[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:12:18+00:00",
  "ms": 0,
  "reply": {
   "slug": "guardian-scorecard",
   "title": "Score your agent program against Guardian Agent capabilities",
   "status": "ok",
   "input": null,
   "total_ms": 68,
   "steps": [
    {
     "call": "POST /v1/score",
     "request": {
      "logs_every_agent_action": true,
      "per_agent_identity_tracking": true,
      "centralized_audit_trail": true,
      "automated_drift_detection": false,
      "automated_red_team_testing": false
     },
     "status": 200,
     "ms": 52,
     "reply": {
      "overall_score": 0.25,
      "verdict": "Early stage -- most named Guardian Agent capabilities are not yet in place.",
      "pillars": {
       "visibility": {
        "score": 0.75,
        "capabilities_met": 3,
        "capabilities_total": 4
       },
       "continuous_assurance": {
        "score": 0.0,
        "capabilities_met": 0,
        "capabilities_total": 4
       },
       "runtime_enforcement": {
        "score": 0.0,
        "capabilities_met": 0,
        "capabilities_total": 4
       }
      },
      "gaps": [
       {
        "pillar": "visibility",
        "flag": "real_time_dashboard",
        "gap": "Current agent activity is visible live, not only reconstructable after the fact.",
        "remediation": "Add a live view of current agent activity -- after-the-fact log review alone is too slow to act on."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "periodic_policy_reevaluation",
        "gap": "Policies are re-checked against actual agent behavior on a schedule, not only at deployment.",
        "remediation": "Re-evaluate policy compliance on a schedule -- a policy checked once at launch can silently drift."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "automated_drift_detection",
        "gap": "Tool/agent definitions are monitored for unexpected changes after approval.",
        "remediation": "Add automated drift detection so a tool definition changing after approval doesn't go unnoticed."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "automated_red_team_testing",
        "gap": "Defenses are proactively tested with adversarial probes, not just passively monitored.",
        "remediation": "Run automated adversarial probes against your own agents periodically, not only after an incident."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "incident_response_plan",
        "gap": "A defined process exists for what happens when a violation is caught.",
        "remediation": "Define an incident response plan -- detection without a response process just produces alerts nobody acts on."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "fail_closed_on_auth_failure",
        "gap": "If an identity/policy/billing check can't be completed, the request is blocked, not allowed through.",
        "remediation": "Fail closed: if a check can't be completed, reject the request instead of letting it through by default."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "real_time_revocation",
        "gap": "Access can be cut immediately, not only at the next redeploy or restart.",
        "remediation": "Make revocation take effect on the next request, not the next deployment."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "per_call_authorization",
        "gap": "Every individual action is checked, not just a session established once at the start.",
        "remediation": "Authorize per call, not per session -- a session-level check doesn't catch an agent going off-script mid-session."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "sandboxed_execution",
        "gap": "Agent actions run in a contained environment with a limited blast radius.",
        "remediation": "Sandbox agent tool execution so a compromised or misbehaving agent can't reach beyond its intended scope."
       }
      ],
      "assessed_at": "2026-11-03T23:12:18.013660+00:00"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:12:18+00:00",
  "ms": 0,
  "reply": {
   "slug": "guardian-scorecard",
   "title": "Score your agent program against Guardian Agent capabilities",
   "status": "ok",
   "input": null,
   "total_ms": 68,
   "steps": [
    {
     "call": "POST /v1/score",
     "request": {
      "logs_every_agent_action": true,
      "per_agent_identity_tracking": true,
      "centralized_audit_trail": true,
      "automated_drift_detection": false,
      "automated_red_team_testing": false
     },
     "status": 200,
     "ms": 52,
     "reply": {
      "overall_score": 0.25,
      "verdict": "Early stage -- most named Guardian Agent capabilities are not yet in place.",
      "pillars": {
       "visibility": {
        "score": 0.75,
        "capabilities_met": 3,
        "capabilities_total": 4
       },
       "continuous_assurance": {
        "score": 0.0,
        "capabilities_met": 0,
        "capabilities_total": 4
       },
       "runtime_enforcement": {
        "score": 0.0,
        "capabilities_met": 0,
        "capabilities_total": 4
       }
      },
      "gaps": [
       {
        "pillar": "visibility",
        "flag": "real_time_dashboard",
        "gap": "Current agent activity is visible live, not only reconstructable after the fact.",
        "remediation": "Add a live view of current agent activity -- after-the-fact log review alone is too slow to act on."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "periodic_policy_reevaluation",
        "gap": "Policies are re-checked against actual agent behavior on a schedule, not only at deployment.",
        "remediation": "Re-evaluate policy compliance on a schedule -- a policy checked once at launch can silently drift."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "automated_drift_detection",
        "gap": "Tool/agent definitions are monitored for unexpected changes after approval.",
        "remediation": "Add automated drift detection so a tool definition changing after approval doesn't go unnoticed."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "automated_red_team_testing",
        "gap": "Defenses are proactively tested with adversarial probes, not just passively monitored.",
        "remediation": "Run automated adversarial probes against your own agents periodically, not only after an incident."
       },
       {
        "pillar": "continuous_assurance",
        "flag": "incident_response_plan",
        "gap": "A defined process exists for what happens when a violation is caught.",
        "remediation": "Define an incident response plan -- detection without a response process just produces alerts nobody acts on."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "fail_closed_on_auth_failure",
        "gap": "If an identity/policy/billing check can't be completed, the request is blocked, not allowed through.",
        "remediation": "Fail closed: if a check can't be completed, reject the request instead of letting it through by default."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "real_time_revocation",
        "gap": "Access can be cut immediately, not only at the next redeploy or restart.",
        "remediation": "Make revocation take effect on the next request, not the next deployment."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "per_call_authorization",
        "gap": "Every individual action is checked, not just a session established once at the start.",
        "remediation": "Authorize per call, not per session -- a session-level check doesn't catch an agent going off-script mid-session."
       },
       {
        "pillar": "runtime_enforcement",
        "flag": "sandboxed_execution",
        "gap": "Agent actions run in a contained environment with a limited blast radius.",
        "remediation": "Sandbox agent tool execution so a compromised or misbehaving agent can't reach beyond its intended scope."
       }
      ],
      "assessed_at": "2026-11-03T23:12:18.013660+00:00"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]