{ "schema": "cain42.proof.test_vectors.v1", "generated": "2026-09-29T02:40:04Z", "produced_by": "the CAIN-42 code itself (cain45.canon, cain45.l5.*); check any implementation against it", "test_public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "other_public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "private_keys_published": false, "canonical_json": [ { "input": { "b": 2, "a": 1 }, "canonical_utf8": "{\"a\":1,\"b\":2}", "sha256": "43258cff783fe7036d8a43033f830adfc60ec037382473548ac742b888292777" }, { "input": { "z": [ 3, 1, 2 ], "nested": { "y": true, "x": null } }, "canonical_utf8": "{\"nested\":{\"x\":null,\"y\":true},\"z\":[3,1,2]}", "sha256": "51df8e50df62fa2f3acff94866a881e68a0cd3f75d5a2ebb49eb292b3c2f8a14" }, { "input": { "unicode": "caf\u00e9 \u2713" }, "canonical_utf8": "{\"unicode\":\"caf\\u00e9 \\u2713\"}", "sha256": "5863366e3a3dfa26dfaa9f65479b331a28aba945c6c0cf95c65e7d884b101542" }, { "input": { "num": 0.1, "int": 10, "neg": -3 }, "canonical_utf8": "{\"int\":10,\"neg\":-3,\"num\":0.1}", "sha256": "b672944c24e2d05224a89136702b34865f728bf7249d512516856d409e11253d" }, { "input": [], "canonical_utf8": "[]", "sha256": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" }, { "input": { "empty": {} }, "canonical_utf8": "{\"empty\":{}}", "sha256": "c5cd747263892d516ee30100e488ff01ddc2f25ffe027ec5f8030d2a7c713a58" } ], "signatures": [ { "case": "CAIN42/CAG-L5-SYSTEM-DECISION/v1 valid", "domain": "CAIN42/CAG-L5-SYSTEM-DECISION/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": 1790000000.0 }, "digest_sha256": "577293c38e35ba94bacd6697ce44573369afa54bea527bf62d972b3af6b8b06f", "signed_message": "577293c38e35ba94bacd6697ce44573369afa54bea527bf62d972b3af6b8b06f", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "fdX3ytraFNWq/+E3jCLuJPo+uUoYYEZ7Q+xn0jNQK4FIBoG1LG4ioT0NtO9BzArGPC3qSuPZCiH4UrZkaSJ0Ag==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-SYSTEM-DECISION/v1 field changed", "domain": "CAIN42/CAG-L5-SYSTEM-DECISION/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": "1790000000.0x" }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "fdX3ytraFNWq/+E3jCLuJPo+uUoYYEZ7Q+xn0jNQK4FIBoG1LG4ioT0NtO9BzArGPC3qSuPZCiH4UrZkaSJ0Ag==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-SYSTEM-DECISION/v1 wrong key", "domain": "CAIN42/CAG-L5-SYSTEM-DECISION/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": 1790000000.0 }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "fdX3ytraFNWq/+E3jCLuJPo+uUoYYEZ7Q+xn0jNQK4FIBoG1LG4ioT0NtO9BzArGPC3qSuPZCiH4UrZkaSJ0Ag==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1 valid", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "agent_id": "agent:a", "tool_id": "mcp:sql", "capability": "READ", "resource": "db:x/1" }, "digest_sha256": "93779ff22182f646fedbd71dc1b79ba214472e9477870b83504219e3056fab26", "signed_message": "93779ff22182f646fedbd71dc1b79ba214472e9477870b83504219e3056fab26", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "GXbdoOOu1B+VOvRaQgbLGjD/DqXbkSQMfAPvQqgpQBX+d/Y8EeZdHy78q2KfNyO5riNKokpoG/p+SwSgDKdzAg==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1 field changed", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "agent_id": "agent:ax", "tool_id": "mcp:sql", "capability": "READ", "resource": "db:x/1" }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "GXbdoOOu1B+VOvRaQgbLGjD/DqXbkSQMfAPvQqgpQBX+d/Y8EeZdHy78q2KfNyO5riNKokpoG/p+SwSgDKdzAg==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1 wrong key", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "agent_id": "agent:a", "tool_id": "mcp:sql", "capability": "READ", "resource": "db:x/1" }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "GXbdoOOu1B+VOvRaQgbLGjD/DqXbkSQMfAPvQqgpQBX+d/Y8EeZdHy78q2KfNyO5riNKokpoG/p+SwSgDKdzAg==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EMERGENCY/v1 valid", "domain": "CAIN42/CAG-L5-EMERGENCY/v1", "fields": { "operator": "op:a", "action": "MCP_EXECUTION_FREEZE", "scope": "system", "ttl": 600 }, "digest_sha256": "61a212802184104ad073842659632d8f3387d85594060812cd83960f937235a2", "signed_message": "61a212802184104ad073842659632d8f3387d85594060812cd83960f937235a2", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "8wlbNsVUYWhnXhuZvPVQ56RRzBYN4WwSmvYAznqF3vFTqUm360LRSH+EoEFJyOYvG3M21YgDq2/asGupdlG1Aw==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-EMERGENCY/v1 field changed", "domain": "CAIN42/CAG-L5-EMERGENCY/v1", "fields": { "operator": "op:a", "action": "MCP_EXECUTION_FREEZEx", "scope": "system", "ttl": 600 }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "8wlbNsVUYWhnXhuZvPVQ56RRzBYN4WwSmvYAznqF3vFTqUm360LRSH+EoEFJyOYvG3M21YgDq2/asGupdlG1Aw==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EMERGENCY/v1 wrong key", "domain": "CAIN42/CAG-L5-EMERGENCY/v1", "fields": { "operator": "op:a", "action": "MCP_EXECUTION_FREEZE", "scope": "system", "ttl": 600 }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "8wlbNsVUYWhnXhuZvPVQ56RRzBYN4WwSmvYAznqF3vFTqUm360LRSH+EoEFJyOYvG3M21YgDq2/asGupdlG1Aw==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1 valid", "domain": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1", "fields": { "node_id": "n1", "state_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, "digest_sha256": "aec2d11cde8fd4300f05a17964777cc11b0ed79ac70587e704194fd9cde90f9a", "signed_message": "aec2d11cde8fd4300f05a17964777cc11b0ed79ac70587e704194fd9cde90f9a", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "wsBnWqA66vqAAC7eduYJnYwKs6BFxugei04q2EZ4SNyrqT4uo6nP94e/SZ86chDW8FH5SpjvXQfPEXjEKpRaDQ==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1 field changed", "domain": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1", "fields": { "node_id": "n1x", "state_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "wsBnWqA66vqAAC7eduYJnYwKs6BFxugei04q2EZ4SNyrqT4uo6nP94e/SZ86chDW8FH5SpjvXQfPEXjEKpRaDQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1 wrong key", "domain": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1", "fields": { "node_id": "n1", "state_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "wsBnWqA66vqAAC7eduYJnYwKs6BFxugei04q2EZ4SNyrqT4uo6nP94e/SZ86chDW8FH5SpjvXQfPEXjEKpRaDQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-SYSTEM/v1 valid", "domain": "CAIN42/CAG-L5-SYSTEM/v1", "fields": { "system_id": "sys:x", "policy_version": "p1" }, "digest_sha256": "a31e0fb77c7aba927e75aa4262087fcbe9109f71af3d1619864734b25035d97e", "signed_message": "a31e0fb77c7aba927e75aa4262087fcbe9109f71af3d1619864734b25035d97e", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "rn7Lndfzg//KdurlcM93vaKsJ8xyeV/fwSS7Zce9o8BBGPup5W1AAQJdm+qtqprY9SsqQxDosEjpo1NbCdyPDQ==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-SYSTEM/v1 field changed", "domain": "CAIN42/CAG-L5-SYSTEM/v1", "fields": { "system_id": "sys:x", "policy_version": "p1x" }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "rn7Lndfzg//KdurlcM93vaKsJ8xyeV/fwSS7Zce9o8BBGPup5W1AAQJdm+qtqprY9SsqQxDosEjpo1NbCdyPDQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-SYSTEM/v1 wrong key", "domain": "CAIN42/CAG-L5-SYSTEM/v1", "fields": { "system_id": "sys:x", "policy_version": "p1" }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "rn7Lndfzg//KdurlcM93vaKsJ8xyeV/fwSS7Zce9o8BBGPup5W1AAQJdm+qtqprY9SsqQxDosEjpo1NbCdyPDQ==", "expected_valid": false }, { "case": "CAIN42/L5-AUTHORIZATION-LEASE/v1 valid", "domain": "CAIN42/L5-AUTHORIZATION-LEASE/v1", "fields": { "lease_id": "al_1", "agent_id": "agent:a", "trajectory_id": "tr_1" }, "digest_sha256": "2bcec7f63173977598e2b3fa03a1a945e4f32f7e98ae0b07f1e52653407389a1", "signed_message": "2bcec7f63173977598e2b3fa03a1a945e4f32f7e98ae0b07f1e52653407389a1", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "LNd8vRJU7Cbi/D7gzv23N9fDlOeSdbt5e5id0UabFwQzXbdVpmGCU488+BrT8112bXUWZVgv3aeJjrhrs+VJCg==", "expected_valid": true }, { "case": "CAIN42/L5-AUTHORIZATION-LEASE/v1 field changed", "domain": "CAIN42/L5-AUTHORIZATION-LEASE/v1", "fields": { "lease_id": "al_1", "agent_id": "agent:ax", "trajectory_id": "tr_1" }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "LNd8vRJU7Cbi/D7gzv23N9fDlOeSdbt5e5id0UabFwQzXbdVpmGCU488+BrT8112bXUWZVgv3aeJjrhrs+VJCg==", "expected_valid": false }, { "case": "CAIN42/L5-AUTHORIZATION-LEASE/v1 wrong key", "domain": "CAIN42/L5-AUTHORIZATION-LEASE/v1", "fields": { "lease_id": "al_1", "agent_id": "agent:a", "trajectory_id": "tr_1" }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "LNd8vRJU7Cbi/D7gzv23N9fDlOeSdbt5e5id0UabFwQzXbdVpmGCU488+BrT8112bXUWZVgv3aeJjrhrs+VJCg==", "expected_valid": false }, { "case": "CAIN42/L5-TRAJECTORY-EVENT/v1 valid", "domain": "CAIN42/L5-TRAJECTORY-EVENT/v1", "fields": { "event_id": "te_1", "sequence_number": 0, "previous_event_hash": "" }, "digest_sha256": "ea03f8e5829c71dbbb2de3e038b06e301b850447d94efb479262aeed2f84286a", "signed_message": "ea03f8e5829c71dbbb2de3e038b06e301b850447d94efb479262aeed2f84286a", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "otpxzXy3oNALNyW/itpSM5LkfPKJilmhHKsFtBK1zjCz/sqWqFneoMttyR4RdSoawcTYHXP+vumicc9lsZa1CA==", "expected_valid": true }, { "case": "CAIN42/L5-TRAJECTORY-EVENT/v1 field changed", "domain": "CAIN42/L5-TRAJECTORY-EVENT/v1", "fields": { "event_id": "te_1x", "sequence_number": 0, "previous_event_hash": "" }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "otpxzXy3oNALNyW/itpSM5LkfPKJilmhHKsFtBK1zjCz/sqWqFneoMttyR4RdSoawcTYHXP+vumicc9lsZa1CA==", "expected_valid": false }, { "case": "CAIN42/L5-TRAJECTORY-EVENT/v1 wrong key", "domain": "CAIN42/L5-TRAJECTORY-EVENT/v1", "fields": { "event_id": "te_1", "sequence_number": 0, "previous_event_hash": "" }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "otpxzXy3oNALNyW/itpSM5LkfPKJilmhHKsFtBK1zjCz/sqWqFneoMttyR4RdSoawcTYHXP+vumicc9lsZa1CA==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-AGENT-REQUEST/v1 valid", "domain": "CAIN42/CAG-L5-AGENT-REQUEST/v1", "fields": { "tenant": "t", "agent_id": "agent:a", "nonce": "n1", "at": 1790000000.0 }, "digest_sha256": "234009ef5fb9a551b906019c948641254be2e23d5e6c1edd3c89cf0d207c0797", "signed_message": "234009ef5fb9a551b906019c948641254be2e23d5e6c1edd3c89cf0d207c0797", "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "PQQBRuBYrpEgLAsJ3m4WNp21dDksrGFoD2557i5PzLXXCJ353g+4akttJSqbtMVmQfWueeiVBNAg3mNDDZs2Bw==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-AGENT-REQUEST/v1 field changed", "domain": "CAIN42/CAG-L5-AGENT-REQUEST/v1", "fields": { "tenant": "t", "agent_id": "agent:ax", "nonce": "n1", "at": 1790000000.0 }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "PQQBRuBYrpEgLAsJ3m4WNp21dDksrGFoD2557i5PzLXXCJ353g+4akttJSqbtMVmQfWueeiVBNAg3mNDDZs2Bw==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-AGENT-REQUEST/v1 wrong key", "domain": "CAIN42/CAG-L5-AGENT-REQUEST/v1", "fields": { "tenant": "t", "agent_id": "agent:a", "nonce": "n1", "at": 1790000000.0 }, "public_key_b64": "7xIGpQwgaf9bn34yUU7Aim/KgUtcU/P1cS+O0Vc6lKI=", "signature_b64": "PQQBRuBYrpEgLAsJ3m4WNp21dDksrGFoD2557i5PzLXXCJ353g+4akttJSqbtMVmQfWueeiVBNAg3mNDDZs2Bw==", "expected_valid": false }, { "case": "signature replayed under another domain", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": 1790000000.0 }, "public_key_b64": "YUDsCUgZv02rJ0VsxmGuqfBBipUt1irUvGVVOFMk8tY=", "signature_b64": "fdX3ytraFNWq/+E3jCLuJPo+uUoYYEZ7Q+xn0jNQK4FIBoG1LG4ioT0NtO9BzArGPC3qSuPZCiH4UrZkaSJ0Ag==", "expected_valid": false } ], "merkle": { "rule": "leaf = the 32-byte hash itself; node = SHA-256(0x01 || left || right); an odd last node is promoted unchanged; empty tree = SHA-256('')", "cases": [ { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906" ], "root": "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc" ], "root": "be957cc0326c2b68851cc241d3f2180a09c08519ff458165f942d9222bee1cb5" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa" ], "root": "05378b42070c9de90a020e756277ea46013887a398bbf8847244db9f9f724044" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa", "faadd9f5710e2ee64366473a76676041698fe9bc14f2837f756ab44668d6e5a7" ], "root": "436e51670fe5512ec7acf021c91a6f91d939798832bcf428043e5c76c2a60d07" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa", "faadd9f5710e2ee64366473a76676041698fe9bc14f2837f756ab44668d6e5a7", "f226213787fa67fcd71cac979ffaea093aa7e37b8defd09d5fba16424141fd45" ], "root": "f3203277d61e115bb402610d87e576183681901992f8f547376e00a5a3730a06" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa", "faadd9f5710e2ee64366473a76676041698fe9bc14f2837f756ab44668d6e5a7", "f226213787fa67fcd71cac979ffaea093aa7e37b8defd09d5fba16424141fd45", "84ebe117802b8598e3ebb40bfc7e335bed38c5b1d13f4581f6578e8b0a270dc4", "ed9254691134e3a740555934286410d7285d0954ff578d27c89273d4aad62df8" ], "root": "be8440ce348ada7399542781a8c1cd40e90ccb7eb0622f77a42dfa40ff954f2d" }, { "leaves": [], "root": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" } ] }, "policy_precedence": { "levels": [ "CONSTITUTION", "SYSTEM_SAFETY", "ORGANIZATION", "ENVIRONMENT", "RESOURCE", "AGENT", "TRAJECTORY", "ACTION" ], "effects": [ "DENY", "REQUIRE_APPROVAL", "ALLOW" ], "cases": [ { "case": "higher DENY beats lower ALLOW", "rules": [ { "level": "CONSTITUTION", "effect": "DENY", "capabilities": [ "GRANT_ADMIN" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null }, { "level": "ACTION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "GRANT_ADMIN", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "REQUIRE_APPROVAL beats ALLOW", "rules": [ { "level": "SYSTEM_SAFETY", "effect": "REQUIRE_APPROVAL", "capabilities": [ "DELETE" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null }, { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "DELETE", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "REQUIRE_APPROVAL" }, { "case": "plain ALLOW", "rules": [ { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "db:*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "ALLOW" }, { "case": "no rule allows", "rules": [ { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "api:*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "malformed rule fails closed", "rules": [ { "level": "ORG", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "unknown effect fails closed", "rules": [ { "level": "ACTION", "effect": "MAYBE", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "sensitivity-targeted deny", "rules": [ { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null }, { "level": "RESOURCE", "effect": "DENY", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": 1 } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" } ] }, "authority_intersection": { "rule": "allowed only if EVERY layer holds exactly (capability, pattern) with the resource inside the pattern; an empty or missing layer allows nothing; capabilities never imply each other", "cases": [ { "layers": { "AGENT": [ [ "READ", "db:a/*" ] ], "SYSTEM": [ [ "READ", "db:*" ] ] }, "capability": "READ", "resource": "db:a/t", "allowed": true, "outside": [] }, { "layers": { "AGENT": [ [ "READ", "db:a/*" ] ], "SYSTEM": [ [ "READ", "db:*" ] ] }, "capability": "READ", "resource": "db:b/t", "allowed": false, "outside": [ "AGENT" ] }, { "layers": { "AGENT": [ [ "ADMIN", "db:*" ] ], "SYSTEM": [ [ "ADMIN", "db:*" ], [ "READ", "db:*" ] ] }, "capability": "READ", "resource": "db:a/t", "allowed": false, "outside": [ "AGENT" ] }, { "layers": { "AGENT": [ [ "ADMIN", "db:*" ] ], "SYSTEM": [ [ "ADMIN", "db:*" ] ] }, "capability": "GRANT_ADMIN", "resource": "db:a/t", "allowed": false, "outside": [ "AGENT", "SYSTEM" ] }, { "layers": { "AGENT": [ [ "WRITE", "db:*" ] ], "SYSTEM": [] }, "capability": "WRITE", "resource": "db:a/t", "allowed": false, "outside": [ "SYSTEM" ] }, { "layers": { "AGENT": [ [ "READ", "db:*" ] ], "SYSTEM": [ [ "READ", "db:*" ] ], "TRAJECTORY": null }, "capability": "READ", "resource": "db:a/t", "allowed": false, "outside": [ "TRAJECTORY" ] } ] }, "blast_radius": { "classes": [ "LOCAL", "SERVICE", "MULTI-SERVICE", "ORGANIZATIONAL", "CROSS-ENVIRONMENT", "SYSTEM-WIDE", "CRITICAL" ], "cases": [ { "case": "single node", "nodes": { "db": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [], "target": "db", "reversibility": "REVERSIBLE", "expected_class": "LOCAL" }, { "case": "one service behind it", "nodes": { "db": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "s1": { "kind": "SERVICE", "environment": "production", "organization": "o" } }, "edges": [ [ "s1", "db" ] ], "target": "db", "reversibility": "REVERSIBLE", "expected_class": "SERVICE" }, { "case": "two services", "nodes": { "cfg": { "kind": "CONFIG", "environment": "production", "organization": "o" }, "s1": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "s2": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "q": { "kind": "QUEUE", "environment": "production", "organization": "o" }, "x": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [ [ "s1", "cfg" ], [ "s2", "s1" ] ], "target": "cfg", "reversibility": "REVERSIBLE", "expected_class": "MULTI-SERVICE" }, { "case": "two services, irreversible", "nodes": { "cfg": { "kind": "CONFIG", "environment": "production", "organization": "o" }, "s1": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "s2": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "q": { "kind": "QUEUE", "environment": "production", "organization": "o" }, "x": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [ [ "s1", "cfg" ], [ "s2", "s1" ] ], "target": "cfg", "reversibility": "IRREVERSIBLE", "expected_class": "CRITICAL" }, { "case": "crosses environments", "nodes": { "a": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "b": { "kind": "SERVICE", "environment": "staging", "organization": "o" }, "c": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "d": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "e": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [ [ "b", "a" ] ], "target": "a", "reversibility": "REVERSIBLE", "expected_class": "CROSS-ENVIRONMENT" }, { "case": "crosses organizations", "nodes": { "a": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "b": { "kind": "SERVICE", "environment": "production", "organization": "o2" } }, "edges": [ [ "b", "a" ] ], "target": "a", "reversibility": "REVERSIBLE", "expected_class": "SYSTEM-WIDE" } ] }, "governance_quorum": { "node_public_keys_b64": { "n1": "sF30qE1s/WplTHUs50SoxFMCZQM3FUIlrkcJaaY8yaM=", "n2": "+fUq2Mec9iLdUznjOgAx9yHjlEWR1Jsfwi98dms4yGg=", "n3": "dzVIwHTxjdWTltqTa1h1eb7UnfCd1CPNuI4GBL1HOgQ=", "n4": "lInuVMefWV0oSf3EliF5J11JwofjK1ckCN3VK+D2gPc=" }, "quorum": 3, "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "cases": [ { "case": "3 of 4 agree", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "JP8IlJQ68wo9Z5inMR+CIGz+x0OlGL4C+iVN7SBAOEkZv2TUQj/Gdcu4Z74huyBZlu0lRM2AIYawx3SRNROODg==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "CGLWBGHfqsVeZuvRW/UT5nd22beg6v+k1pS+a2pzXTAHj2uzUrhJ8Sh0Fxxn9urBBQ/3zI35lwZVT6L+RGDTCQ==" }, { "node_id": "n3", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "WiafKqNqR30rgyDXu5L25HNh+7Fhw8ctLBKKp+xHxOGrxgU6aHSoCaWayYzZhDsNCl7SbLTZjfR6kQjfzLl2CQ==" } ], "authoritative": true }, { "case": "2 of 4 (partition)", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "JP8IlJQ68wo9Z5inMR+CIGz+x0OlGL4C+iVN7SBAOEkZv2TUQj/Gdcu4Z74huyBZlu0lRM2AIYawx3SRNROODg==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "CGLWBGHfqsVeZuvRW/UT5nd22beg6v+k1pS+a2pzXTAHj2uzUrhJ8Sh0Fxxn9urBBQ/3zI35lwZVT6L+RGDTCQ==" } ], "authoritative": false, "reason": "BELOW_QUORUM" }, { "case": "one node conflicts", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "JP8IlJQ68wo9Z5inMR+CIGz+x0OlGL4C+iVN7SBAOEkZv2TUQj/Gdcu4Z74huyBZlu0lRM2AIYawx3SRNROODg==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "CGLWBGHfqsVeZuvRW/UT5nd22beg6v+k1pS+a2pzXTAHj2uzUrhJ8Sh0Fxxn9urBBQ/3zI35lwZVT6L+RGDTCQ==" }, { "node_id": "n3", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "WiafKqNqR30rgyDXu5L25HNh+7Fhw8ctLBKKp+xHxOGrxgU6aHSoCaWayYzZhDsNCl7SbLTZjfR6kQjfzLl2CQ==" }, { "node_id": "n4", "state_digest": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee", "signature": "Iqs5Id7nYGIHXYhQ1fQRvFOAC3lECtNP3VWCEIMb6SWZm/i+y1ukNk67OkYaLP/+QW/eLUl2A3gtMNEkLDF6BQ==" } ], "authoritative": false, "reason": "CONFLICTING_GOVERNANCE_STATE" }, { "case": "duplicated vote", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "JP8IlJQ68wo9Z5inMR+CIGz+x0OlGL4C+iVN7SBAOEkZv2TUQj/Gdcu4Z74huyBZlu0lRM2AIYawx3SRNROODg==" }, { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "JP8IlJQ68wo9Z5inMR+CIGz+x0OlGL4C+iVN7SBAOEkZv2TUQj/Gdcu4Z74huyBZlu0lRM2AIYawx3SRNROODg==" }, { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "JP8IlJQ68wo9Z5inMR+CIGz+x0OlGL4C+iVN7SBAOEkZv2TUQj/Gdcu4Z74huyBZlu0lRM2AIYawx3SRNROODg==" } ], "authoritative": false, "reason": "BELOW_QUORUM" }, { "case": "forged by an unregistered key", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "FQBB1ZQj8GQmrgzzWdM7kgwPPs8QSICD1KleyeiKE9t8TO9JqC6cTqh4hS+OMt5hj2OJ1UWReYNwOZoPC3jSBQ==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "LmCP1HzhVnUHwZwgp74EMpr5bQiiy9VIefAWriLTumphMg92asHYR4wiKJcX/yP5kUkknHoOcVp1cdovlnT/Bw==" }, { "node_id": "n3", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "K66cSbuSo4aujY7kLhsqLwH5MAZirTE4CYvk/r9bBwIF7pRyRqN6bVFIYv6SAA0dt0yFgotcLFd2213XHLwWAA==" } ], "authoritative": false, "reason": "NO_VALID_VOTES" } ] }, "lease_validity": { "max_ttl_seconds": 3600.0, "risk_bands": [ "LOW", "GUARDED", "ELEVATED", "HIGH", "CRITICAL" ], "cases": [ { "case": "valid", "lease": { "lease_id": "al_4dd80a28a821f62cb96d", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [] }, { "case": "expired", "lease": { "lease_id": "al_2e8459c4142395d1de18", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 601.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_EXPIRED" ] }, { "case": "no expiry", "lease": { "lease_id": "al_21f1390698476509b721", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 0.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_UNBOUNDED" ] }, { "case": "longer than 1 h", "lease": { "lease_id": "al_f6127385acecb537f323", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 7200.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_TTL_EXCEEDS_MAXIMUM" ] }, { "case": "not yet valid", "lease": { "lease_id": "al_43a8d08efbf1fddc9e92", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 50.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_NOT_YET_VALID" ] }, { "case": "policy changed", "lease": { "lease_id": "al_ff8f82585d010b7c975a", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p2", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "POLICY_CHANGED" ] }, { "case": "unbound policy", "lease": { "lease_id": "al_801e64f27c9b108802a3", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "POLICY_UNBOUND" ] }, { "case": "trust below floor", "lease": { "lease_id": "al_132ea182fad49752c6d5", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.4, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "TRUST_BELOW_FLOOR" ] }, { "case": "risk above ceiling", "lease": { "lease_id": "al_4a473db71c8038281c67", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "HIGH", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "RISK_CEILING_EXCEEDED" ] }, { "case": "context changed", "lease": { "lease_id": "al_361410234ffce0fc64ed", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c2", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "CONTEXT_CHANGED" ] }, { "case": "empty scope", "lease": { "lease_id": "al_8ac24489f909b6ce899d", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_SCOPE_EMPTY" ] }, { "case": "action outside scope", "lease": { "lease_id": "al_2eb656eb3ee7701b9e52", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "WRITE", "resource": "db:x/1" }, "expected_reasons": [ "ACTION_SCOPE_EXCEEDED" ] }, { "case": "resource outside scope", "lease": { "lease_id": "al_a9cda0b8494936a092d1", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:y/1" }, "expected_reasons": [ "RESOURCE_SCOPE_EXCEEDED" ] }, { "case": "revoked", "lease": { "lease_id": "al_cc2d4f8557f7b55686d9", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "REVOKED" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_REVOKED" ] } ] } }