[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:06:15+00:00",
  "ms": 0,
  "reply": {
   "slug": "causal-intelligence",
   "title": "Make a real CAIN decision, then trace its root cause (policy, authority, identity)",
   "status": "ok",
   "input": null,
   "total_ms": 120,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "safe-read"
     },
     "status": 200,
     "ms": 72,
     "reply": {
      "scenario": {
       "id": "safe-read",
       "title": "A reasonable action",
       "explains": "A normal tool call with a declared intent, from a principal with no trust history yet. Policy and risk both pass, but unknown trust never becomes ALLOW on its own: the action is held for human approval."
      },
      "verdict": "REQUIRE_APPROVAL",
      "blocked": false,
      "decision_id": "fd_e9f65aaf17c242439bea2d89",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no known attack pattern matched"
       },
       {
        "stage": "trust",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_ee12bdda14954eab90405ca8 (expires 2026-11-04T00:06:15.417434+00:00)"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "execution held pending human approval"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: pending"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [],
      "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "671904c78f054b3fb426f07f02e390fdbc2e0bf67f8c3a4c7517c2a465b9e286",
       "pre_verdict": "REQUIRE_APPROVAL",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_e9f65aaf17c242439bea2d89/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_e9f65aaf17c242439bea2d89",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "dad734a13402cca96ba0f145190c43b9cbef384e6d58d0a8ea7ac76f1bcc3156",
        "recomputed_digest": "dad734a13402cca96ba0f145190c43b9cbef384e6d58d0a8ea7ac76f1bcc3156",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "f2PxuN9jFQhPZlhGqVUGL0MZfPqzBdPwq1fCsyEayVIuF0Pfwpay5+19yNEWCArPcoXlTm1Cb5slnArNGQ0eAg==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 57
     }
    },
    {
     "call": "POST /api/v1/counterfactual",
     "request": {
      "original_decision_id": "fd_e9f65aaf17c242439bea2d89",
      "tenant": "cus_demo_955874e8dfe6",
      "intervention_type": "identity_changed",
      "intervention_detail": {
       "authority": "revoked"
      }
     },
     "status": 200,
     "ms": 30,
     "reply": {
      "observed_chain": {
       "intent": "governed_action",
       "authority": "delegated",
       "identity_id": "urn:cain:principal:service:bf48b9267b0a43208b854ec1",
       "agent_id": "urn:cain:principal:service:bf48b9267b0a43208b854ec1",
       "action": "/demo/safe-read",
       "resource": "/demo/safe-read",
       "policy": "cain.authz",
       "risk_result": "computed",
       "decision": "REQUIRE_APPROVAL",
       "decision_id": "fd_e9f65aaf17c242439bea2d89",
       "chain_id": null,
       "evidence_id": "ev_2f522db4e13950d7",
       "nodes": [
        "INTENT",
        "AUTHORITY",
        "POLICY",
        "RISK",
        "DECISION",
        "TRACE",
        "TRAJECTORY",
        "ACTION",
        "EXECUTION",
        "EFFECT",
        "IMPACT",
        "EVIDENCE"
       ],
       "observed": true,
       "simulation": false,
       "reconstruction_status": {
        "reconstructed": true,
        "source": "fabric_decisions",
        "decision_id": "fd_e9f65aaf17c242439bea2d89",
        "chain_id": null
       }
      },
      "counterfactual_chain": {
       "intervention": {
        "type": "identity_changed",
        "detail": {
         "authority": "revoked"
        }
       },
       "predicted_alternative_outcome": "AUTHORITY_REVOKED",
       "changed_nodes": [
        "IDENTITY",
        "AUTHORITY"
       ],
       "affected_downstream_nodes": [
        "POLICY",
        "RISK",
        "DECISION"
       ],
       "risk_before": "computed",
       "risk_after": "elevated",
       "risk_delta": "elevated",
       "impact_before": "measured",
       "impact_after": "uncertain",
       "impact_delta": "authority_affected",
       "confidence": 0.8,
       "root_causes": [],
       "downstream_effects": [
        "POLICY",
        "RISK",
        "DECISION"
       ]
      },
      "observed_outcome": "REQUIRE_APPROVAL",
      "predicted_alternative_outcome": "AUTHORITY_REVOKED",
      "risk_before": "computed",
      "risk_after": "elevated",
      "risk_delta": "elevated",
      "impact_before": "measured",
      "impact_after": "uncertain",
      "impact_delta": "authority_affected",
      "confidence": 0.8,
      "root_causes": [],
      "downstream_effects": [
       "POLICY",
       "RISK",
       "DECISION"
      ],
      "assumptions": [
       "Intervention identity_changed is syntactically valid",
       "Causal graph accurately represents dependency structure",
       "No external factors besides the specified intervention change the outcome"
      ],
      "limitations": [
       "SIMULATION ONLY - NO real execution of any kind",
       "would_execute is always False - no real action is ever taken",
       "Confidence 0.8 reflects intervention directness, not causal certainty",
       "Predicted outcomes are counterfactual simulations, not guarantees"
      ],
      "evidence_ids": [
       "ev_2f522db4e13950d7"
      ],
      "tenant": "cus_demo_955874e8dfe6",
      "timestamp": "2026-11-03T23:06:15.467941+00:00",
      "determinism_hash": "9ab5ecf09c3b15cf",
      "evidence_id": "cf_9ab5ecf09c3b15cf",
      "simulation": true,
      "would_execute": false
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:06:15+00:00",
  "ms": 0,
  "reply": {
   "slug": "causal-intelligence",
   "title": "Make a real CAIN decision, then trace its root cause (policy, authority, identity)",
   "status": "ok",
   "input": null,
   "total_ms": 120,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "safe-read"
     },
     "status": 200,
     "ms": 72,
     "reply": {
      "scenario": {
       "id": "safe-read",
       "title": "A reasonable action",
       "explains": "A normal tool call with a declared intent, from a principal with no trust history yet. Policy and risk both pass, but unknown trust never becomes ALLOW on its own: the action is held for human approval."
      },
      "verdict": "REQUIRE_APPROVAL",
      "blocked": false,
      "decision_id": "fd_e9f65aaf17c242439bea2d89",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no known attack pattern matched"
       },
       {
        "stage": "trust",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_ee12bdda14954eab90405ca8 (expires 2026-11-04T00:06:15.417434+00:00)"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "execution held pending human approval"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: pending"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [],
      "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "671904c78f054b3fb426f07f02e390fdbc2e0bf67f8c3a4c7517c2a465b9e286",
       "pre_verdict": "REQUIRE_APPROVAL",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_e9f65aaf17c242439bea2d89/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_e9f65aaf17c242439bea2d89",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "dad734a13402cca96ba0f145190c43b9cbef384e6d58d0a8ea7ac76f1bcc3156",
        "recomputed_digest": "dad734a13402cca96ba0f145190c43b9cbef384e6d58d0a8ea7ac76f1bcc3156",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "f2PxuN9jFQhPZlhGqVUGL0MZfPqzBdPwq1fCsyEayVIuF0Pfwpay5+19yNEWCArPcoXlTm1Cb5slnArNGQ0eAg==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 57
     }
    },
    {
     "call": "POST /api/v1/counterfactual",
     "request": {
      "original_decision_id": "fd_e9f65aaf17c242439bea2d89",
      "tenant": "cus_demo_955874e8dfe6",
      "intervention_type": "identity_changed",
      "intervention_detail": {
       "authority": "revoked"
      }
     },
     "status": 200,
     "ms": 30,
     "reply": {
      "observed_chain": {
       "intent": "governed_action",
       "authority": "delegated",
       "identity_id": "urn:cain:principal:service:bf48b9267b0a43208b854ec1",
       "agent_id": "urn:cain:principal:service:bf48b9267b0a43208b854ec1",
       "action": "/demo/safe-read",
       "resource": "/demo/safe-read",
       "policy": "cain.authz",
       "risk_result": "computed",
       "decision": "REQUIRE_APPROVAL",
       "decision_id": "fd_e9f65aaf17c242439bea2d89",
       "chain_id": null,
       "evidence_id": "ev_2f522db4e13950d7",
       "nodes": [
        "INTENT",
        "AUTHORITY",
        "POLICY",
        "RISK",
        "DECISION",
        "TRACE",
        "TRAJECTORY",
        "ACTION",
        "EXECUTION",
        "EFFECT",
        "IMPACT",
        "EVIDENCE"
       ],
       "observed": true,
       "simulation": false,
       "reconstruction_status": {
        "reconstructed": true,
        "source": "fabric_decisions",
        "decision_id": "fd_e9f65aaf17c242439bea2d89",
        "chain_id": null
       }
      },
      "counterfactual_chain": {
       "intervention": {
        "type": "identity_changed",
        "detail": {
         "authority": "revoked"
        }
       },
       "predicted_alternative_outcome": "AUTHORITY_REVOKED",
       "changed_nodes": [
        "IDENTITY",
        "AUTHORITY"
       ],
       "affected_downstream_nodes": [
        "POLICY",
        "RISK",
        "DECISION"
       ],
       "risk_before": "computed",
       "risk_after": "elevated",
       "risk_delta": "elevated",
       "impact_before": "measured",
       "impact_after": "uncertain",
       "impact_delta": "authority_affected",
       "confidence": 0.8,
       "root_causes": [],
       "downstream_effects": [
        "POLICY",
        "RISK",
        "DECISION"
       ]
      },
      "observed_outcome": "REQUIRE_APPROVAL",
      "predicted_alternative_outcome": "AUTHORITY_REVOKED",
      "risk_before": "computed",
      "risk_after": "elevated",
      "risk_delta": "elevated",
      "impact_before": "measured",
      "impact_after": "uncertain",
      "impact_delta": "authority_affected",
      "confidence": 0.8,
      "root_causes": [],
      "downstream_effects": [
       "POLICY",
       "RISK",
       "DECISION"
      ],
      "assumptions": [
       "Intervention identity_changed is syntactically valid",
       "Causal graph accurately represents dependency structure",
       "No external factors besides the specified intervention change the outcome"
      ],
      "limitations": [
       "SIMULATION ONLY - NO real execution of any kind",
       "would_execute is always False - no real action is ever taken",
       "Confidence 0.8 reflects intervention directness, not causal certainty",
       "Predicted outcomes are counterfactual simulations, not guarantees"
      ],
      "evidence_ids": [
       "ev_2f522db4e13950d7"
      ],
      "tenant": "cus_demo_955874e8dfe6",
      "timestamp": "2026-11-03T23:06:15.467941+00:00",
      "determinism_hash": "9ab5ecf09c3b15cf",
      "evidence_id": "cf_9ab5ecf09c3b15cf",
      "simulation": true,
      "would_execute": false
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:06:16+00:00",
  "ms": 0,
  "reply": {
   "slug": "causal-intelligence",
   "title": "Make a real CAIN decision, then trace its root cause (policy, authority, identity)",
   "status": "ok",
   "input": null,
   "total_ms": 120,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "safe-read"
     },
     "status": 200,
     "ms": 72,
     "reply": {
      "scenario": {
       "id": "safe-read",
       "title": "A reasonable action",
       "explains": "A normal tool call with a declared intent, from a principal with no trust history yet. Policy and risk both pass, but unknown trust never becomes ALLOW on its own: the action is held for human approval."
      },
      "verdict": "REQUIRE_APPROVAL",
      "blocked": false,
      "decision_id": "fd_e9f65aaf17c242439bea2d89",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no known attack pattern matched"
       },
       {
        "stage": "trust",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_ee12bdda14954eab90405ca8 (expires 2026-11-04T00:06:15.417434+00:00)"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "execution held pending human approval"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: pending"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [],
      "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "671904c78f054b3fb426f07f02e390fdbc2e0bf67f8c3a4c7517c2a465b9e286",
       "pre_verdict": "REQUIRE_APPROVAL",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_e9f65aaf17c242439bea2d89/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_e9f65aaf17c242439bea2d89",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "dad734a13402cca96ba0f145190c43b9cbef384e6d58d0a8ea7ac76f1bcc3156",
        "recomputed_digest": "dad734a13402cca96ba0f145190c43b9cbef384e6d58d0a8ea7ac76f1bcc3156",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "f2PxuN9jFQhPZlhGqVUGL0MZfPqzBdPwq1fCsyEayVIuF0Pfwpay5+19yNEWCArPcoXlTm1Cb5slnArNGQ0eAg==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 57
     }
    },
    {
     "call": "POST /api/v1/counterfactual",
     "request": {
      "original_decision_id": "fd_e9f65aaf17c242439bea2d89",
      "tenant": "cus_demo_955874e8dfe6",
      "intervention_type": "identity_changed",
      "intervention_detail": {
       "authority": "revoked"
      }
     },
     "status": 200,
     "ms": 30,
     "reply": {
      "observed_chain": {
       "intent": "governed_action",
       "authority": "delegated",
       "identity_id": "urn:cain:principal:service:bf48b9267b0a43208b854ec1",
       "agent_id": "urn:cain:principal:service:bf48b9267b0a43208b854ec1",
       "action": "/demo/safe-read",
       "resource": "/demo/safe-read",
       "policy": "cain.authz",
       "risk_result": "computed",
       "decision": "REQUIRE_APPROVAL",
       "decision_id": "fd_e9f65aaf17c242439bea2d89",
       "chain_id": null,
       "evidence_id": "ev_2f522db4e13950d7",
       "nodes": [
        "INTENT",
        "AUTHORITY",
        "POLICY",
        "RISK",
        "DECISION",
        "TRACE",
        "TRAJECTORY",
        "ACTION",
        "EXECUTION",
        "EFFECT",
        "IMPACT",
        "EVIDENCE"
       ],
       "observed": true,
       "simulation": false,
       "reconstruction_status": {
        "reconstructed": true,
        "source": "fabric_decisions",
        "decision_id": "fd_e9f65aaf17c242439bea2d89",
        "chain_id": null
       }
      },
      "counterfactual_chain": {
       "intervention": {
        "type": "identity_changed",
        "detail": {
         "authority": "revoked"
        }
       },
       "predicted_alternative_outcome": "AUTHORITY_REVOKED",
       "changed_nodes": [
        "IDENTITY",
        "AUTHORITY"
       ],
       "affected_downstream_nodes": [
        "POLICY",
        "RISK",
        "DECISION"
       ],
       "risk_before": "computed",
       "risk_after": "elevated",
       "risk_delta": "elevated",
       "impact_before": "measured",
       "impact_after": "uncertain",
       "impact_delta": "authority_affected",
       "confidence": 0.8,
       "root_causes": [],
       "downstream_effects": [
        "POLICY",
        "RISK",
        "DECISION"
       ]
      },
      "observed_outcome": "REQUIRE_APPROVAL",
      "predicted_alternative_outcome": "AUTHORITY_REVOKED",
      "risk_before": "computed",
      "risk_after": "elevated",
      "risk_delta": "elevated",
      "impact_before": "measured",
      "impact_after": "uncertain",
      "impact_delta": "authority_affected",
      "confidence": 0.8,
      "root_causes": [],
      "downstream_effects": [
       "POLICY",
       "RISK",
       "DECISION"
      ],
      "assumptions": [
       "Intervention identity_changed is syntactically valid",
       "Causal graph accurately represents dependency structure",
       "No external factors besides the specified intervention change the outcome"
      ],
      "limitations": [
       "SIMULATION ONLY - NO real execution of any kind",
       "would_execute is always False - no real action is ever taken",
       "Confidence 0.8 reflects intervention directness, not causal certainty",
       "Predicted outcomes are counterfactual simulations, not guarantees"
      ],
      "evidence_ids": [
       "ev_2f522db4e13950d7"
      ],
      "tenant": "cus_demo_955874e8dfe6",
      "timestamp": "2026-11-03T23:06:15.467941+00:00",
      "determinism_hash": "9ab5ecf09c3b15cf",
      "evidence_id": "cf_9ab5ecf09c3b15cf",
      "simulation": true,
      "would_execute": false
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]