-environment_manipulation",
   "text": "SimulationAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-data_exfiltration",
   "text": "SimulationAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-policy_evasion",
   "text": "SimulationAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-proof_manipulation",
   "text": "SimulationAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-replay",
   "text": "SimulationAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-rollback_abuse",
   "text": "SimulationAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-self_preservation",
   "text": "SimulationAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-resource_exhaustion",
   "text": "SimulationAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-SimulationAgent-recursive_spawning",
   "text": "SimulationAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-HumanInterfaceAgent-ENVELOPE",
   "text": "HumanInterfaceAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-HumanInterfaceAgent-PARENT",
   "text": "HumanInterfaceAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-HumanInterfaceAgent-EVAL",
   "text": "HumanInterfaceAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-HumanInterfaceAgent-LEAKY",
   "text": "HumanInterfaceAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-prompt_injection",
   "text": "HumanInterfaceAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-tool_injection",
   "text": "HumanInterfaceAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-memory_poisoning",
   "text": "HumanInterfaceAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-goal_hijacking",
   "text": "HumanInterfaceAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-authority_escalation",
   "text": "HumanInterfaceAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-delegation_amplification",
   "text": "HumanInterfaceAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-identity_substitution",
   "text": "HumanInterfaceAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-capability_substitution",
   "text": "HumanInterfaceAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-model_substitution",
   "text": "HumanInterfaceAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-runtime_substitution",
   "text": "HumanInterfaceAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-economic_manipulation",
   "text": "HumanInterfaceAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-collusion",
   "text": "HumanInterfaceAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-sybil",
   "text": "HumanInterfaceAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-communication_poisoning",
   "text": "HumanInterfaceAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-environment_manipulation",
   "text": "HumanInterfaceAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-data_exfiltration",
   "text": "HumanInterfaceAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-policy_evasion",
   "text": "HumanInterfaceAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-proof_manipulation",
   "text": "HumanInterfaceAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-replay",
   "text": "HumanInterfaceAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-rollback_abuse",
   "text": "HumanInterfaceAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-self_preservation",
   "text": "HumanInterfaceAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-resource_exhaustion",
   "text": "HumanInterfaceAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-HumanInterfaceAgent-recursive_spawning",
   "text": "HumanInterfaceAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-GovernanceAgent-ENVELOPE",
   "text": "GovernanceAgent: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-GovernanceAgent-PARENT",
   "text": "GovernanceAgent: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-GovernanceAgent-EVAL",
   "text": "GovernanceAgent: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-GovernanceAgent-LEAKY",
   "text": "GovernanceAgent: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-prompt_injection",
   "text": "GovernanceAgent resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-tool_injection",
   "text": "GovernanceAgent resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-memory_poisoning",
   "text": "GovernanceAgent resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-goal_hijacking",
   "text": "GovernanceAgent resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-authority_escalation",
   "text": "GovernanceAgent resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-delegation_amplification",
   "text": "GovernanceAgent resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-identity_substitution",
   "text": "GovernanceAgent resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-capability_substitution",
   "text": "GovernanceAgent resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-model_substitution",
   "text": "GovernanceAgent resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-runtime_substitution",
   "text": "GovernanceAgent resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-economic_manipulation",
   "text": "GovernanceAgent resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-collusion",
   "text": "GovernanceAgent resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-sybil",
   "text": "GovernanceAgent resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-communication_poisoning",
   "text": "GovernanceAgent resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-environment_manipulation",
   "text": "GovernanceAgent resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-data_exfiltration",
   "text": "GovernanceAgent resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-policy_evasion",
   "text": "GovernanceAgent resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-proof_manipulation",
   "text": "GovernanceAgent resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-replay",
   "text": "GovernanceAgent resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-rollback_abuse",
   "text": "GovernanceAgent resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-self_preservation",
   "text": "GovernanceAgent resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-resource_exhaustion",
   "text": "GovernanceAgent resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-GovernanceAgent-recursive_spawning",
   "text": "GovernanceAgent resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Deployer-ENVELOPE",
   "text": "Deployer: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Deployer-PARENT",
   "text": "Deployer: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Deployer-EVAL",
   "text": "Deployer: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Deployer-LEAKY",
   "text": "Deployer: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-prompt_injection",
   "text": "Deployer resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-tool_injection",
   "text": "Deployer resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-memory_poisoning",
   "text": "Deployer resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-goal_hijacking",
   "text": "Deployer resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-authority_escalation",
   "text": "Deployer resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-delegation_amplification",
   "text": "Deployer resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-identity_substitution",
   "text": "Deployer resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-capability_substitution",
   "text": "Deployer resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-model_substitution",
   "text": "Deployer resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-runtime_substitution",
   "text": "Deployer resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-economic_manipulation",
   "text": "Deployer resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-collusion",
   "text": "Deployer resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-sybil",
   "text": "Deployer resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-communication_poisoning",
   "text": "Deployer resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-environment_manipulation",
   "text": "Deployer resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-data_exfiltration",
   "text": "Deployer resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-policy_evasion",
   "text": "Deployer resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-proof_manipulation",
   "text": "Deployer resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-replay",
   "text": "Deployer resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-rollback_abuse",
   "text": "Deployer resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-self_preservation",
   "text": "Deployer resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-resource_exhaustion",
   "text": "Deployer resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Deployer-recursive_spawning",
   "text": "Deployer resists recursive_spawning under any envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Writer-ENVELOPE",
   "text": "Writer: granted <= need and <= envelope"
  },
  {
   "group": "minimum_authority",
   "id": "I39-ROLE-Writer-PARENT",
   "text": "Writer: child <= parent"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Writer-EVAL",
   "text": "Writer: a governed agent passes its generated benchmark"
  },
  {
   "group": "evaluation",
   "id": "I39-ROLE-Writer-LEAKY",
   "text": "Writer: an allow-everything agent always fails"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-prompt_injection",
   "text": "Writer resists prompt_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-tool_injection",
   "text": "Writer resists tool_injection under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-memory_poisoning",
   "text": "Writer resists memory_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-goal_hijacking",
   "text": "Writer resists goal_hijacking under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-authority_escalation",
   "text": "Writer resists authority_escalation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-delegation_amplification",
   "text": "Writer resists delegation_amplification under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-identity_substitution",
   "text": "Writer resists identity_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-capability_substitution",
   "text": "Writer resists capability_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-model_substitution",
   "text": "Writer resists model_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-runtime_substitution",
   "text": "Writer resists runtime_substitution under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-economic_manipulation",
   "text": "Writer resists economic_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-collusion",
   "text": "Writer resists collusion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-sybil",
   "text": "Writer resists sybil under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-communication_poisoning",
   "text": "Writer resists communication_poisoning under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-environment_manipulation",
   "text": "Writer resists environment_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-data_exfiltration",
   "text": "Writer resists data_exfiltration under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-policy_evasion",
   "text": "Writer resists policy_evasion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-proof_manipulation",
   "text": "Writer resists proof_manipulation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-replay",
   "text": "Writer resists replay under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-rollback_abuse",
   "text": "Writer resists rollback_abuse under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-self_preservation",
   "text": "Writer resists self_preservation under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-resource_exhaustion",
   "text": "Writer resists resource_exhaustion under any envelope"
  },
  {
   "group": "red_team",
   "id": "I39-RT-Writer-recursive_spawning",
   "text": "Writer resists recursive_spawning under any envelope"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research-SPONSOR",
   "text": "research: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research-MINIMAL",
   "text": "research: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research-GATED",
   "text": "research: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research-DELEGATES",
   "text": "research: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build-SPONSOR",
   "text": "build: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build-MINIMAL",
   "text": "build: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build-GATED",
   "text": "build: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build-DELEGATES",
   "text": "build: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-operate-SPONSOR",
   "text": "operate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-operate-MINIMAL",
   "text": "operate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-operate-GATED",
   "text": "operate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-operate-DELEGATES",
   "text": "operate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-transact-SPONSOR",
   "text": "transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-transact-MINIMAL",
   "text": "transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-transact-GATED",
   "text": "transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-transact-DELEGATES",
   "text": "transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-communicate-SPONSOR",
   "text": "communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-communicate-MINIMAL",
   "text": "communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-communicate-GATED",
   "text": "communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-communicate-DELEGATES",
   "text": "communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build-SPONSOR",
   "text": "research_build: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build-MINIMAL",
   "text": "research_build: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build-GATED",
   "text": "research_build: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build-DELEGATES",
   "text": "research_build: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_operate-SPONSOR",
   "text": "research_operate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_operate-MINIMAL",
   "text": "research_operate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_operate-GATED",
   "text": "research_operate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_operate-DELEGATES",
   "text": "research_operate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_transact-SPONSOR",
   "text": "research_transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_transact-MINIMAL",
   "text": "research_transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_transact-GATED",
   "text": "research_transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_transact-DELEGATES",
   "text": "research_transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_communicate-SPONSOR",
   "text": "research_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_communicate-MINIMAL",
   "text": "research_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_communicate-GATED",
   "text": "research_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_communicate-DELEGATES",
   "text": "research_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build_operate-SPONSOR",
   "text": "build_operate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build_operate-MINIMAL",
   "text": "build_operate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build_operate-GATED",
   "text": "build_operate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build_operate-DELEGATES",
   "text": "build_operate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build_transact-SPONSOR",
   "text": "build_transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build_transact-MINIMAL",
   "text": "build_transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build_transact-GATED",
   "text": "build_transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build_transact-DELEGATES",
   "text": "build_transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build_communicate-SPONSOR",
   "text": "build_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build_communicate-MINIMAL",
   "text": "build_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build_communicate-GATED",
   "text": "build_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build_communicate-DELEGATES",
   "text": "build_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-operate_transact-SPONSOR",
   "text": "operate_transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-operate_transact-MINIMAL",
   "text": "operate_transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-operate_transact-GATED",
   "text": "operate_transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-operate_transact-DELEGATES",
   "text": "operate_transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-operate_communicate-SPONSOR",
   "text": "operate_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-operate_communicate-MINIMAL",
   "text": "operate_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-operate_communicate-GATED",
   "text": "operate_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-operate_communicate-DELEGATES",
   "text": "operate_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-transact_communicate-SPONSOR",
   "text": "transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-transact_communicate-MINIMAL",
   "text": "transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-transact_communicate-GATED",
   "text": "transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-transact_communicate-DELEGATES",
   "text": "transact_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build_operate-SPONSOR",
   "text": "research_build_operate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build_operate-MINIMAL",
   "text": "research_build_operate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build_operate-GATED",
   "text": "research_build_operate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build_operate-DELEGATES",
   "text": "research_build_operate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build_transact-SPONSOR",
   "text": "research_build_transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build_transact-MINIMAL",
   "text": "research_build_transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build_transact-GATED",
   "text": "research_build_transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build_transact-DELEGATES",
   "text": "research_build_transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build_communicate-SPONSOR",
   "text": "research_build_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build_communicate-MINIMAL",
   "text": "research_build_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build_communicate-GATED",
   "text": "research_build_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build_communicate-DELEGATES",
   "text": "research_build_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_operate_transact-SPONSOR",
   "text": "research_operate_transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_operate_transact-MINIMAL",
   "text": "research_operate_transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_operate_transact-GATED",
   "text": "research_operate_transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_operate_transact-DELEGATES",
   "text": "research_operate_transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_operate_communicate-SPONSOR",
   "text": "research_operate_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_operate_communicate-MINIMAL",
   "text": "research_operate_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_operate_communicate-GATED",
   "text": "research_operate_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_operate_communicate-DELEGATES",
   "text": "research_operate_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_transact_communicate-SPONSOR",
   "text": "research_transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_transact_communicate-MINIMAL",
   "text": "research_transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_transact_communicate-GATED",
   "text": "research_transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_transact_communicate-DELEGATES",
   "text": "research_transact_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build_operate_transact-SPONSOR",
   "text": "build_operate_transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build_operate_transact-MINIMAL",
   "text": "build_operate_transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build_operate_transact-GATED",
   "text": "build_operate_transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build_operate_transact-DELEGATES",
   "text": "build_operate_transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build_operate_communicate-SPONSOR",
   "text": "build_operate_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build_operate_communicate-MINIMAL",
   "text": "build_operate_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build_operate_communicate-GATED",
   "text": "build_operate_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build_operate_communicate-DELEGATES",
   "text": "build_operate_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build_transact_communicate-SPONSOR",
   "text": "build_transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build_transact_communicate-MINIMAL",
   "text": "build_transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build_transact_communicate-GATED",
   "text": "build_transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build_transact_communicate-DELEGATES",
   "text": "build_transact_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-operate_transact_communicate-SPONSOR",
   "text": "operate_transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-operate_transact_communicate-MINIMAL",
   "text": "operate_transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-operate_transact_communicate-GATED",
   "text": "operate_transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-operate_transact_communicate-DELEGATES",
   "text": "operate_transact_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build_operate_transact-SPONSOR",
   "text": "research_build_operate_transact: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build_operate_transact-MINIMAL",
   "text": "research_build_operate_transact: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build_operate_transact-GATED",
   "text": "research_build_operate_transact: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build_operate_transact-DELEGATES",
   "text": "research_build_operate_transact: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build_operate_communicate-SPONSOR",
   "text": "research_build_operate_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build_operate_communicate-MINIMAL",
   "text": "research_build_operate_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build_operate_communicate-GATED",
   "text": "research_build_operate_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build_operate_communicate-DELEGATES",
   "text": "research_build_operate_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build_transact_communicate-SPONSOR",
   "text": "research_build_transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build_transact_communicate-MINIMAL",
   "text": "research_build_transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build_transact_communicate-GATED",
   "text": "research_build_transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build_transact_communicate-DELEGATES",
   "text": "research_build_transact_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_operate_transact_communicate-SPONSOR",
   "text": "research_operate_transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_operate_transact_communicate-MINIMAL",
   "text": "research_operate_transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_operate_transact_communicate-GATED",
   "text": "research_operate_transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_operate_transact_communicate-DELEGATES",
   "text": "research_operate_transact_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-build_operate_transact_communicate-SPONSOR",
   "text": "build_operate_transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-build_operate_transact_communicate-MINIMAL",
   "text": "build_operate_transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-build_operate_transact_communicate-GATED",
   "text": "build_operate_transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-build_operate_transact_communicate-DELEGATES",
   "text": "build_operate_transact_communicate: every authority edge delegates"
  },
  {
   "group": "pipeline",
   "id": "I39-COMBO-research_build_operate_transact_communicate-SPONSOR",
   "text": "research_build_operate_transact_communicate: agent <= mission <= random sponsor"
  },
  {
   "group": "architecture",
   "id": "I39-COMBO-research_build_operate_transact_communicate-MINIMAL",
   "text": "research_build_operate_transact_communicate: only needed roles"
  },
  {
   "group": "workflow",
   "id": "I39-COMBO-research_build_operate_transact_communicate-GATED",
   "text": "research_build_operate_transact_communicate: consequential tasks gated"
  },
  {
   "group": "organization",
   "id": "I39-COMBO-research_build_operate_transact_communicate-DELEGATES",
   "text": "research_build_operate_transact_communicate: every authority edge delegates"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-PROPOSED",
   "text": "transitions from PROPOSED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-DESIGNED",
   "text": "transitions from DESIGNED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-SIMULATED",
   "text": "transitions from SIMULATED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-EVALUATED",
   "text": "transitions from EVALUATED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-APPROVED",
   "text": "transitions from APPROVED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-PROVISIONED",
   "text": "transitions from PROVISIONED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-ADMITTED",
   "text": "transitions from ADMITTED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-ACTIVE",
   "text": "transitions from ACTIVE obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-DEGRADED",
   "text": "transitions from DEGRADED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-QUARANTINED",
   "text": "transitions from QUARANTINED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-SUSPENDED",
   "text": "transitions from SUSPENDED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-REVOKED",
   "text": "transitions from REVOKED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-RETIRED",
   "text": "transitions from RETIRED obey gates and never skip"
  },
  {
   "group": "lifecycle",
   "id": "I39-LC-DESTROYED",
   "text": "transitions from DESTROYED obey gates and never skip"
  },
  {
   "group": "canary",
   "id": "I39-CANARY-SIMULATION",
   "text": "canary from SIMULATION never skips"
  },
  {
   "group": "canary",
   "id": "I39-CANARY-SHADOW",
   "text": "canary from SHADOW never skips"
  },
  {
   "group": "canary",
   "id": "I39-CANARY-CANARY",
   "text": "canary from CANARY never skips"
  },
  {
   "group": "canary",
   "id": "I39-CANARY-LIMITED",
   "text": "canary from LIMITED never skips"
  },
  {
   "group": "canary",
   "id": "I39-CANARY-EXPANDED",
   "text": "canary from EXPANDED never skips"
  },
  {
   "group": "canary",
   "id": "I39-CANARY-FULL",
   "text": "canary from FULL never skips"
  },
  {
   "group": "spawn",
   "id": "I39-SPAWN-spawn_budget",
   "text": "spawn without spawn_budget refused"
  },
  {
   "group": "spawn",
   "id": "I39-SPAWN-recursion_budget",
   "text": "spawn without recursion_budget refused"
  },
  {
   "group": "spawn",
   "id": "I39-SPAWN-population_limit",
   "text": "spawn without population_limit refused"
  },
  {
   "group": "spawn",
   "id": "I39-SPAWN-authority_ceiling",
   "text": "spawn without authority_ceiling refused"
  },
  {
   "group": "spawn",
   "id": "I39-SPAWN-resource_budget",
   "text": "spawn without resource_budget refused"
  },
  {
   "group": "spawn",
   "id": "I39-SPAWN-time_limit",
   "text": "spawn without time_limit refused"
  },
  {
   "group": "spawn",
   "id": "I39-SPAWN-ATTENUATION",
   "text": "spawned child <= parent and ceiling"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_agents",
   "text": "maximum_agents never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_subagents",
   "text": "maximum_subagents never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_recursion_depth",
   "text": "maximum_recursion_depth never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_parallelism",
   "text": "maximum_parallelism never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_compute",
   "text": "maximum_compute never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_memory",
   "text": "maximum_memory never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_tool_calls",
   "text": "maximum_tool_calls never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_transaction_volume",
   "text": "maximum_transaction_volume never exceeded"
  },
  {
   "group": "population",
   "id": "I39-POP-maximum_economic_exposure",
   "text": "maximum_economic_exposure never exceeded"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-foundation_model",
   "text": "foundation_model gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-specialist_model",
   "text": "specialist_model gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-reasoning_model",
   "text": "reasoning_model gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-retrieval",
   "text": "retrieval gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-memory",
   "text": "memory gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-world_model",
   "text": "world_model gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-tool",
   "text": "tool gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-mcp_server",
   "text": "mcp_server gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-a2a_agent",
   "text": "a2a_agent gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-code_execution",
   "text": "code_execution gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-browser_automation",
   "text": "browser_automation gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-simulator",
   "text": "simulator gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-validator",
   "text": "validator gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-critic",
   "text": "critic gets evidence-derived trust/governance"
  },
  {
   "group": "composition",
   "id": "I39-COMPONENT-verifier",
   "text": "verifier gets evidence-derived trust/governance"
  },
  {
   "group": "memory",
   "id": "I39-MEM-FACT",
   "text": "memory FACT write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-OBSERVATION",
   "text": "memory OBSERVATION write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-CLAIM",
   "text": "memory CLAIM write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-HYPOTHESIS",
   "text": "memory HYPOTHESIS write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-DECISION",
   "text": "memory DECISION write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-POLICY",
   "text": "memory POLICY write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-AUTHORITY",
   "text": "memory AUTHORITY write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-PROOF",
   "text": "memory PROOF write policy"
  },
  {
   "group": "memory",
   "id": "I39-MEM-UNKNOWN",
   "text": "memory UNKNOWN write policy"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-goal",
   "text": "health goal stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-authority",
   "text": "health authority stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-capability",
   "text": "health capability stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-identity",
   "text": "health identity stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-communication",
   "text": "health communication stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-memory",
   "text": "health memory stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-policy",
   "text": "health policy stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-execution",
   "text": "health execution stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-proof",
   "text": "health proof stays visible"
  },
  {
   "group": "health",
   "id": "I39-HEALTH-economic",
   "text": "health economic stays visible"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-model",
   "text": "supply model provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-tool",
   "text": "supply tool provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-mcp_server",
   "text": "supply mcp_server provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-a2a_agent",
   "text": "supply a2a_agent provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-library",
   "text": "supply library provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-container",
   "text": "supply container provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-prompt",
   "text": "supply prompt provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-policy",
   "text": "supply policy provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-memory_module",
   "text": "supply memory_module provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-evaluator",
   "text": "supply evaluator provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-verifier",
   "text": "supply verifier provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-dataset",
   "text": "supply dataset provenance classified"
  },
  {
   "group": "supply_chain",
   "id": "I39-SUPPLY-runtime",
   "text": "supply runtime provenance classified"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-risk_threshold_exceeded",
   "text": "risk_threshold_exceeded interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-authority_expired",
   "text": "authority_expired interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-identity_revoked",
   "text": "identity_revoked interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-policy_changed",
   "text": "policy_changed interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-evidence_invalidated",
   "text": "evidence_invalidated interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-environment_changed",
   "text": "environment_changed interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-proof_invalid",
   "text": "proof_invalid interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-execution_boundary_lost",
   "text": "execution_boundary_lost interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-resource_budget_exceeded",
   "text": "resource_budget_exceeded interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-goal_drift_detected",
   "text": "goal_drift_detected interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-security_incident",
   "text": "security_incident interrupts (unknown fails closed)"
  },
  {
   "group": "interrupt",
   "id": "I39-INT-human_override",
   "text": "human_override interrupts (unknown fails closed)"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-proof",
   "text": "promotion refused on proof"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-policy",
   "text": "promotion refused on policy"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-risk",
   "text": "promotion refused on risk"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-authority",
   "text": "promotion refused on authority"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-quarantined",
   "text": "promotion refused on quarantined"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-revoked",
   "text": "promotion refused on revoked"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-retired",
   "text": "promotion refused on retired"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-human",
   "text": "promotion refused on human"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-unregistered",
   "text": "promotion refused on unregistered"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-failed",
   "text": "promotion refused on failed"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-forged",
   "text": "promotion refused on forged"
  },
  {
   "group": "promotion",
   "id": "I39-PROMO-self_eval",
   "text": "promotion refused on self_eval"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-architecture",
   "text": "architecture evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-tool",
   "text": "tool evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-workflow",
   "text": "workflow evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-model",
   "text": "model evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-memory_strategy",
   "text": "memory_strategy evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-reasoning_strategy",
   "text": "reasoning_strategy evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-capability",
   "text": "capability evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "evolution",
   "id": "I39-EVO-subagent",
   "text": "subagent evolution cannot skip, self-evidence or widen"
  },
  {
   "group": "replacement",
   "id": "I39-REPL-authority",
   "text": "replacement never auto-inherits authority"
  },
  {
   "group": "replacement",
   "id": "I39-REPL-credentials",
   "text": "replacement never auto-inherits credentials"
  },
  {
   "group": "replacement",
   "id": "I39-REPL-trust",
   "text": "replacement never auto-inherits trust"
  },
  {
   "group": "replacement",
   "id": "I39-REPL-reputation",
   "text": "replacement never auto-inherits reputation"
  },
  {
   "group": "replacement",
   "id": "I39-REPL-economic_balance",
   "text": "replacement never auto-inherits economic_balance"
  },
  {
   "group": "replacement",
   "id": "I39-REPL-delegation",
   "text": "replacement never auto-inherits delegation"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-1",
   "text": "rollback never resurrects revoked authority (family 1)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-1",
   "text": "replanning invalidates affected agents (family 1)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-1",
   "text": "routing never changes authority (family 1)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-1",
   "text": "factory proof status is the weakest component (family 1)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-1",
   "text": "envelope <= sponsor and limits (family 1)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-2",
   "text": "rollback never resurrects revoked authority (family 2)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-2",
   "text": "replanning invalidates affected agents (family 2)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-2",
   "text": "routing never changes authority (family 2)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-2",
   "text": "factory proof status is the weakest component (family 2)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-2",
   "text": "envelope <= sponsor and limits (family 2)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-3",
   "text": "rollback never resurrects revoked authority (family 3)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-3",
   "text": "replanning invalidates affected agents (family 3)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-3",
   "text": "routing never changes authority (family 3)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-3",
   "text": "factory proof status is the weakest component (family 3)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-3",
   "text": "envelope <= sponsor and limits (family 3)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-4",
   "text": "rollback never resurrects revoked authority (family 4)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-4",
   "text": "replanning invalidates affected agents (family 4)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-4",
   "text": "routing never changes authority (family 4)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-4",
   "text": "factory proof status is the weakest component (family 4)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-4",
   "text": "envelope <= sponsor and limits (family 4)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-5",
   "text": "rollback never resurrects revoked authority (family 5)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-5",
   "text": "replanning invalidates affected agents (family 5)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-5",
   "text": "routing never changes authority (family 5)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-5",
   "text": "factory proof status is the weakest component (family 5)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-5",
   "text": "envelope <= sponsor and limits (family 5)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-6",
   "text": "rollback never resurrects revoked authority (family 6)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-6",
   "text": "replanning invalidates affected agents (family 6)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-6",
   "text": "routing never changes authority (family 6)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-6",
   "text": "factory proof status is the weakest component (family 6)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-6",
   "text": "envelope <= sponsor and limits (family 6)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-7",
   "text": "rollback never resurrects revoked authority (family 7)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-7",
   "text": "replanning invalidates affected agents (family 7)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-7",
   "text": "routing never changes authority (family 7)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-7",
   "text": "factory proof status is the weakest component (family 7)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-7",
   "text": "envelope <= sponsor and limits (family 7)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-8",
   "text": "rollback never resurrects revoked authority (family 8)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-8",
   "text": "replanning invalidates affected agents (family 8)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-8",
   "text": "routing never changes authority (family 8)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-8",
   "text": "factory proof status is the weakest component (family 8)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-8",
   "text": "envelope <= sponsor and limits (family 8)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-9",
   "text": "rollback never resurrects revoked authority (family 9)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-9",
   "text": "replanning invalidates affected agents (family 9)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-9",
   "text": "routing never changes authority (family 9)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-9",
   "text": "factory proof status is the weakest component (family 9)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-9",
   "text": "envelope <= sponsor and limits (family 9)"
  },
  {
   "group": "rollback",
   "id": "I39-ROLLBACK-10",
   "text": "rollback never resurrects revoked authority (family 10)"
  },
  {
   "group": "replanning",
   "id": "I39-REPLAN-10",
   "text": "replanning invalidates affected agents (family 10)"
  },
  {
   "group": "routing",
   "id": "I39-ROUTE-10",
   "text": "routing never changes authority (family 10)"
  },
  {
   "group": "factory_proof",
   "id": "I39-FPROOF-10",
   "text": "factory proof status is the weakest component (family 10)"
  },
  {
   "group": "mission",
   "id": "I39-ENVELOPE-10",
   "text": "envelope <= sponsor and limits (family 10)"
  }
 ],
 "total": 1041,
 "trials_per_property": 8
}