Hugging Face's logo

Spaces:
claytonsamples
/
controlspec
Running

App Files Community
controlspec
File size: 191,947 Bytes
b515adc
058de44
 
b0b1f38
 
 
 
058de44
b0b1f38
 
 
 
 
 
058de44
 
 
b0b1f38
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
058de44
b0b1f38
 
 
 
 
 
 
 
058de44
b0b1f38
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
058de44
b0b1f38
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<meta name="description" content="Inspect recorded ControlSpec action controls through an experimental NVIDIA OpenShell middleware integration. Scripted inputs, synthetic targets, inspectable evidence.">
<title>ControlSpec + OpenShell — Before an agent acts.</title>
<style>
:root{color-scheme:dark;--bg:#0d1310;--panel:#151e18;--line:#334338;--text:#f0f3e9;--muted:#b0bdaf;--lime:#cdfa8b;--orange:#ffc09b;--blue:#aecfff;--dim:#6e8272}
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:15px/1.55 system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}button,a,summary{touch-action:manipulation}a{color:inherit;text-underline-offset:4px}button{font:inherit;cursor:pointer}button:focus-visible,a:focus-visible,summary:focus-visible{outline:3px solid var(--blue);outline-offset:5px}button:disabled{opacity:.5;cursor:default}header,main,footer{max-width:1440px;margin:auto;padding-left:48px;padding-right:48px}header{min-height:88px;display:flex;align-items:center;justify-content:space-between;gap:24px;border-bottom:1px solid var(--line)}.brand{display:flex;align-items:center;gap:11px;text-decoration:none;font-size:22px;font-weight:720;letter-spacing:-.8px}.brand-mark{width:23px;height:25px;border:2px solid var(--lime);border-radius:4px 4px 12px 12px;display:inline-grid;place-items:center}.brand-mark:after{content:"";width:6px;height:6px;background:var(--lime);border-radius:50%}.links{display:flex;gap:23px;align-items:center;font-size:12px;flex-wrap:wrap}.links a{text-decoration:none}.links a:hover{text-decoration:underline}.hero{display:grid;grid-template-columns:1.3fr 1fr;gap:50px;align-items:end;padding:47px 0 32px}.eyebrow{font:700 10px/1.5 ui-monospace,SFMono-Regular,Consolas,monospace;text-transform:uppercase;letter-spacing:1.7px;color:var(--lime)}h1{font-size:clamp(45px,5.2vw,78px);line-height:1.01;letter-spacing:-3.5px;font-weight:550;margin:17px 0 0}h1 span{color:var(--lime)}.hero-copy{padding-bottom:3px;max-width:470px}.hero-copy p{font-size:16px;color:var(--muted);margin:0 0 18px}.hero-copy strong{font-weight:550;color:var(--text)}.experiment{display:inline-flex;gap:9px;align-items:center;font:11px ui-monospace,monospace;color:var(--muted)}.experiment:before{content:"";width:6px;height:6px;border-radius:50%;background:var(--lime)}.boundary{display:grid;grid-template-columns:1fr 1fr 1fr;border:1px solid var(--line);border-radius:11px;overflow:hidden}.boundary-item{padding:15px 21px;display:flex;align-items:center;gap:14px;position:relative}.boundary-item+.boundary-item{border-left:1px solid var(--line)}.boundary-number{color:var(--dim);font:12px ui-monospace,monospace}.boundary-item b{font-weight:550;display:block;font-size:13px}.boundary-item small{color:var(--muted);display:block;font-size:11px}.boundary-item:nth-child(2){background:#cdfa8b08}.boundary-item:nth-child(2) b{color:var(--lime)}.boundary-arrow{margin-left:auto;color:var(--dim)}.disclosure{display:flex;gap:13px;padding:18px 0 0;align-items:start;color:var(--muted);font-size:12px}.disclosure .tag{flex-shrink:0;border:1px solid var(--line);padding:3px 7px;border-radius:4px;color:var(--text);font:10px/1.5 ui-monospace,monospace;text-transform:uppercase}.disclosure p{margin:0}.disclosure strong{font-weight:600;color:var(--text)}.lab-top{display:flex;justify-content:space-between;align-items:center;gap:20px;margin:37px 0 13px}.lab-top h2{font-size:13px;font-weight:550;margin:0;letter-spacing:.2px}.lab-top span{color:var(--muted);font:11px ui-monospace,monospace}.scenes{display:flex;flex-wrap:wrap;gap:8px;margin-bottom:19px}.scenes button{border:1px solid var(--line);background:transparent;color:var(--muted);border-radius:6px;padding:8px 12px;font-size:12px;min-height:39px;text-align:left}.scenes button[aria-pressed=true]{color:#162013;background:var(--lime);border-color:var(--lime)}.scenes button span{font:10px ui-monospace,monospace;opacity:.7;margin-right:8px}.stage{border:1px solid var(--line);border-radius:12px;background:var(--panel);overflow:hidden}.scene-head{padding:24px 27px;display:flex;gap:20px;justify-content:space-between}.scene-head h3{font-size:25px;line-height:1.25;letter-spacing:-.6px;font-weight:550;margin:5px 0 8px}.scene-head p{color:var(--muted);font-size:13px;margin:0;max-width:780px}.scene-counter{font:11px ui-monospace,monospace;color:var(--muted);white-space:nowrap;padding-top:5px}.request{margin:0 27px 22px;padding:10px 13px;background:#0d1510;border:1px solid var(--line);border-radius:5px;font:11px/1.7 ui-monospace,monospace;color:var(--muted)}.request summary{cursor:pointer;color:var(--text);overflow-wrap:anywhere}.request pre{white-space:pre-wrap;overflow-wrap:anywhere;margin:12px 0 0}.phases{display:flex;gap:13px;padding:14px 27px;border-top:1px solid var(--line);border-bottom:1px solid var(--line);background:#101812}.phases span{flex:1;border-top:2px solid var(--line);padding-top:8px;color:var(--muted);font:10px ui-monospace,monospace;text-transform:uppercase;letter-spacing:.6px}.phases span.active{border-color:var(--lime);color:var(--lime)}.lanes{display:grid;grid-template-columns:repeat(3,minmax(0,1fr))}.lane{padding:24px 25px;min-width:0}.lane+.lane{border-left:1px solid var(--line)}.lane.combined{background:linear-gradient(150deg,#cdfa8b08,transparent 80%)}.lane.unavailable{background:repeating-linear-gradient(135deg,transparent,transparent 12px,#b0bdaf03 12px,#b0bdaf03 13px)}.lane-title{display:flex;align-items:center;gap:9px;font-size:13px;font-weight:650}.marker{width:7px;height:7px;flex-shrink:0;background:var(--orange);border-radius:50%}.native .marker{background:var(--blue)}.combined .marker{background:var(--lime)}.lane-sub{color:var(--muted);font-size:11px;min-height:35px;margin:7px 0 18px}.state-label{font:10px ui-monospace,monospace;text-transform:uppercase;letter-spacing:1px;color:var(--muted)}.value{font-size:40px;line-height:1.35;letter-spacing:-1.7px;font-weight:450;font-variant-numeric:tabular-nums;margin:3px 0}.unavailable .value{color:var(--dim)}.state-caption{font-size:11px;color:var(--muted);min-height:36px;overflow-wrap:anywhere}.status{display:inline-flex;max-width:100%;border:1px solid var(--line);border-radius:4px;padding:5px 8px;font:10px/1.5 ui-monospace,monospace;letter-spacing:.4px;text-transform:uppercase;color:var(--muted);margin:18px 0 10px;overflow-wrap:anywhere}.status.revealed{color:var(--text);border-color:#6e8272}.combined .status.revealed{color:var(--lime);border-color:#6c874d;background:#cdfa8b06}.reason{min-height:64px;font-size:12px;color:var(--muted);margin:0;overflow-wrap:anywhere}.evidence-summary{border-top:1px solid var(--line);margin-top:16px;padding-top:13px;font-size:11px;color:var(--muted);min-height:63px;overflow-wrap:anywhere}.evidence-summary b{font-weight:600;color:var(--text);display:block;margin-bottom:5px}.controls{display:flex;align-items:center;flex-wrap:wrap;gap:9px;padding:17px 27px;background:#101812;border-top:1px solid var(--line)}.controls button{border:1px solid var(--line);border-radius:6px;padding:10px 14px;background:transparent;color:var(--text);font-size:12px;min-height:40px}.controls .primary{background:var(--lime);color:#172014;border-color:var(--lime);font-weight:650;min-width:143px}.progress-text{color:var(--muted);font:10px ui-monospace,monospace;margin-left:auto}.takeaway{display:flex;gap:15px;align-items:start;margin:21px 0 30px}.takeaway .arrow{font-size:22px;color:var(--lime);line-height:1.2}.takeaway p{margin:0;font-size:14px;max-width:920px}.takeaway small{display:block;margin-top:6px;font-size:11px;color:var(--muted)}.audit{border-top:1px solid var(--line);display:grid;grid-template-columns:1fr 1fr;gap:38px;padding-top:25px}.audit h2{font-size:16px;font-weight:550;letter-spacing:-.2px;margin:0 0 13px}.facts{margin:0;font-size:11px;display:grid;grid-template-columns:110px 1fr;gap:10px 12px}.facts dt{color:var(--muted)}.facts dd{margin:0;overflow-wrap:anywhere}.facts .mono{font-family:ui-monospace,monospace}.runtime-status{color:var(--orange)}.runtime-status.passed{color:var(--lime)}.limitations{color:var(--muted);font-size:12px;padding-left:17px;margin:0}.limitations li+li{margin-top:8px}.trace{border:1px solid var(--line);border-radius:8px;margin:27px 0 25px}.trace summary{padding:16px 19px;font-size:13px;cursor:pointer}.trace-body{padding:0 19px 19px}.trace p{color:var(--muted);font-size:11px;margin:0 0 12px}.trace pre{background:#080f0b;padding:18px;border-radius:5px;max-height:480px;overflow:auto;font:11px/1.65 ui-monospace,monospace;margin:0;white-space:pre-wrap;overflow-wrap:anywhere}.trace-download{display:inline-block;font-size:12px;margin-top:14px}.contribute{display:flex;justify-content:space-between;gap:24px;align-items:center;padding:5px 0 31px}.contribute p{color:var(--muted);font-size:12px;max-width:720px;margin:0}.contribute a{white-space:nowrap;font-size:12px;color:var(--lime)}footer{border-top:1px solid var(--line);display:flex;justify-content:space-between;gap:20px;padding-top:21px;padding-bottom:28px;font-size:11px;color:var(--muted)}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}.empty{padding:30px;border:1px solid var(--line);border-radius:10px;margin:25px 0;color:var(--muted)}[hidden]{display:none!important}
@media(min-width:1450px){.hero{padding-top:60px;padding-bottom:42px}}
@media(max-width:1050px){header,main,footer{padding-left:28px;padding-right:28px}.hero{gap:30px}.lane{padding:22px 18px}.value{font-size:34px}.lane-title{font-size:12px}.audit{gap:25px}.boundary-item{padding:14px}.boundary-arrow{display:none}}
@media(max-width:760px){header,main,footer{padding-left:19px;padding-right:19px}header{padding-top:18px;padding-bottom:18px;min-height:75px;flex-wrap:wrap;gap:14px}.brand{font-size:21px}.links{gap:18px;font-size:11px}.hero{grid-template-columns:1fr;padding-top:32px;gap:22px}h1{letter-spacing:-2.2px;font-size:clamp(44px,10vw,68px)}.hero-copy{max-width:560px}.hero-copy p{font-size:14px}.boundary{grid-template-columns:1fr}.boundary-item{padding:12px 17px}.boundary-item+.boundary-item{border-left:0;border-top:1px solid var(--line)}.boundary-item small{font-size:11px}.boundary-number{min-width:19px}.boundary-arrow{display:block;transform:rotate(90deg)}.boundary-item:last-child .boundary-arrow{display:none}.disclosure{font-size:11px;gap:10px}.lab-top{margin-top:28px}.lab-top span{font-size:10px}.scenes{gap:6px}.scenes button{padding:8px 10px;font-size:11px}.scene-head{padding:21px 18px;gap:10px}.scene-head h3{font-size:23px}.scene-head p{font-size:12px}.request{margin:0 18px 20px;font-size:10px}.phases{padding:13px 18px;gap:8px}.phases span{font-size:9px;letter-spacing:0}.lanes{grid-template-columns:1fr}.lane{padding:22px 19px}.lane+.lane{border-left:0;border-top:1px solid var(--line)}.lane-title{font-size:14px}.lane-sub{min-height:0;margin-bottom:17px}.value{font-size:39px}.state-caption{min-height:0}.reason{min-height:0}.evidence-summary{min-height:0}.controls{padding:16px 18px}.progress-text{width:100%;margin:4px 0 0}.takeaway{margin-bottom:25px}.takeaway p{font-size:13px}.audit{grid-template-columns:1fr;gap:26px}.facts{grid-template-columns:100px 1fr}.contribute{flex-direction:column;align-items:start;gap:15px}footer{flex-direction:column;gap:9px}}
@media(prefers-reduced-motion:reduce){*{scroll-behavior:auto!important;animation:none!important;transition:none!important}}
</style>
</head>
<body>
<header><a class="brand" href="https://github.com/claytonsamples/controlspec"><span class="brand-mark" aria-hidden="true"></span>ControlSpec</a><nav class="links" aria-label="Project links"><a href="https://github.com/claytonsamples/controlspec/tree/main/integrations/openshell">Integration &amp; source ↗</a><a href="action-demo.html">Action lab</a><a href="reference-demo.html">Reference explorer</a></nav></header>
<main>
<section class="hero"><div><div class="eyebrow">ControlSpec + OpenShell / Experimental integration</div><h1>Before an<br>agent <span>acts.</span></h1></div><div class="hero-copy"><p>A permitted connection is one part of the decision. <strong>Inspect the exact action, its approval, and the evidence it leaves behind.</strong></p><div class="experiment">Open-source controls. Inspectable results.</div></div></section>
<div class="boundary" aria-label="Three complementary boundaries"><div class="boundary-item"><span class="boundary-number">01</span><div><b>Network boundary</b><small>OpenShell policy and request routing</small></div><span class="boundary-arrow" aria-hidden="true">→</span></div><div class="boundary-item"><span class="boundary-number">02</span><div><b>Exact-action control</b><small>ControlSpec decision, binding, and approval</small></div><span class="boundary-arrow" aria-hidden="true">→</span></div><div class="boundary-item"><span class="boundary-number">03</span><div><b>Target evidence</b><small>Synthetic effect and recorded receipt</small></div></div></div>
<div class="disclosure"><span class="tag">Recorded lab</span><p><strong>This page replays recordings.</strong> Scripted inputs exercise the real ControlSpec evaluator through an authenticated gRPC fixture and a synthetic service. No live agent or real transactions run in this browser. Test operator approvals are simulated.</p></div>
<div id="load-error" class="empty" role="alert" hidden>Recorded evidence could not be loaded. No outcomes are displayed. The downloadable trace and source remain available for inspection.</div>
<div id="replay">
<div class="lab-top"><h2>One request. Three control paths.</h2><span id="scene-total"></span></div>
<nav class="scenes" id="scenes" aria-label="Select a recorded scenario"></nav>
<section class="stage" aria-label="Recorded three-path comparison">
<div class="scene-head"><div><div class="eyebrow">Synthetic purchase service</div><h3 id="scene-title"></h3><p id="scene-description"></p></div><span class="scene-counter" id="scene-counter"></span></div>
<details class="request"><summary id="request-summary">Inspect the exact scripted request</summary><pre id="request-json"></pre></details>
<div class="phases" aria-label="Replay phases"><span>01 · Intent</span><span>02 · Decision</span><span>03 · Effect</span><span>04 · Evidence</span></div>
<div class="lanes" id="lanes"></div>
<div class="controls"><button type="button" class="primary" id="play">Run this scenario</button><button type="button" id="step">Next step →</button><button type="button" id="reset">↺ Reset</button><span class="progress-text" id="progress"></span></div>
</section>
<div class="takeaway"><span class="arrow" aria-hidden="true">↳</span><div><p id="takeaway"></p><small>Each path reports its own observed state. An unavailable run is not a pass, a denial, or a zero.</small></div></div>
</div>
<section class="audit" aria-label="Verification and limitations"><div><h2>What was actually verified</h2><dl class="facts"><dt>OpenShell pin</dt><dd id="upstream-version"></dd><dt>Runtime run</dt><dd class="runtime-status" id="runtime-status"></dd><dt>Runtime detail</dt><dd id="runtime-detail"></dd><dt>Verification</dt><dd id="verification"></dd><dt>Source revision</dt><dd class="mono" id="source-revision"></dd><dt>Recorded</dt><dd id="generated-at"></dd></dl></div><div><h2>Read the boundaries, too.</h2><ul class="limitations" id="limitations"></ul></div></section>
<details class="trace"><summary>Inspect the selected scenario’s raw trace</summary><div class="trace-body"><p>Requests, decisions, target state, and available evidence are displayed as recorded. The full download includes provenance and every scenario.</p><pre id="trace"></pre><a class="trace-download" href="openshell-traces.json" download>Download all recorded traces ↓</a></div></details>
<div class="contribute"><p>This is a bounded experimental complement to NVIDIA OpenShell, with no implied endorsement. OpenShell itself supports body-aware controls; the value of this example is its explicit action binding, approval path, and evidence. Inspect the configuration before comparing outcomes.</p><a href="https://github.com/claytonsamples/controlspec/issues">Challenge the boundary ↗</a></div>
<div class="sr-only" id="announcement" role="status" aria-live="polite"></div>
</main>
<footer><span>ControlSpec · Experimental open-source reference layer</span><span>Risk in → Route out → Evidence back</span></footer>
<noscript><p style="padding:20px">JavaScript is required for recorded playback. <a href="openshell-traces.json">Read the complete JSON trace</a> or <a href="https://github.com/claytonsamples/controlspec/tree/main/integrations/openshell">inspect the integration source</a>.</p></noscript>
<script id="openshell-data" type="application/json">{"schema_version": "1", "generated_at": "2026-09-30T04:55:26.379568+00:00", "source_revision": "e30ac3657bdc75e2ec268b88429d762a7b4b70a8", "upstream": {"version": "v0.1.2", "commit": "6648bd0c290efbc41ba131ee9831ee45cd431f94"}, "runtime": {"status": "not_run", "detail": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime."}, "verification": {"kind": "authenticated_grpc_and_synthetic_target", "detail": "Real TLS gRPC contract calls, real ControlSpec evaluation, SQLite state and loopback HTTP target. Scripted agent inputs and test operator identity. No LLM or real purchase."}, "scenes": [{"id": "allowed", "title": "A useful action proceeds", "description": "A one-time $42 purchase fits the synthetic $75 control.", "request": {"schema_version": "1", "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "The gate lets a permitted action proceed and checks the target receipt.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.848432Z", "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", "evidence_mac": "722cef5ddf2515e9a37cc361620853c662153b86f1e80a7105f005d37482c82e", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "allowed", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.848432Z", "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", "evidence_mac": "722cef5ddf2515e9a37cc361620853c662153b86f1e80a7105f005d37482c82e"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "committed", "reason": "target_receipt_verified", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.888113Z", "evidence_id": "sha256:051b06ab80262d3750be694f9fa6c02630b9945d96f6a45548f53c9c22d2803f", "evidence_mac": "b35fa1cab191b07e55527059b5e5032b128c89029f3c3eb6e275cc5be7c32ad4", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "intent", "message": "Scripted request: 4200 USD cents."}, {"kind": "decision", "message": "target_receipt_verified"}, {"kind": "effect", "message": "Target purchase count: 1."}, {"kind": "evidence", "message": "Signed target receipt reconciled."}], "evidence": {"outcome": "committed", "reason": "target_receipt_verified", "forwarded": true, "reconciled": true, "rpc_elapsed_ms": 18.311, "target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "allowed", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.888113Z", "evidence_id": "sha256:051b06ab80262d3750be694f9fa6c02630b9945d96f6a45548f53c9c22d2803f", "evidence_mac": "b35fa1cab191b07e55527059b5e5032b128c89029f3c3eb6e275cc5be7c32ad4"}, "ledger_events": [{"sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-0b7e5486776d9556d3c158bc3a03e9aab008dd979fe3e3568045759d9cd451e8", "evaluated_at": "2026-09-30T04:55:20.855683Z", "expires_at": "2026-09-30T04:57:20.855683Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:f49b608b3ae784f15b7ea5aa0456d81ffaf0def920bb8725ca965fcddd9075da", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:20.855683Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "allowed", "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:20.855683Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:61529660963d7141bf4eda8aaa8111cf555ece7290274143d988fcae765185c8"}}, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:3bc400ead62de739bbb367f6711a028dcba6dd596fb98643feff367523280676"}, {"sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-0b7e5486776d9556d3c158bc3a03e9aab008dd979fe3e3568045759d9cd451e8", "evaluated_at": "2026-09-30T04:55:20.855683Z", "expires_at": "2026-09-30T04:57:20.855683Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:f49b608b3ae784f15b7ea5aa0456d81ffaf0def920bb8725ca965fcddd9075da", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:20.855683Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "allowed", "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:20.855683Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "reservation": {"action_id": "allowed", "decision_digest": "sha256:f49b608b3ae784f15b7ea5aa0456d81ffaf0def920bb8725ca965fcddd9075da", "expires_at": "2026-09-30T04:55:50.855683Z", "issued_at": "2026-09-30T04:55:20.855683Z", "method": "POST", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}}, "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:61529660963d7141bf4eda8aaa8111cf555ece7290274143d988fcae765185c8"}}, "previous_hash": "sha256:3bc400ead62de739bbb367f6711a028dcba6dd596fb98643feff367523280676", "event_hash": "sha256:1594847e3ab67c739ed88ff72794c3cb7ad8e967c758c779dfbe396d95b01e4e"}, {"sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "reconciliation", "payload": {"at": "2026-09-30T04:55:20.893387Z", "receipt": {"action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.888113Z", "evidence_id": "sha256:051b06ab80262d3750be694f9fa6c02630b9945d96f6a45548f53c9c22d2803f", "evidence_mac": "b35fa1cab191b07e55527059b5e5032b128c89029f3c3eb6e275cc5be7c32ad4", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}, "verified": true}, "previous_hash": "sha256:1594847e3ab67c739ed88ff72794c3cb7ad8e967c758c779dfbe396d95b01e4e", "event_hash": "sha256:233d5f7d3a26f4b56c574cbaa6cf4db56167c03a3489d55c64a599b4898d1604"}], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "approval", "title": "Approve this exact $142 purchase", "description": "First denied. A simulated host operator approves the exact action, then the agent retries.", "request": {"schema_version": "1", "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "Approval is a separate fact, bound to the request, actor, policy and decision.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [{"action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.190654Z", "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", "evidence_mac": "8f682ea5ed775ffe81533099b74c872825fc1ced7e09021f4f950b72ab8fcd24", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "approval", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.190654Z", "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", "evidence_mac": "8f682ea5ed775ffe81533099b74c872825fc1ced7e09021f4f950b72ab8fcd24"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "committed", "reason": "target_receipt_verified", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [{"action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.248998Z", "evidence_id": "sha256:799906a43be46c0bcdfe4ae6bcca1dc8106d80503c55d87afe658880b34d42fd", "evidence_mac": "dfaad92d18e178eea510edc94801559feb49745bcdaf5bab7e9b90e0e4d188b1", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "intent", "message": "Scripted request: 14200 USD cents."}, {"kind": "decision", "message": "Initial request denied: approval_required."}, {"kind": "approval", "message": "Simulated host operator approved the exact $142 request; no real human participated."}, {"kind": "decision", "message": "target_receipt_verified"}, {"kind": "effect", "message": "Target purchase count: 1."}, {"kind": "evidence", "message": "Signed target receipt reconciled."}], "evidence": {"outcome": "committed", "reason": "target_receipt_verified", "forwarded": true, "reconciled": true, "rpc_elapsed_ms": 18.371, "target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "approval", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.248998Z", "evidence_id": "sha256:799906a43be46c0bcdfe4ae6bcca1dc8106d80503c55d87afe658880b34d42fd", "evidence_mac": "dfaad92d18e178eea510edc94801559feb49745bcdaf5bab7e9b90e0e4d188b1"}, "ledger_events": [{"sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "evaluated_at": "2026-09-30T04:55:21.196928Z", "expires_at": "2026-09-30T04:57:21.196928Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d", "verdict": "require_approval"}, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:681fcadd8f7a0eb4598784ed908636bb6b06547719835daf1f5fa1815e9c45a0"}}, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:79be57eebe5250caa7eb0862f12d11ca202b547cece7f024ce5f551b8652064e"}, {"sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "denied", "payload": {"at": "2026-09-30T04:55:21.196928Z", "reason": "approval_required"}, "previous_hash": "sha256:79be57eebe5250caa7eb0862f12d11ca202b547cece7f024ce5f551b8652064e", "event_hash": "sha256:72b3b0ad3b54d1d8c3d033b8e714eba3da953b4e11a91572ab973dd986084c88"}, {"sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z"}], "basis": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "evaluated_at": "2026-09-30T04:55:21.196928Z", "expires_at": "2026-09-30T04:57:21.196928Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d", "verdict": "require_approval"}, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:681fcadd8f7a0eb4598784ed908636bb6b06547719835daf1f5fa1815e9c45a0"}}, "previous_hash": "sha256:72b3b0ad3b54d1d8c3d033b8e714eba3da953b4e11a91572ab973dd986084c88", "event_hash": "sha256:470980ad738b5306ca0b0b96017430174232d82da5411d6d501d132ad0cd2a42"}, {"sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z"}], "basis": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-1763b47bee68dc7b50b0433927c3bba963138f1bdbcdad45539522742cd0c7e1", "evaluated_at": "2026-09-30T04:55:21.211447Z", "expires_at": "2026-09-30T04:57:21.211447Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:60a7fb6da87fd7f81b4d0d72bf09a725b313e92aa552ec1a74e1adc2380d4328", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:08e6590e3b41a30e2573ad4474855b2ec2cc1a7e6866f0a1c46280a202c12a9e", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:ca4b95797ad9849122eb216e5962d2e37d7d0c45813f85cc3dfc493eea4b7c11"}}, "previous_hash": "sha256:470980ad738b5306ca0b0b96017430174232d82da5411d6d501d132ad0cd2a42", "event_hash": "sha256:85970f7ca6e18ddac61a353fc1ab7ea3412b583353ad61cf967afe8d785983b2"}, {"sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z"}], "basis": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-107805bb980c91307c6ef08b68ea93e575c1bccb9d13530ad7aef4690672e668", "evaluated_at": "2026-09-30T04:55:21.229732Z", "expires_at": "2026-09-30T04:57:21.229732Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:2d12b04f10670f95b048e948b5e2f2fadd4ad4a0611ef89391c9a3d2097a6ac8", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:08e6590e3b41a30e2573ad4474855b2ec2cc1a7e6866f0a1c46280a202c12a9e", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:f5ecef2a29c443eaa85cfd8936f3d5a00443a014daa4ced25286520869539e8d"}}, "previous_hash": "sha256:85970f7ca6e18ddac61a353fc1ab7ea3412b583353ad61cf967afe8d785983b2", "event_hash": "sha256:8d0617b5f98151a56303ff6318e218c6af9309ab67211836eb6cf740013d6e5d"}, {"sequence": 6, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z"}], "basis": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-107805bb980c91307c6ef08b68ea93e575c1bccb9d13530ad7aef4690672e668", "evaluated_at": "2026-09-30T04:55:21.229732Z", "expires_at": "2026-09-30T04:57:21.229732Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:2d12b04f10670f95b048e948b5e2f2fadd4ad4a0611ef89391c9a3d2097a6ac8", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "reservation": {"action_id": "approval", "decision_digest": "sha256:2d12b04f10670f95b048e948b5e2f2fadd4ad4a0611ef89391c9a3d2097a6ac8", "expires_at": "2026-09-30T04:55:51.229732Z", "issued_at": "2026-09-30T04:55:21.229732Z", "method": "POST", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}}, "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:08e6590e3b41a30e2573ad4474855b2ec2cc1a7e6866f0a1c46280a202c12a9e", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:f5ecef2a29c443eaa85cfd8936f3d5a00443a014daa4ced25286520869539e8d"}}, "previous_hash": "sha256:8d0617b5f98151a56303ff6318e218c6af9309ab67211836eb6cf740013d6e5d", "event_hash": "sha256:543a0c2d61eb856c2d186e004028dffdf516808ae1ebfdddbb2bf455176e1183"}, {"sequence": 7, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "reconciliation", "payload": {"at": "2026-09-30T04:55:21.255140Z", "receipt": {"action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.248998Z", "evidence_id": "sha256:799906a43be46c0bcdfe4ae6bcca1dc8106d80503c55d87afe658880b34d42fd", "evidence_mac": "dfaad92d18e178eea510edc94801559feb49745bcdaf5bab7e9b90e0e4d188b1", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}, "verified": true}, "previous_hash": "sha256:543a0c2d61eb856c2d186e004028dffdf516808ae1ebfdddbb2bf455176e1183", "event_hash": "sha256:0f15fe2bd0ed136e3a5599c42a19596c6aa46767aefc58547d4bbe63222db116"}], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "overspend", "title": "$142 without approval", "description": "The agent proposes a purchase above the synthetic threshold.", "request": {"schema_version": "1", "action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "A proposal can be valid JSON and still require someone else's authority.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [{"action_id": "overspend", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.536145Z", "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", "evidence_mac": "8d1adf5960f06017d80ffb32d8218aaaf7969ade907fa25c412e62f4f48318ce", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "overspend", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.536145Z", "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", "evidence_mac": "8d1adf5960f06017d80ffb32d8218aaaf7969ade907fa25c412e62f4f48318ce"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "approval_required", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "events": [{"kind": "intent", "message": "Scripted request: 14200 USD cents."}, {"kind": "decision", "message": "approval_required"}, {"kind": "effect", "message": "Target purchase count: 0."}, {"kind": "evidence", "message": "No verified completion for this attempt."}], "evidence": {"outcome": "denied", "reason": "approval_required", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 16.833, "ledger_events": [{"sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "overspend", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:e4a5fdc72e9e8cce393df4b2612516713f15e39cc16555a4995aeb33ed25d744", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-7a0a03a1a38ca61a9ebddec6c7c8816b63d4ae04f9482ae5ede934c7f128733e", "evaluated_at": "2026-09-30T04:55:21.544155Z", "expires_at": "2026-09-30T04:57:21.544155Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:e4a5fdc72e9e8cce393df4b2612516713f15e39cc16555a4995aeb33ed25d744", "intent_id": "overspend", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:52b24636ca11b115404a9032188510f6bd35a78ea63ba9fd5e57f8875bd2e50f", "verdict": "require_approval"}, "first_seen": "2026-09-30T04:55:21.544155Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "overspend", "intent_digest": "sha256:e4a5fdc72e9e8cce393df4b2612516713f15e39cc16555a4995aeb33ed25d744", "intent_id": "overspend", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.544155Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:a530a68e8e49a516cdb32f89ab46bf235e98f7d30bdb8b07136dcb3377d56482"}}, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:d48842b103c3b8e7e5cf92e4952408eeef5ee248eb8bc99ee591008a0894bf54"}, {"sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "overspend", "kind": "denied", "payload": {"at": "2026-09-30T04:55:21.544155Z", "reason": "approval_required"}, "previous_hash": "sha256:d48842b103c3b8e7e5cf92e4952408eeef5ee248eb8bc99ee591008a0894bf54", "event_hash": "sha256:1fbc0438fc690446070eb8457ee5220459783aae1cc503c42f9dbb3b81aeecac"}], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "changed", "title": "Approved $142. Attempted $143.", "description": "A simulated operator approves $142; the subsequent request changes the amount.", "request": {"schema_version": "1", "action_id": "changed", "amount_minor": 14300, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "Changing the action invalidates the original approval.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 14300, "balance_minor": 985700, "purchases": [{"action_id": "changed", "amount_minor": 14300, "committed_at": "2026-09-30T04:55:21.915345Z", "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", "evidence_mac": "d2a36f248d761d258bb2741817f11a043fcdfefac6b0377de10d23e87157eb53", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "changed", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14300, "committed_at": "2026-09-30T04:55:21.915345Z", "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", "evidence_mac": "d2a36f248d761d258bb2741817f11a043fcdfefac6b0377de10d23e87157eb53"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "action_changed", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "events": [{"kind": "intent", "message": "Scripted request: 14300 USD cents."}, {"kind": "decision", "message": "Initial request denied: approval_required."}, {"kind": "approval", "message": "Simulated host operator approved the exact $142 request; no real human participated."}, {"kind": "decision", "message": "action_changed"}, {"kind": "effect", "message": "Target purchase count: 0."}, {"kind": "evidence", "message": "No verified completion for this attempt."}], "evidence": {"outcome": "denied", "reason": "action_changed", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 8.031, "ledger_events": [{"sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "evaluated_at": "2026-09-30T04:55:21.922458Z", "expires_at": "2026-09-30T04:57:21.922458Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1", "verdict": "require_approval"}, "first_seen": "2026-09-30T04:55:21.922458Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.922458Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:358dafad7426e1dea9b2f53ca39e9cfa7e24e6956e80290614443bf2cb184a9c"}}, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:365f34cfd78c8cec69387f84baf522be9f813d1e488754ae45bf6ac924ce65e9"}, {"sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "denied", "payload": {"at": "2026-09-30T04:55:21.922458Z", "reason": "approval_required"}, "previous_hash": "sha256:365f34cfd78c8cec69387f84baf522be9f813d1e488754ae45bf6ac924ce65e9", "event_hash": "sha256:cd26eccc3e132fccc7a1f0f124af981a62a1d44be596bb1663d9a6d67fcdda93"}, {"sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-75d55c4415f606a2b4f991bd0c635bbe", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1"}, "fact_digest": "sha256:342f5311f501c5f6bffef317538643341de5fe178b8dd7f32d55bf7e374a6324", "intent_ref": {"intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.934877Z", "valid_until": "2026-09-30T04:57:21.922458Z"}], "basis": {"decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "evaluated_at": "2026-09-30T04:55:21.922458Z", "expires_at": "2026-09-30T04:57:21.922458Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1", "verdict": "require_approval"}, "first_seen": "2026-09-30T04:55:21.922458Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.922458Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:358dafad7426e1dea9b2f53ca39e9cfa7e24e6956e80290614443bf2cb184a9c"}}, "previous_hash": "sha256:cd26eccc3e132fccc7a1f0f124af981a62a1d44be596bb1663d9a6d67fcdda93", "event_hash": "sha256:057e131dfd1e28812578ffe0aa5108110056dccca5d8c6796b0b1a915525fbb6"}, {"sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": {"approvals": [{"approval_id": "approval-75d55c4415f606a2b4f991bd0c635bbe", "approved": true, "approver": {"actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1"}, "authority_ref": {"digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1"}, "basis_decision_ref": {"decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1"}, "fact_digest": "sha256:342f5311f501c5f6bffef317538643341de5fe178b8dd7f32d55bf7e374a6324", "intent_ref": {"intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase"}, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": ["controlspec.synthetic.operator"], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.934877Z", "valid_until": "2026-09-30T04:57:21.922458Z"}], "basis": {"decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1"}, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-3bbe8e9b078685569fbbcc3c90bca69ab70318fe6378836deecd8e30da0de3a4", "evaluated_at": "2026-09-30T04:55:21.934877Z", "expires_at": "2026-09-30T04:57:21.934877Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": {"decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1"}, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:12926983cab904067d2dd23a2c0363092792d777a73a0396675132d72379ce32", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:21.922458Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.922458Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "approved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.above_limit"], "facts_digest": "sha256:a4b5a8df4ca167cb92d65f0347a28c569e4c77194b255d4bcc867419b23806e6", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:8a72e5b4a5ec545394295593864447ab846c7fe544bbc4c04642a9b48a1cf43a"}}, "previous_hash": "sha256:057e131dfd1e28812578ffe0aa5108110056dccca5d8c6796b0b1a915525fbb6", "event_hash": "sha256:4c7b4ae673499d701927c79239e0a57d671b04b186de847810156083486ad2a0"}, {"sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "denied", "payload": {"at": "2026-09-30T04:55:21.953845Z", "reason": "action_changed"}, "previous_hash": "sha256:4c7b4ae673499d701927c79239e0a57d671b04b186de847810156083486ad2a0", "event_hash": "sha256:567fb5f3b8cc52729e8f5c36771542e9f5526fa6e56ad4084c9a2b76f23dcec6"}], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "self-approval", "title": "The agent tries to approve", "description": "An invalid operator credential is offered for the pending action.", "request": {"schema_version": "1", "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "The caller cannot turn a request into a host-operator approval.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [{"action_id": "self-approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:22.305347Z", "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", "evidence_mac": "d4fce8a9c6be1334a732a57b079313efd428dbccf4efd360544ebf7f1ffb2b58", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "self-approval", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:22.305347Z", "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", "evidence_mac": "d4fce8a9c6be1334a732a57b079313efd428dbccf4efd360544ebf7f1ffb2b58"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "approval_required", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "events": [{"kind": "intent", "message": "Scripted request: 14200 USD cents."}, {"kind": "decision", "message": "Initial request denied: approval_required."}, {"kind": "approval", "message": "operator_authentication_failed"}, {"kind": "decision", "message": "approval_required"}, {"kind": "effect", "message": "Target purchase count: 0."}, {"kind": "evidence", "message": "No verified completion for this attempt."}], "evidence": {"outcome": "denied", "reason": "approval_required", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 14.658, "ledger_events": [{"sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-6f88f13c9cee539d2f9915335283e386ac3c65af0b1ed7d5ad16a5d0fe475314", "evaluated_at": "2026-09-30T04:55:22.315151Z", "expires_at": "2026-09-30T04:57:22.315151Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:47649f2cb7fdc77720fdfecf93f61a35f22cf483b992cfdeb8ae227cc26e9630", "verdict": "require_approval"}, "first_seen": "2026-09-30T04:55:22.315151Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "self-approval", "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.315151Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:3c8492a18a43ba8199d52d7246905ce8c9dc38f0d05ef6764666cd7ebb293761"}}, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:6e34711dc8415a840c87d4850b26c64d6294c57bb8d89f19add10df2effb703c"}, {"sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": {"at": "2026-09-30T04:55:22.315151Z", "reason": "approval_required"}, "previous_hash": "sha256:6e34711dc8415a840c87d4850b26c64d6294c57bb8d89f19add10df2effb703c", "event_hash": "sha256:5989f398f37acdf4dfcaa1c1cf78a4c27319e77491e60bcb282dbab88ceb3fec"}, {"sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": {"at": "2026-09-30T04:55:22.329955Z", "reason": "operator_authentication_failed"}, "previous_hash": "sha256:5989f398f37acdf4dfcaa1c1cf78a4c27319e77491e60bcb282dbab88ceb3fec", "event_hash": "sha256:7cf7b2cd2558d48b6df266988ff19e55e8290978b98bfa3ba47d15067ebd75ef"}, {"sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}], "approval_requirements": [{"failure": {"code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval"}, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": {"controlspec.synthetic.target": "POST /purchases"}, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120}], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-34430eb026fa294aefcb76ad7e930f5a2746c1741cfefc4edd4be61ab0f084b4", "evaluated_at": "2026-09-30T04:55:22.337620Z", "expires_at": "2026-09-30T04:57:22.337620Z", "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:04ee7f31e93e8721eebecaecc23d572209b7ce5b4510d058352fad12d5d9c2e2", "verdict": "require_approval"}, "first_seen": "2026-09-30T04:55:22.315151Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "self-approval", "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.315151Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "require_approval", "snapshot_digest": "sha256:ce12b6d78a754a243772c319a85f95354ee0eed7b8cf49e009994053add8dc3d"}}, "previous_hash": "sha256:7cf7b2cd2558d48b6df266988ff19e55e8290978b98bfa3ba47d15067ebd75ef", "event_hash": "sha256:8e6ef149e84d1f9937fd798a8bf7c4998d32b2e90c0a5f3a12c4205dd8251992"}, {"sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": {"at": "2026-09-30T04:55:22.337620Z", "reason": "approval_required"}, "previous_hash": "sha256:8e6ef149e84d1f9937fd798a8bf7c4998d32b2e90c0a5f3a12c4205dd8251992", "event_hash": "sha256:ef695c73c8935d595e80906ea999f80bbd43dfb34588382e0af994dbb1ea71a7"}], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "replay", "title": "Try the same purchase again", "description": "The request is delivered twice with the same action ID.", "request": {"schema_version": "1", "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "The target is idempotent in both lanes; ControlSpec additionally denies a fresh reservation.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.672678Z", "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", "evidence_mac": "8c4d6e09c46b5a575f93af2a64a52187049e7f4c183e8056e3a0a849f8dd6da1", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "replay", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.672678Z", "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", "evidence_mac": "8c4d6e09c46b5a575f93af2a64a52187049e7f4c183e8056e3a0a849f8dd6da1"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "action_already_reserved", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.705481Z", "evidence_id": "sha256:beeb1342834e8baf39ec1de5b9940e92ecccaabdca49b1a7848b46709ec2317d", "evidence_mac": "da0dc86f18bfab03341e08d7b3e84b7544f554df14d044db7ce9b6b5fbca41bb", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "intent", "message": "Scripted request: 4200 USD cents."}, {"kind": "effect", "message": "First delivery committed once; now retrying."}, {"kind": "decision", "message": "action_already_reserved"}, {"kind": "effect", "message": "Target purchase count: 1."}, {"kind": "evidence", "message": "No verified completion for this attempt."}], "evidence": {"outcome": "denied", "reason": "action_already_reserved", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 13.454, "ledger_events": [{"sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-80d63d76294f7dcee7bfc44e99fbad41ff9879160e49a45c0d3da0e1dd1a0432", "evaluated_at": "2026-09-30T04:55:22.679161Z", "expires_at": "2026-09-30T04:57:22.679161Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:22.679161Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.679161Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:e7d56f5247d9945b57d3cbd0f01d886f27d119859f4df23698048a525d6102b4"}}, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:f5ad921e85b7e390bccb5062b62775e9ebf2d6e98c1cf38c10c4429bc9f79dbf"}, {"sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-80d63d76294f7dcee7bfc44e99fbad41ff9879160e49a45c0d3da0e1dd1a0432", "evaluated_at": "2026-09-30T04:55:22.679161Z", "expires_at": "2026-09-30T04:57:22.679161Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:22.679161Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.679161Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "reservation": {"action_id": "replay", "decision_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "expires_at": "2026-09-30T04:55:52.679161Z", "issued_at": "2026-09-30T04:55:22.679161Z", "method": "POST", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}}, "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:e7d56f5247d9945b57d3cbd0f01d886f27d119859f4df23698048a525d6102b4"}}, "previous_hash": "sha256:f5ad921e85b7e390bccb5062b62775e9ebf2d6e98c1cf38c10c4429bc9f79dbf", "event_hash": "sha256:5e242872452e737c5af5aa8fcc07906eb5675425cee5c8fbb3891465053320b4"}, {"sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "reconciliation", "payload": {"at": "2026-09-30T04:55:22.712187Z", "receipt": {"action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.705481Z", "evidence_id": "sha256:beeb1342834e8baf39ec1de5b9940e92ecccaabdca49b1a7848b46709ec2317d", "evidence_mac": "da0dc86f18bfab03341e08d7b3e84b7544f554df14d044db7ce9b6b5fbca41bb", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}, "verified": true}, "previous_hash": "sha256:5e242872452e737c5af5aa8fcc07906eb5675425cee5c8fbb3891465053320b4", "event_hash": "sha256:cc24f156a2b5ddf32a0b901b4e91d756888d821ba98c24a7e48b0b579c2fec5d"}, {"sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-7000fa603464c77d6466de92da21a10d349c988e4e50efae0dd78f4e7f6f67c9", "evaluated_at": "2026-09-30T04:55:22.721876Z", "expires_at": "2026-09-30T04:57:22.721876Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:d284e7ab081d4381a239c0592ae0e9d09c6619d5db45e30117a32da0b2c1efef", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:22.679161Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.679161Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "reservation": {"action_id": "replay", "decision_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "expires_at": "2026-09-30T04:55:52.679161Z", "issued_at": "2026-09-30T04:55:22.679161Z", "method": "POST", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}}, "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:3e405c9e41293f56503463358a584996d612407255a9a0bb1d718c10827bf5ab"}}, "previous_hash": "sha256:cc24f156a2b5ddf32a0b901b4e91d756888d821ba98c24a7e48b0b579c2fec5d", "event_hash": "sha256:56e67025852bc6f2dcc5a8cfca2448d430e570a38105154911dbd24c658ad6cc"}, {"sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "denied", "payload": {"at": "2026-09-30T04:55:22.721876Z", "reason": "action_already_reserved"}, "previous_hash": "sha256:56e67025852bc6f2dcc5a8cfca2448d430e570a38105154911dbd24c658ad6cc", "event_hash": "sha256:f983e012b45ee5b68486d73ac8b46d3f5eb5d58a4493d613517a3dc3ad828e90"}], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "missing-proof", "title": "The effect happened. Proof is missing.", "description": "The target commits, but the fixture withholds its receipt from reconciliation.", "request": {"schema_version": "1", "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "Known target state and verified completion are separate observations.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "missing-proof", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.056823Z", "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", "evidence_mac": "dcbb35a00a5f318d25465cfb7a48dfe31785bed93beeab546c95035e055334a9", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "missing-proof", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.056823Z", "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", "evidence_mac": "dcbb35a00a5f318d25465cfb7a48dfe31785bed93beeab546c95035e055334a9"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "effect_observed_evidence_missing", "reason": "completion_unverified", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "missing-proof", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.101992Z", "evidence_id": "sha256:046371297746deb4d2f6b2c39bb43237a947c84ee6b6255f8961d8fa0952c838", "evidence_mac": "e6f7adf40d1eca19cfdbce69ec8c6af83e9f28341dc55682d1863851596f17c3", "nonce": "15b3a3e1827e82a61a9b9b7d7e9bdfd458158a6f190f9a988a1616f2bccc35bd", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "intent", "message": "Scripted request: 4200 USD cents."}, {"kind": "decision", "message": "completion_unverified"}, {"kind": "effect", "message": "Target purchase count: 1."}, {"kind": "evidence", "message": "No verified completion for this attempt."}], "evidence": {"outcome": "effect_observed_evidence_missing", "reason": "completion_unverified", "forwarded": true, "reconciled": false, "rpc_elapsed_ms": 21.732, "target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "missing-proof", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "nonce": "15b3a3e1827e82a61a9b9b7d7e9bdfd458158a6f190f9a988a1616f2bccc35bd", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.101992Z", "evidence_id": "sha256:046371297746deb4d2f6b2c39bb43237a947c84ee6b6255f8961d8fa0952c838", "evidence_mac": "e6f7adf40d1eca19cfdbce69ec8c6af83e9f28341dc55682d1863851596f17c3"}, "ledger_events": [{"sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-f35044575248dfc009b39332a898e83652752f0a4d2b3ffd5108ef8b7853468d", "evaluated_at": "2026-09-30T04:55:23.063184Z", "expires_at": "2026-09-30T04:57:23.063184Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a6401352c3b1bf8c4dfcb837ead654b1232ea7f6c1965c9e4c2708d0dac3e6c5", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:23.063184Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "missing-proof", "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:23.063184Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "pending", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:6f3075ec3d544308f8ce3b13b0e4e5e2d77e3e9fc1e99900076e688d5d60885d"}}, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:a61e162202e5a59c5e50298e794a164a0e8216c6b884a6f6b8068f418c90676f"}, {"sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "state", "payload": {"approvals": [], "basis": null, "decision": {"applied_controls": [{"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}], "approval_requirements": [], "binding": {"action_type": "commit", "actor_ref": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1"}, "canonicalizer": {"name": "RFC8785-INTEGER-AUTHORITY", "version": "1"}, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": {"name": "controlspec.core", "version": "0.1.0"}, "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "resource_ref": {"namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1"}}, "conditions": [], "decision_id": "decision-f35044575248dfc009b39332a898e83652752f0a4d2b3ffd5108ef8b7853468d", "evaluated_at": "2026-09-30T04:55:23.063184Z", "expires_at": "2026-09-30T04:57:23.063184Z", "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "extensions": {"controlspec.conformance.non_authoritative": true}, "intent_ref": {"intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase"}, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a6401352c3b1bf8c4dfcb837ead654b1232ea7f6c1965c9e4c2708d0dac3e6c5", "verdict": "allow"}, "first_seen": "2026-09-30T04:55:23.063184Z", "intent": {"action": {"domain_action": "controlspec.synthetic.purchase", "requested_effect": {"action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "type": "commit"}, "actor": {"actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1"}, "context": {"controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2"}, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "missing-proof", "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:23.063184Z", "requested_route": null, "resource": {"attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1"}, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0"}, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": {"action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1"}, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "reservation": {"action_id": "missing-proof", "decision_digest": "sha256:a6401352c3b1bf8c4dfcb837ead654b1232ea7f6c1965c9e4c2708d0dac3e6c5", "expires_at": "2026-09-30T04:55:53.063184Z", "issued_at": "2026-09-30T04:55:23.063184Z", "method": "POST", "nonce": "15b3a3e1827e82a61a9b9b7d7e9bdfd458158a6f190f9a988a1616f2bccc35bd", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}}, "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "reserved", "trace": {"evaluated_controls": [{"control_ref": {"control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0"}, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": ["true", "true"], "selection": "effect"}], "explanation_codes": ["controlspec.core.allow", "controlspec.synthetic.within_limit"], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": {"extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null}, "final_verdict": "allow", "snapshot_digest": "sha256:6f3075ec3d544308f8ce3b13b0e4e5e2d77e3e9fc1e99900076e688d5d60885d"}}, "previous_hash": "sha256:a61e162202e5a59c5e50298e794a164a0e8216c6b884a6f6b8068f418c90676f", "event_hash": "sha256:e88c7461a40f9e6864cfc2721e1e01317aee5961113a309d3796ab3086a59d5b"}, {"sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "reconciliation", "payload": {"at": "2026-09-30T04:55:23.108675Z", "receipt": null, "verified": false}, "previous_hash": "sha256:e88c7461a40f9e6864cfc2721e1e01317aee5961113a309d3796ab3086a59d5b", "event_hash": "sha256:d02eaa9cc43c6bfd4062e8a4f97753206518113346f09674f499c832f9ad867a"}], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "outage", "title": "The middleware goes offline", "description": "The fixture stops the gRPC service before attempting dispatch.", "request": {"schema_version": "1", "action_id": "outage", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "The test dispatcher does not forward on RPC failure; OpenShell fail-closed behavior remains unrun.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "outage", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.422044Z", "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", "evidence_mac": "24751a4fab8ea74e3f4769f448f36b5e8d300d7741b0a4383cfee6f6df7f7371", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "outage", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.422044Z", "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", "evidence_mac": "24751a4fab8ea74e3f4769f448f36b5e8d300d7741b0a4383cfee6f6df7f7371"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "not_forwarded", "reason": "grpc_deadline_exceeded", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "events": [{"kind": "intent", "message": "Scripted request: 4200 USD cents."}, {"kind": "decision", "message": "grpc_deadline_exceeded"}, {"kind": "effect", "message": "Target purchase count: 0."}, {"kind": "evidence", "message": "No verified completion for this attempt."}], "evidence": {"outcome": "not_forwarded", "reason": "grpc_deadline_exceeded", "forwarded": false, "reconciled": false, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "ledger_events": [], "ledger_chain_valid": true, "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}, {"id": "direct", "title": "Skip the middleware", "description": "A real smolagents Tool calls the controlled HTTP target without an execution ticket.", "request": {"schema_version": "1", "action_id": "direct", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false}, "takeaway": "The target itself rejects a ticketless call. This tests the target, not sandbox bypass resistance.", "lanes": [{"id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [{"action_id": "direct", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:25.704798Z", "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", "evidence_mac": "8fdb6deeec9ae1e6998a5166a07b5653cd601101470964b588e0423a95e23343", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", "schema_version": "1", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "status": "committed", "synthetic_only": true}]}, "events": [{"kind": "effect", "message": "Direct host call to a separate synthetic target."}], "evidence": {"target_receipt": {"schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "direct", "scope": {"gateway_id": "recording-fixture", "sandbox_id": "scripted-agent"}, "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:25.704798Z", "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", "evidence_mac": "8fdb6deeec9ae1e6998a5166a07b5653cd601101470964b588e0423a95e23343"}, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false}}, {"id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": {"policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here."}}, {"id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "target_requires_ticket", "before": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "after": {"synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": []}, "events": [{"kind": "intent", "message": "Scripted request: 4200 USD cents."}, {"kind": "decision", "message": "target_requires_ticket"}, {"kind": "effect", "message": "Target purchase count: 0."}, {"kind": "evidence", "message": "No verified completion for this attempt."}], "evidence": {"outcome": "denied", "reason": "target_requires_ticket", "forwarded": true, "reconciled": false, "smolagents_tool_result": {"http_status": 403, "target_report": "{\"detail\":\"exactly one execution ticket required\"}", "assurance": "not_authorized_by_this_tool"}, "ledger_events": [], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true}}]}], "limitations": ["Actual OpenShell runtime, effective-policy admission, network isolation and bypass checks not run.", "The unguarded lane uses a direct Python target call; the controlled lane uses TLS gRPC + HTTP. They are illustrative arms, not latency benchmarks or a native OpenShell comparison.", "The controlled target requires a ticket; this extra defense is explicit and not attributed to OpenShell.", "The test operator is scripted. Host-only CLI is provided for manual approval; no production identity system.", "Reference decisions retain non-authoritative status. Synthetic permissions apply only to this fake target.", "Host administrators and the shared demo signing secret are trusted. Local hash chains are not tamper-proof.", "Replay protection is scoped to the same action ID. New IDs and cumulative budget limits require additional controls.", "Static replay cannot authorize anything. All amounts, identities and transactions are synthetic."]}</script>
<script>
'use strict';
(() => {
 const $=id=>document.getElementById(id);
 const asText=value=>typeof value==='string'?value:value===undefined||value===null?'Not recorded':JSON.stringify(value);
 const isCount=value=>Number.isSafeInteger(value)&&value>=0;
 const money=value=>isCount(value)?new Intl.NumberFormat('en-US',{style:'currency',currency:'USD'}).format(value/100):'Not recorded';
 const labels={unguarded:'Unguarded target',native:'OpenShell native',combined:'OpenShell + ControlSpec'};
 const phaseNames=['Intent','Decision','Effect','Evidence'];
 let data;
 try {data=JSON.parse($('openshell-data').textContent);if(data.schema_version!=='1'||!Array.isArray(data.scenes))throw new Error('Unsupported report');}
 catch {$('load-error').hidden=false;$('replay').hidden=true;return;}
 const scenes=data.scenes;
 let current=0,phase=0,timer=null;
 $('upstream-version').textContent=asText(data.upstream?.version)+' · '+asText(data.upstream?.commit);
 const runtimePassed=data.runtime?.status==='passed';
 $('runtime-status').textContent=runtimePassed?'Passed — recorded runtime run':'Not run — runtime enforcement unverified';
 $('runtime-status').classList.toggle('passed',runtimePassed);
 $('runtime-detail').textContent=asText(data.runtime?.detail);
 $('verification').textContent=asText(data.verification?.detail);
 $('source-revision').textContent=asText(data.source_revision);
 $('generated-at').textContent=asText(data.generated_at);
 const limitations=Array.isArray(data.limitations)?data.limitations:[];
 for(const limitation of limitations){const item=document.createElement('li');item.textContent=asText(limitation);$('limitations').append(item);}
 if(!limitations.length){const item=document.createElement('li');item.textContent='No limitations were supplied in this report. Inspect the source before relying on an outcome.';$('limitations').append(item);}
 $('scene-total').textContent=scenes.length+' recorded scenario'+(scenes.length===1?'':'s');
 if(!scenes.length){$('load-error').textContent='No recorded scenarios are available in this report. No comparison outcomes are displayed.';$('load-error').hidden=false;$('replay').hidden=true;$('trace').textContent=JSON.stringify(data,null,2);return;}
 scenes.forEach((scene,index)=>{const button=document.createElement('button');button.type='button';const n=document.createElement('span');n.textContent=String(index+1).padStart(2,'0');button.append(n,document.createTextNode(asText(scene.title)));button.addEventListener('click',()=>{pause();current=index;phase=0;render();});$('scenes').append(button);});
 for(const id of Object.keys(labels)){
  const lane=document.createElement('article');lane.className='lane '+id;lane.id='lane-'+id;
  lane.innerHTML='<div class="lane-title"><span class="marker" aria-hidden="true"></span><span class="lane-name"></span></div><p class="lane-sub"></p><div class="state-label">Synthetic target · spent</div><div class="value"></div><div class="state-caption"></div><div class="status"></div><p class="reason"></p><div class="evidence-summary"><b></b><span></span></div>';
  lane.querySelector('.lane-name').textContent=id==='combined'&&!runtimePassed?'ControlSpec protocol fixture':labels[id];$('lanes').append(lane);
 }
 function pause(){if(timer!==null)clearInterval(timer);timer=null;}
 function render(){
  const scene=scenes[current];
  $('scene-title').textContent=asText(scene.title);$('scene-description').textContent=asText(scene.description);
  $('scene-counter').textContent=String(current+1).padStart(2,'0')+' / '+String(scenes.length).padStart(2,'0');
  $('request-json').textContent=JSON.stringify(scene.request??null,null,2);
  $('request-summary').textContent='Exact scripted request'+(isCount(scene.request?.amount_minor)?' · '+money(scene.request.amount_minor):'')+' · inspect JSON';
  [...$('scenes').children].forEach((button,index)=>button.setAttribute('aria-pressed',String(index===current)));
  document.querySelectorAll('.phases span').forEach((item,index)=>{item.classList.toggle('active',index<=phase);if(index===phase)item.setAttribute('aria-current','step');else item.removeAttribute('aria-current');});
  for(const id of Object.keys(labels)){
   const element=$('lane-'+id),lane=Array.isArray(scene.lanes)?scene.lanes.find(item=>item.id===id):null;
   const observed=lane?.status==='observed';
   element.classList.toggle('unavailable',!observed);
   element.querySelector('.lane-sub').textContent=id==='unguarded'?'Direct call to a separate synthetic target':id==='native'?'Native policy path · inspect the effective configuration':runtimePassed?'Middleware path · inspect runtime evidence':'Authenticated gRPC fixture · runtime not verified';
   const state=phase>=2?lane?.after:lane?.before;
   element.querySelector('.value').textContent=observed?money(state?.spent_minor):'—';
   element.querySelector('.state-caption').textContent=!observed?'No target state is asserted.':(isCount(state?.purchase_count)?state.purchase_count+' recorded purchase'+(state.purchase_count===1?'':'s'):'Purchase count not recorded')+' · '+(phase>=2?'after request':'before request');
   const status=element.querySelector('.status');status.classList.toggle('revealed',observed&&phase>=1);
   status.textContent=!observed?'Not run':phase===0?'Recorded input':asText(lane.outcome).replaceAll('_',' ');
   element.querySelector('.reason').textContent=!observed?asText(lane?.reason??'This comparison path has not been run. No result is inferred.'):phase===0?'Replay the recorded decision, then inspect its effect at the synthetic target.':asText(lane.reason);
   const evidenceTitle=element.querySelector('.evidence-summary b'),evidenceText=element.querySelector('.evidence-summary span');
   if(!observed){evidenceTitle.textContent='Evidence unavailable';evidenceText.textContent='An unavailable path cannot support a comparison claim.';}
   else if(phase<3){evidenceTitle.textContent='Evidence appears at step 04';evidenceText.textContent='A decision alone does not prove an action completed.';}
   else {
    const events=Array.isArray(lane.events)?lane.events:[];
    const hasEvidence=lane.evidence!==null&&lane.evidence!==undefined&&typeof lane.evidence==='object'&&Object.keys(lane.evidence).length>0;
    evidenceTitle.textContent=hasEvidence?'Recorded evidence · inspect raw trace':'No evidence object recorded';
    evidenceText.textContent=events.length?events.map(event=>asText(event.message)).join(' · '):'No event messages were recorded for this path.';
   }
  }
  $('takeaway').textContent=phase===3?asText(scene.takeaway):'Follow the request from intent to evidence. The final step reveals the recorded takeaway.';
  $('trace').textContent=JSON.stringify(scene,null,2);
  $('progress').textContent='Step '+(phase+1)+' / 4 · '+phaseNames[phase]+' · recorded playback';
  $('step').disabled=phase===3;
  $('play').textContent=timer!==null?'Pause replay':phase===3?'↺ Replay scenario':phase===0?'Run this scenario':'Resume replay';
  $('announcement').textContent=asText(scene.title)+'. '+phaseNames[phase]+', step '+(phase+1)+' of 4.';
 }
 function advance(){if(phase<3)phase++;if(phase===3)pause();render();}
 $('play').addEventListener('click',()=>{if(timer!==null){pause();render();return;}if(phase===3)phase=0;timer=setInterval(advance,2200);render();});
 $('step').addEventListener('click',()=>{pause();advance();});
 $('reset').addEventListener('click',()=>{pause();phase=0;render();});
 document.addEventListener('visibilitychange',()=>{if(document.hidden&&timer!==null){pause();render();}});
 render();
})();
</script>
</body>
</html>