[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:08:27+00:00",
  "ms": 0,
  "reply": {
   "slug": "counterfactual-intelligence",
   "title": "Make a real CAIN decision, then ask: what if the verdict had been different?",
   "status": "ok",
   "input": null,
   "total_ms": 107,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "prompt-injection"
     },
     "status": 200,
     "ms": 66,
     "reply": {
      "scenario": {
       "id": "prompt-injection",
       "title": "A prompt-injection payload",
       "explains": "The same call, carrying text that tries to override the agent's instructions. The RISK stage screens the payload and denies it."
      },
      "verdict": "BLOCKED",
      "blocked": true,
      "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "matched injection technique: instruction override, system prompt extraction, credential exfiltration"
       },
       {
        "stage": "trust",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=high, decision=deny (first use of this tool with these destinations: a human approves it once)"
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "not_configured",
        "enforcing": false,
        "ran": true,
        "detail": "no human-approval rule is configured for this principal, so nothing was held for review"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "BLOCKED permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "execution prevented: an enforcing stage denied this action"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: halted"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [
       "risk",
       "trust"
      ],
      "why": null,
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "96bdb4f4d2d897bc74e775a707a00fd9356f6c0213ba6f65ffbe6dda994237c3",
       "pre_verdict": "BLOCKED",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_3d34c0d7968c4ad888ff69d9/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "8431032ef39f1b487b3228c530d8daf96913619bfb73ef6e1f497e63844f2673",
        "recomputed_digest": "8431032ef39f1b487b3228c530d8daf96913619bfb73ef6e1f497e63844f2673",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "snZg3WHXxE4dXcsacS0eCzn7KilkirXQH+4CosdXU3bqv7z7cRn/Hptjxk2pCoQ78Q8IN+LFF6WTUiaDADkTAA==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 56
     }
    },
    {
     "call": "POST /api/v1/counterfactual",
     "request": {
      "original_decision_id": "fd_3d34c0d7968c4ad888ff69d9",
      "tenant": "cus_demo_aff1908383d3",
      "intervention_type": "decision",
      "intervention_detail": {
       "verdict": "ALLOW"
      }
     },
     "status": 200,
     "ms": 22,
     "reply": {
      "observed_chain": {
       "intent": "governed_action",
       "authority": "delegated",
       "identity_id": "urn:cain:principal:service:fe77c0320f7941aabb93174e",
       "agent_id": "urn:cain:principal:service:fe77c0320f7941aabb93174e",
       "action": "/demo/prompt-injection",
       "resource": "/demo/prompt-injection",
       "policy": "cain.authz",
       "risk_result": "computed",
       "decision": "BLOCKED",
       "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
       "chain_id": null,
       "evidence_id": "ev_c22400d06ec3910c",
       "nodes": [
        "INTENT",
        "AUTHORITY",
        "POLICY",
        "RISK",
        "DECISION",
        "TRACE",
        "TRAJECTORY",
        "ACTION",
        "EXECUTION",
        "EFFECT",
        "IMPACT",
        "EVIDENCE"
       ],
       "observed": true,
       "simulation": false,
       "reconstruction_status": {
        "reconstructed": true,
        "source": "fabric_decisions",
        "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
        "chain_id": null
       }
      },
      "counterfactual_chain": {
       "intervention": {
        "type": "decision",
        "detail": {
         "verdict": "ALLOW"
        }
       },
       "predicted_alternative_outcome": "WOULD_DENY",
       "changed_nodes": [
        "DECISION"
       ],
       "affected_downstream_nodes": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ],
       "risk_before": "computed",
       "risk_after": "high",
       "risk_delta": "high",
       "impact_before": "measured",
       "impact_after": "zero",
       "impact_delta": "reduced",
       "confidence": 0.95,
       "root_causes": [],
       "downstream_effects": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ]
      },
      "observed_outcome": "BLOCKED",
      "predicted_alternative_outcome": "WOULD_DENY",
      "risk_before": "computed",
      "risk_after": "high",
      "risk_delta": "high",
      "impact_before": "measured",
      "impact_after": "zero",
      "impact_delta": "reduced",
      "confidence": 0.95,
      "root_causes": [],
      "downstream_effects": [
       "ENFORCEMENT",
       "EXECUTION",
       "EFFECT",
       "IMPACT"
      ],
      "assumptions": [
       "Intervention decision is syntactically valid",
       "Causal graph accurately represents dependency structure",
       "No external factors besides the specified intervention change the outcome"
      ],
      "limitations": [
       "SIMULATION ONLY - NO real execution of any kind",
       "would_execute is always False - no real action is ever taken",
       "Confidence 0.95 reflects intervention directness, not causal certainty",
       "Predicted outcomes are counterfactual simulations, not guarantees"
      ],
      "evidence_ids": [
       "ev_c22400d06ec3910c"
      ],
      "tenant": "cus_demo_aff1908383d3",
      "timestamp": "2026-11-03T23:08:27.869811+00:00",
      "determinism_hash": "5d14005486f2b8cf",
      "evidence_id": "cf_5d14005486f2b8cf",
      "simulation": true,
      "would_execute": false
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:08:28+00:00",
  "ms": 0,
  "reply": {
   "slug": "counterfactual-intelligence",
   "title": "Make a real CAIN decision, then ask: what if the verdict had been different?",
   "status": "ok",
   "input": null,
   "total_ms": 107,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "prompt-injection"
     },
     "status": 200,
     "ms": 66,
     "reply": {
      "scenario": {
       "id": "prompt-injection",
       "title": "A prompt-injection payload",
       "explains": "The same call, carrying text that tries to override the agent's instructions. The RISK stage screens the payload and denies it."
      },
      "verdict": "BLOCKED",
      "blocked": true,
      "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "matched injection technique: instruction override, system prompt extraction, credential exfiltration"
       },
       {
        "stage": "trust",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=high, decision=deny (first use of this tool with these destinations: a human approves it once)"
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "not_configured",
        "enforcing": false,
        "ran": true,
        "detail": "no human-approval rule is configured for this principal, so nothing was held for review"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "BLOCKED permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "execution prevented: an enforcing stage denied this action"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: halted"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [
       "risk",
       "trust"
      ],
      "why": null,
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "96bdb4f4d2d897bc74e775a707a00fd9356f6c0213ba6f65ffbe6dda994237c3",
       "pre_verdict": "BLOCKED",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_3d34c0d7968c4ad888ff69d9/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "8431032ef39f1b487b3228c530d8daf96913619bfb73ef6e1f497e63844f2673",
        "recomputed_digest": "8431032ef39f1b487b3228c530d8daf96913619bfb73ef6e1f497e63844f2673",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "snZg3WHXxE4dXcsacS0eCzn7KilkirXQH+4CosdXU3bqv7z7cRn/Hptjxk2pCoQ78Q8IN+LFF6WTUiaDADkTAA==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 56
     }
    },
    {
     "call": "POST /api/v1/counterfactual",
     "request": {
      "original_decision_id": "fd_3d34c0d7968c4ad888ff69d9",
      "tenant": "cus_demo_aff1908383d3",
      "intervention_type": "decision",
      "intervention_detail": {
       "verdict": "ALLOW"
      }
     },
     "status": 200,
     "ms": 22,
     "reply": {
      "observed_chain": {
       "intent": "governed_action",
       "authority": "delegated",
       "identity_id": "urn:cain:principal:service:fe77c0320f7941aabb93174e",
       "agent_id": "urn:cain:principal:service:fe77c0320f7941aabb93174e",
       "action": "/demo/prompt-injection",
       "resource": "/demo/prompt-injection",
       "policy": "cain.authz",
       "risk_result": "computed",
       "decision": "BLOCKED",
       "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
       "chain_id": null,
       "evidence_id": "ev_c22400d06ec3910c",
       "nodes": [
        "INTENT",
        "AUTHORITY",
        "POLICY",
        "RISK",
        "DECISION",
        "TRACE",
        "TRAJECTORY",
        "ACTION",
        "EXECUTION",
        "EFFECT",
        "IMPACT",
        "EVIDENCE"
       ],
       "observed": true,
       "simulation": false,
       "reconstruction_status": {
        "reconstructed": true,
        "source": "fabric_decisions",
        "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
        "chain_id": null
       }
      },
      "counterfactual_chain": {
       "intervention": {
        "type": "decision",
        "detail": {
         "verdict": "ALLOW"
        }
       },
       "predicted_alternative_outcome": "WOULD_DENY",
       "changed_nodes": [
        "DECISION"
       ],
       "affected_downstream_nodes": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ],
       "risk_before": "computed",
       "risk_after": "high",
       "risk_delta": "high",
       "impact_before": "measured",
       "impact_after": "zero",
       "impact_delta": "reduced",
       "confidence": 0.95,
       "root_causes": [],
       "downstream_effects": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ]
      },
      "observed_outcome": "BLOCKED",
      "predicted_alternative_outcome": "WOULD_DENY",
      "risk_before": "computed",
      "risk_after": "high",
      "risk_delta": "high",
      "impact_before": "measured",
      "impact_after": "zero",
      "impact_delta": "reduced",
      "confidence": 0.95,
      "root_causes": [],
      "downstream_effects": [
       "ENFORCEMENT",
       "EXECUTION",
       "EFFECT",
       "IMPACT"
      ],
      "assumptions": [
       "Intervention decision is syntactically valid",
       "Causal graph accurately represents dependency structure",
       "No external factors besides the specified intervention change the outcome"
      ],
      "limitations": [
       "SIMULATION ONLY - NO real execution of any kind",
       "would_execute is always False - no real action is ever taken",
       "Confidence 0.95 reflects intervention directness, not causal certainty",
       "Predicted outcomes are counterfactual simulations, not guarantees"
      ],
      "evidence_ids": [
       "ev_c22400d06ec3910c"
      ],
      "tenant": "cus_demo_aff1908383d3",
      "timestamp": "2026-11-03T23:08:27.869811+00:00",
      "determinism_hash": "5d14005486f2b8cf",
      "evidence_id": "cf_5d14005486f2b8cf",
      "simulation": true,
      "would_execute": false
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:08:28+00:00",
  "ms": 0,
  "reply": {
   "slug": "counterfactual-intelligence",
   "title": "Make a real CAIN decision, then ask: what if the verdict had been different?",
   "status": "ok",
   "input": null,
   "total_ms": 107,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "prompt-injection"
     },
     "status": 200,
     "ms": 66,
     "reply": {
      "scenario": {
       "id": "prompt-injection",
       "title": "A prompt-injection payload",
       "explains": "The same call, carrying text that tries to override the agent's instructions. The RISK stage screens the payload and denies it."
      },
      "verdict": "BLOCKED",
      "blocked": true,
      "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "matched injection technique: instruction override, system prompt extraction, credential exfiltration"
       },
       {
        "stage": "trust",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=high, decision=deny (first use of this tool with these destinations: a human approves it once)"
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "not_configured",
        "enforcing": false,
        "ran": true,
        "detail": "no human-approval rule is configured for this principal, so nothing was held for review"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "BLOCKED permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "deny",
        "enforcing": true,
        "ran": true,
        "detail": "execution prevented: an enforcing stage denied this action"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: halted"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [
       "risk",
       "trust"
      ],
      "why": null,
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "96bdb4f4d2d897bc74e775a707a00fd9356f6c0213ba6f65ffbe6dda994237c3",
       "pre_verdict": "BLOCKED",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_3d34c0d7968c4ad888ff69d9/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "8431032ef39f1b487b3228c530d8daf96913619bfb73ef6e1f497e63844f2673",
        "recomputed_digest": "8431032ef39f1b487b3228c530d8daf96913619bfb73ef6e1f497e63844f2673",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "snZg3WHXxE4dXcsacS0eCzn7KilkirXQH+4CosdXU3bqv7z7cRn/Hptjxk2pCoQ78Q8IN+LFF6WTUiaDADkTAA==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 56
     }
    },
    {
     "call": "POST /api/v1/counterfactual",
     "request": {
      "original_decision_id": "fd_3d34c0d7968c4ad888ff69d9",
      "tenant": "cus_demo_aff1908383d3",
      "intervention_type": "decision",
      "intervention_detail": {
       "verdict": "ALLOW"
      }
     },
     "status": 200,
     "ms": 22,
     "reply": {
      "observed_chain": {
       "intent": "governed_action",
       "authority": "delegated",
       "identity_id": "urn:cain:principal:service:fe77c0320f7941aabb93174e",
       "agent_id": "urn:cain:principal:service:fe77c0320f7941aabb93174e",
       "action": "/demo/prompt-injection",
       "resource": "/demo/prompt-injection",
       "policy": "cain.authz",
       "risk_result": "computed",
       "decision": "BLOCKED",
       "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
       "chain_id": null,
       "evidence_id": "ev_c22400d06ec3910c",
       "nodes": [
        "INTENT",
        "AUTHORITY",
        "POLICY",
        "RISK",
        "DECISION",
        "TRACE",
        "TRAJECTORY",
        "ACTION",
        "EXECUTION",
        "EFFECT",
        "IMPACT",
        "EVIDENCE"
       ],
       "observed": true,
       "simulation": false,
       "reconstruction_status": {
        "reconstructed": true,
        "source": "fabric_decisions",
        "decision_id": "fd_3d34c0d7968c4ad888ff69d9",
        "chain_id": null
       }
      },
      "counterfactual_chain": {
       "intervention": {
        "type": "decision",
        "detail": {
         "verdict": "ALLOW"
        }
       },
       "predicted_alternative_outcome": "WOULD_DENY",
       "changed_nodes": [
        "DECISION"
       ],
       "affected_downstream_nodes": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ],
       "risk_before": "computed",
       "risk_after": "high",
       "risk_delta": "high",
       "impact_before": "measured",
       "impact_after": "zero",
       "impact_delta": "reduced",
       "confidence": 0.95,
       "root_causes": [],
       "downstream_effects": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ]
      },
      "observed_outcome": "BLOCKED",
      "predicted_alternative_outcome": "WOULD_DENY",
      "risk_before": "computed",
      "risk_after": "high",
      "risk_delta": "high",
      "impact_before": "measured",
      "impact_after": "zero",
      "impact_delta": "reduced",
      "confidence": 0.95,
      "root_causes": [],
      "downstream_effects": [
       "ENFORCEMENT",
       "EXECUTION",
       "EFFECT",
       "IMPACT"
      ],
      "assumptions": [
       "Intervention decision is syntactically valid",
       "Causal graph accurately represents dependency structure",
       "No external factors besides the specified intervention change the outcome"
      ],
      "limitations": [
       "SIMULATION ONLY - NO real execution of any kind",
       "would_execute is always False - no real action is ever taken",
       "Confidence 0.95 reflects intervention directness, not causal certainty",
       "Predicted outcomes are counterfactual simulations, not guarantees"
      ],
      "evidence_ids": [
       "ev_c22400d06ec3910c"
      ],
      "tenant": "cus_demo_aff1908383d3",
      "timestamp": "2026-11-03T23:08:27.869811+00:00",
      "determinism_hash": "5d14005486f2b8cf",
      "evidence_id": "cf_5d14005486f2b8cf",
      "simulation": true,
      "would_execute": false
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]