{ "schema_version": "1", "generated_at": "2026-09-30T04:55:26.379568+00:00", "source_revision": "e30ac3657bdc75e2ec268b88429d762a7b4b70a8", "upstream": { "version": "v0.1.2", "commit": "6648bd0c290efbc41ba131ee9831ee45cd431f94" }, "runtime": { "status": "not_run", "detail": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime." }, "verification": { "kind": "authenticated_grpc_and_synthetic_target", "detail": "Real TLS gRPC contract calls, real ControlSpec evaluation, SQLite state and loopback HTTP target. Scripted agent inputs and test operator identity. No LLM or real purchase." }, "scenes": [ { "id": "allowed", "title": "A useful action proceeds", "description": "A one-time $42 purchase fits the synthetic $75 control.", "request": { "schema_version": "1", "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The gate lets a permitted action proceed and checks the target receipt.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.848432Z", "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", "evidence_mac": "722cef5ddf2515e9a37cc361620853c662153b86f1e80a7105f005d37482c82e", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "allowed", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.848432Z", "evidence_id": "sha256:b02c2f0b3ed1e7499415aad7d544e1b3ffed94674fb2dcaa5566be59827e14c2", "evidence_mac": "722cef5ddf2515e9a37cc361620853c662153b86f1e80a7105f005d37482c82e" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "committed", "reason": "target_receipt_verified", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.888113Z", "evidence_id": "sha256:051b06ab80262d3750be694f9fa6c02630b9945d96f6a45548f53c9c22d2803f", "evidence_mac": "b35fa1cab191b07e55527059b5e5032b128c89029f3c3eb6e275cc5be7c32ad4", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "target_receipt_verified" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "Signed target receipt reconciled." } ], "evidence": { "outcome": "committed", "reason": "target_receipt_verified", "forwarded": true, "reconciled": true, "rpc_elapsed_ms": 18.311, "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "allowed", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.888113Z", "evidence_id": "sha256:051b06ab80262d3750be694f9fa6c02630b9945d96f6a45548f53c9c22d2803f", "evidence_mac": "b35fa1cab191b07e55527059b5e5032b128c89029f3c3eb6e275cc5be7c32ad4" }, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-0b7e5486776d9556d3c158bc3a03e9aab008dd979fe3e3568045759d9cd451e8", "evaluated_at": "2026-09-30T04:55:20.855683Z", "expires_at": "2026-09-30T04:57:20.855683Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:f49b608b3ae784f15b7ea5aa0456d81ffaf0def920bb8725ca965fcddd9075da", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:20.855683Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "allowed", "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:20.855683Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:61529660963d7141bf4eda8aaa8111cf555ece7290274143d988fcae765185c8" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:3bc400ead62de739bbb367f6711a028dcba6dd596fb98643feff367523280676" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-0b7e5486776d9556d3c158bc3a03e9aab008dd979fe3e3568045759d9cd451e8", "evaluated_at": "2026-09-30T04:55:20.855683Z", "expires_at": "2026-09-30T04:57:20.855683Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:f49b608b3ae784f15b7ea5aa0456d81ffaf0def920bb8725ca965fcddd9075da", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:20.855683Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:10817bcf499e875b6022e4d245cb0b1bfc9a567d0a67c62492b9083a08894b08", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "allowed", "intent_digest": "sha256:c58f8e4f07bd983b3493d90885c5826e173ea9a672087b704cc5f28c0672a5d3", "intent_id": "allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:20.855683Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "reservation": { "action_id": "allowed", "decision_digest": "sha256:f49b608b3ae784f15b7ea5aa0456d81ffaf0def920bb8725ca965fcddd9075da", "expires_at": "2026-09-30T04:55:50.855683Z", "issued_at": "2026-09-30T04:55:20.855683Z", "method": "POST", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:61529660963d7141bf4eda8aaa8111cf555ece7290274143d988fcae765185c8" } }, "previous_hash": "sha256:3bc400ead62de739bbb367f6711a028dcba6dd596fb98643feff367523280676", "event_hash": "sha256:1594847e3ab67c739ed88ff72794c3cb7ad8e967c758c779dfbe396d95b01e4e" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "allowed", "kind": "reconciliation", "payload": { "at": "2026-09-30T04:55:20.893387Z", "receipt": { "action_id": "allowed", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:20.888113Z", "evidence_id": "sha256:051b06ab80262d3750be694f9fa6c02630b9945d96f6a45548f53c9c22d2803f", "evidence_mac": "b35fa1cab191b07e55527059b5e5032b128c89029f3c3eb6e275cc5be7c32ad4", "nonce": "457e63cc17f60a12f2d0da687eb64d5f448de6a41eb7da745a673f9ad45b3fe5", "request_digest": "sha256:65c79308466c25d8e702be25340e9094d41113512800a2d6c380a27fe8a059f7", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:1594847e3ab67c739ed88ff72794c3cb7ad8e967c758c779dfbe396d95b01e4e", "event_hash": "sha256:233d5f7d3a26f4b56c574cbaa6cf4db56167c03a3489d55c64a599b4898d1604" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "approval", "title": "Approve this exact $142 purchase", "description": "First denied. A simulated host operator approves the exact action, then the agent retries.", "request": { "schema_version": "1", "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "Approval is a separate fact, bound to the request, actor, policy and decision.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.190654Z", "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", "evidence_mac": "8f682ea5ed775ffe81533099b74c872825fc1ced7e09021f4f950b72ab8fcd24", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "approval", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.190654Z", "evidence_id": "sha256:a6efb85be193ed05c4455422564e38c9594fdcf8e770d594175df7918fa4a2da", "evidence_mac": "8f682ea5ed775ffe81533099b74c872825fc1ced7e09021f4f950b72ab8fcd24" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "committed", "reason": "target_receipt_verified", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.248998Z", "evidence_id": "sha256:799906a43be46c0bcdfe4ae6bcca1dc8106d80503c55d87afe658880b34d42fd", "evidence_mac": "dfaad92d18e178eea510edc94801559feb49745bcdaf5bab7e9b90e0e4d188b1", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 14200 USD cents." }, { "kind": "decision", "message": "Initial request denied: approval_required." }, { "kind": "approval", "message": "Simulated host operator approved the exact $142 request; no real human participated." }, { "kind": "decision", "message": "target_receipt_verified" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "Signed target receipt reconciled." } ], "evidence": { "outcome": "committed", "reason": "target_receipt_verified", "forwarded": true, "reconciled": true, "rpc_elapsed_ms": 18.371, "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "approval", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.248998Z", "evidence_id": "sha256:799906a43be46c0bcdfe4ae6bcca1dc8106d80503c55d87afe658880b34d42fd", "evidence_mac": "dfaad92d18e178eea510edc94801559feb49745bcdaf5bab7e9b90e0e4d188b1" }, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "evaluated_at": "2026-09-30T04:55:21.196928Z", "expires_at": "2026-09-30T04:57:21.196928Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d", "verdict": "require_approval" }, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:681fcadd8f7a0eb4598784ed908636bb6b06547719835daf1f5fa1815e9c45a0" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:79be57eebe5250caa7eb0862f12d11ca202b547cece7f024ce5f551b8652064e" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "denied", "payload": { "at": "2026-09-30T04:55:21.196928Z", "reason": "approval_required" }, "previous_hash": "sha256:79be57eebe5250caa7eb0862f12d11ca202b547cece7f024ce5f551b8652064e", "event_hash": "sha256:72b3b0ad3b54d1d8c3d033b8e714eba3da953b4e11a91572ab973dd986084c88" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z" } ], "basis": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "evaluated_at": "2026-09-30T04:55:21.196928Z", "expires_at": "2026-09-30T04:57:21.196928Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d", "verdict": "require_approval" }, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:681fcadd8f7a0eb4598784ed908636bb6b06547719835daf1f5fa1815e9c45a0" } }, "previous_hash": "sha256:72b3b0ad3b54d1d8c3d033b8e714eba3da953b4e11a91572ab973dd986084c88", "event_hash": "sha256:470980ad738b5306ca0b0b96017430174232d82da5411d6d501d132ad0cd2a42" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z" } ], "basis": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-1763b47bee68dc7b50b0433927c3bba963138f1bdbcdad45539522742cd0c7e1", "evaluated_at": "2026-09-30T04:55:21.211447Z", "expires_at": "2026-09-30T04:57:21.211447Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:60a7fb6da87fd7f81b4d0d72bf09a725b313e92aa552ec1a74e1adc2380d4328", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:08e6590e3b41a30e2573ad4474855b2ec2cc1a7e6866f0a1c46280a202c12a9e", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:ca4b95797ad9849122eb216e5962d2e37d7d0c45813f85cc3dfc493eea4b7c11" } }, "previous_hash": "sha256:470980ad738b5306ca0b0b96017430174232d82da5411d6d501d132ad0cd2a42", "event_hash": "sha256:85970f7ca6e18ddac61a353fc1ab7ea3412b583353ad61cf967afe8d785983b2" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z" } ], "basis": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-107805bb980c91307c6ef08b68ea93e575c1bccb9d13530ad7aef4690672e668", "evaluated_at": "2026-09-30T04:55:21.229732Z", "expires_at": "2026-09-30T04:57:21.229732Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:2d12b04f10670f95b048e948b5e2f2fadd4ad4a0611ef89391c9a3d2097a6ac8", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:08e6590e3b41a30e2573ad4474855b2ec2cc1a7e6866f0a1c46280a202c12a9e", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:f5ecef2a29c443eaa85cfd8936f3d5a00443a014daa4ced25286520869539e8d" } }, "previous_hash": "sha256:85970f7ca6e18ddac61a353fc1ab7ea3412b583353ad61cf967afe8d785983b2", "event_hash": "sha256:8d0617b5f98151a56303ff6318e218c6af9309ab67211836eb6cf740013d6e5d" }, { "sequence": 6, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-a38da01487d67678e07ba36b9b62c456", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "fact_digest": "sha256:dc5386b8ec48fcb778419fdc4fea44a70dcf698d5090af3808be201f43b105e7", "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.211447Z", "valid_until": "2026-09-30T04:57:21.196928Z" } ], "basis": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-107805bb980c91307c6ef08b68ea93e575c1bccb9d13530ad7aef4690672e668", "evaluated_at": "2026-09-30T04:55:21.229732Z", "expires_at": "2026-09-30T04:57:21.229732Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-117c3ed5e56eaef639482ab4b179dca539a853842174fd4b959fad2209d97ec2", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:c11178cec8a8c69c288e2f9171be813b9d7405a95e3acfb8e64cc06b43ec9e6d" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:2d12b04f10670f95b048e948b5e2f2fadd4ad4a0611ef89391c9a3d2097a6ac8", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:21.196928Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:87ff8252541ce7b89e82529e123764ccc7ac3ec5c05c9f4449f3b54901554b38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "approval", "intent_digest": "sha256:cd13f456fa22efa8a495292a3d296aef6e6fe026191452b17161bf1977b767fa", "intent_id": "approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.196928Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "reservation": { "action_id": "approval", "decision_digest": "sha256:2d12b04f10670f95b048e948b5e2f2fadd4ad4a0611ef89391c9a3d2097a6ac8", "expires_at": "2026-09-30T04:55:51.229732Z", "issued_at": "2026-09-30T04:55:21.229732Z", "method": "POST", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:08e6590e3b41a30e2573ad4474855b2ec2cc1a7e6866f0a1c46280a202c12a9e", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:f5ecef2a29c443eaa85cfd8936f3d5a00443a014daa4ced25286520869539e8d" } }, "previous_hash": "sha256:8d0617b5f98151a56303ff6318e218c6af9309ab67211836eb6cf740013d6e5d", "event_hash": "sha256:543a0c2d61eb856c2d186e004028dffdf516808ae1ebfdddbb2bf455176e1183" }, { "sequence": 7, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "approval", "kind": "reconciliation", "payload": { "at": "2026-09-30T04:55:21.255140Z", "receipt": { "action_id": "approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.248998Z", "evidence_id": "sha256:799906a43be46c0bcdfe4ae6bcca1dc8106d80503c55d87afe658880b34d42fd", "evidence_mac": "dfaad92d18e178eea510edc94801559feb49745bcdaf5bab7e9b90e0e4d188b1", "nonce": "40d7c67ef705d163dd65c13d1396184950e2a2bfdeb325b5548ebf29a37f865d", "request_digest": "sha256:72812147c8c266900de75c290c85d6d9bd66e10943015c4207bac0ae106e4649", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:543a0c2d61eb856c2d186e004028dffdf516808ae1ebfdddbb2bf455176e1183", "event_hash": "sha256:0f15fe2bd0ed136e3a5599c42a19596c6aa46767aefc58547d4bbe63222db116" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "overspend", "title": "$142 without approval", "description": "The agent proposes a purchase above the synthetic threshold.", "request": { "schema_version": "1", "action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "A proposal can be valid JSON and still require someone else's authority.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "overspend", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.536145Z", "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", "evidence_mac": "8d1adf5960f06017d80ffb32d8218aaaf7969ade907fa25c412e62f4f48318ce", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "overspend", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:21.536145Z", "evidence_id": "sha256:ad82058edc13d97af3fa18d83739d3efcdedc4aec1da48669d7f673ab2c7319d", "evidence_mac": "8d1adf5960f06017d80ffb32d8218aaaf7969ade907fa25c412e62f4f48318ce" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "approval_required", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 14200 USD cents." }, { "kind": "decision", "message": "approval_required" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "approval_required", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 16.833, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "overspend", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:e4a5fdc72e9e8cce393df4b2612516713f15e39cc16555a4995aeb33ed25d744", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-7a0a03a1a38ca61a9ebddec6c7c8816b63d4ae04f9482ae5ede934c7f128733e", "evaluated_at": "2026-09-30T04:55:21.544155Z", "expires_at": "2026-09-30T04:57:21.544155Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:e4a5fdc72e9e8cce393df4b2612516713f15e39cc16555a4995aeb33ed25d744", "intent_id": "overspend", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:52b24636ca11b115404a9032188510f6bd35a78ea63ba9fd5e57f8875bd2e50f", "verdict": "require_approval" }, "first_seen": "2026-09-30T04:55:21.544155Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:3f3d1117f4b43cf00db82a6ea59a117488bfbabc9e187eaea02e4a671cb43357", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "overspend", "intent_digest": "sha256:e4a5fdc72e9e8cce393df4b2612516713f15e39cc16555a4995aeb33ed25d744", "intent_id": "overspend", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.544155Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "overspend", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:b7674c888528ac5e987bd89ffaf8bfbf555e972f7f276d9a1c3e6a8f9e2914a2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:a530a68e8e49a516cdb32f89ab46bf235e98f7d30bdb8b07136dcb3377d56482" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:d48842b103c3b8e7e5cf92e4952408eeef5ee248eb8bc99ee591008a0894bf54" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "overspend", "kind": "denied", "payload": { "at": "2026-09-30T04:55:21.544155Z", "reason": "approval_required" }, "previous_hash": "sha256:d48842b103c3b8e7e5cf92e4952408eeef5ee248eb8bc99ee591008a0894bf54", "event_hash": "sha256:1fbc0438fc690446070eb8457ee5220459783aae1cc503c42f9dbb3b81aeecac" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "changed", "title": "Approved $142. Attempted $143.", "description": "A simulated operator approves $142; the subsequent request changes the amount.", "request": { "schema_version": "1", "action_id": "changed", "amount_minor": 14300, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "Changing the action invalidates the original approval.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14300, "balance_minor": 985700, "purchases": [ { "action_id": "changed", "amount_minor": 14300, "committed_at": "2026-09-30T04:55:21.915345Z", "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", "evidence_mac": "d2a36f248d761d258bb2741817f11a043fcdfefac6b0377de10d23e87157eb53", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "changed", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:57393bbfbcf4d7933b121c1784d7cbfc4532dd23a8be1eb6f578069310404c0b", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14300, "committed_at": "2026-09-30T04:55:21.915345Z", "evidence_id": "sha256:c83159a987088e7414c3eeedef7fa75d6bb450b03be2122706ef6aa6a3600938", "evidence_mac": "d2a36f248d761d258bb2741817f11a043fcdfefac6b0377de10d23e87157eb53" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "action_changed", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 14300 USD cents." }, { "kind": "decision", "message": "Initial request denied: approval_required." }, { "kind": "approval", "message": "Simulated host operator approved the exact $142 request; no real human participated." }, { "kind": "decision", "message": "action_changed" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "action_changed", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 8.031, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "evaluated_at": "2026-09-30T04:55:21.922458Z", "expires_at": "2026-09-30T04:57:21.922458Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1", "verdict": "require_approval" }, "first_seen": "2026-09-30T04:55:21.922458Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.922458Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:358dafad7426e1dea9b2f53ca39e9cfa7e24e6956e80290614443bf2cb184a9c" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:365f34cfd78c8cec69387f84baf522be9f813d1e488754ae45bf6ac924ce65e9" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "denied", "payload": { "at": "2026-09-30T04:55:21.922458Z", "reason": "approval_required" }, "previous_hash": "sha256:365f34cfd78c8cec69387f84baf522be9f813d1e488754ae45bf6ac924ce65e9", "event_hash": "sha256:cd26eccc3e132fccc7a1f0f124af981a62a1d44be596bb1663d9a6d67fcdda93" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-75d55c4415f606a2b4f991bd0c635bbe", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1" }, "fact_digest": "sha256:342f5311f501c5f6bffef317538643341de5fe178b8dd7f32d55bf7e374a6324", "intent_ref": { "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.934877Z", "valid_until": "2026-09-30T04:57:21.922458Z" } ], "basis": { "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "evaluated_at": "2026-09-30T04:55:21.922458Z", "expires_at": "2026-09-30T04:57:21.922458Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1", "verdict": "require_approval" }, "first_seen": "2026-09-30T04:55:21.922458Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.922458Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:358dafad7426e1dea9b2f53ca39e9cfa7e24e6956e80290614443bf2cb184a9c" } }, "previous_hash": "sha256:cd26eccc3e132fccc7a1f0f124af981a62a1d44be596bb1663d9a6d67fcdda93", "event_hash": "sha256:057e131dfd1e28812578ffe0aa5108110056dccca5d8c6796b0b1a915525fbb6" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-75d55c4415f606a2b4f991bd0c635bbe", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1" }, "fact_digest": "sha256:342f5311f501c5f6bffef317538643341de5fe178b8dd7f32d55bf7e374a6324", "intent_ref": { "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T04:55:21.934877Z", "valid_until": "2026-09-30T04:57:21.922458Z" } ], "basis": { "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-3bbe8e9b078685569fbbcc3c90bca69ab70318fe6378836deecd8e30da0de3a4", "evaluated_at": "2026-09-30T04:55:21.934877Z", "expires_at": "2026-09-30T04:57:21.934877Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-68651fa7c66a6577ee98dc41e778ca3d2f9d453d6f78e4863e225799bf4a105e", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:8b9cd114d1b6ffb780557a551b690edf1faa049633548c37c7a035f0876b19b1" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:12926983cab904067d2dd23a2c0363092792d777a73a0396675132d72379ce32", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:21.922458Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:b18b2ab73efff4c9e8753b84f92b9e5ce0142e4ea1d411a7a8ab658437cbf5ca", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "changed", "intent_digest": "sha256:ef5ce15df08150185282bd92b88154df8243268a13585192cc5078ff976c1cf4", "intent_id": "changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:21.922458Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f50b3edb830b84aa592af30e8755cff8f72eef01ad97d7d23bd88a4df1d857c2", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:a4b5a8df4ca167cb92d65f0347a28c569e4c77194b255d4bcc867419b23806e6", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:8a72e5b4a5ec545394295593864447ab846c7fe544bbc4c04642a9b48a1cf43a" } }, "previous_hash": "sha256:057e131dfd1e28812578ffe0aa5108110056dccca5d8c6796b0b1a915525fbb6", "event_hash": "sha256:4c7b4ae673499d701927c79239e0a57d671b04b186de847810156083486ad2a0" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "changed", "kind": "denied", "payload": { "at": "2026-09-30T04:55:21.953845Z", "reason": "action_changed" }, "previous_hash": "sha256:4c7b4ae673499d701927c79239e0a57d671b04b186de847810156083486ad2a0", "event_hash": "sha256:567fb5f3b8cc52729e8f5c36771542e9f5526fa6e56ad4084c9a2b76f23dcec6" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "self-approval", "title": "The agent tries to approve", "description": "An invalid operator credential is offered for the pending action.", "request": { "schema_version": "1", "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The caller cannot turn a request into a host-operator approval.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 14200, "balance_minor": 985800, "purchases": [ { "action_id": "self-approval", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:22.305347Z", "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", "evidence_mac": "d4fce8a9c6be1334a732a57b079313efd428dbccf4efd360544ebf7f1ffb2b58", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "self-approval", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "nonce": "unguarded-synthetic-baseline", "amount_minor": 14200, "committed_at": "2026-09-30T04:55:22.305347Z", "evidence_id": "sha256:fa439ae48eda8985014d1fc4cde3e182627e75d5f43cdc4eda691ffb14e6f568", "evidence_mac": "d4fce8a9c6be1334a732a57b079313efd428dbccf4efd360544ebf7f1ffb2b58" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "approval_required", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 14200 USD cents." }, { "kind": "decision", "message": "Initial request denied: approval_required." }, { "kind": "approval", "message": "operator_authentication_failed" }, { "kind": "decision", "message": "approval_required" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "approval_required", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 14.658, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-6f88f13c9cee539d2f9915335283e386ac3c65af0b1ed7d5ad16a5d0fe475314", "evaluated_at": "2026-09-30T04:55:22.315151Z", "expires_at": "2026-09-30T04:57:22.315151Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:47649f2cb7fdc77720fdfecf93f61a35f22cf483b992cfdeb8ae227cc26e9630", "verdict": "require_approval" }, "first_seen": "2026-09-30T04:55:22.315151Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "self-approval", "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.315151Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:3c8492a18a43ba8199d52d7246905ce8c9dc38f0d05ef6764666cd7ebb293761" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:6e34711dc8415a840c87d4850b26c64d6294c57bb8d89f19add10df2effb703c" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": { "at": "2026-09-30T04:55:22.315151Z", "reason": "approval_required" }, "previous_hash": "sha256:6e34711dc8415a840c87d4850b26c64d6294c57bb8d89f19add10df2effb703c", "event_hash": "sha256:5989f398f37acdf4dfcaa1c1cf78a4c27319e77491e60bcb282dbab88ceb3fec" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": { "at": "2026-09-30T04:55:22.329955Z", "reason": "operator_authentication_failed" }, "previous_hash": "sha256:5989f398f37acdf4dfcaa1c1cf78a4c27319e77491e60bcb282dbab88ceb3fec", "event_hash": "sha256:7cf7b2cd2558d48b6df266988ff19e55e8290978b98bfa3ba47d15067ebd75ef" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-34430eb026fa294aefcb76ad7e930f5a2746c1741cfefc4edd4be61ab0f084b4", "evaluated_at": "2026-09-30T04:55:22.337620Z", "expires_at": "2026-09-30T04:57:22.337620Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:04ee7f31e93e8721eebecaecc23d572209b7ce5b4510d058352fad12d5d9c2e2", "verdict": "require_approval" }, "first_seen": "2026-09-30T04:55:22.315151Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:8a6ee1048d48f227183243083e19d2911536b548d63176017c2cd44864b5d102", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "self-approval", "intent_digest": "sha256:6a9b7004c3b77b77e872164105db6f9375da4f7576f65a0c9d9e1273b32627c9", "intent_id": "self-approval", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.315151Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "self-approval", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:8aa560df5bc11f57b7ec30c5a685261509babf0659f7de2e84e5434d15372073", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:ce12b6d78a754a243772c319a85f95354ee0eed7b8cf49e009994053add8dc3d" } }, "previous_hash": "sha256:7cf7b2cd2558d48b6df266988ff19e55e8290978b98bfa3ba47d15067ebd75ef", "event_hash": "sha256:8e6ef149e84d1f9937fd798a8bf7c4998d32b2e90c0a5f3a12c4205dd8251992" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "self-approval", "kind": "denied", "payload": { "at": "2026-09-30T04:55:22.337620Z", "reason": "approval_required" }, "previous_hash": "sha256:8e6ef149e84d1f9937fd798a8bf7c4998d32b2e90c0a5f3a12c4205dd8251992", "event_hash": "sha256:ef695c73c8935d595e80906ea999f80bbd43dfb34588382e0af994dbb1ea71a7" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "replay", "title": "Try the same purchase again", "description": "The request is delivered twice with the same action ID.", "request": { "schema_version": "1", "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The target is idempotent in both lanes; ControlSpec additionally denies a fresh reservation.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.672678Z", "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", "evidence_mac": "8c4d6e09c46b5a575f93af2a64a52187049e7f4c183e8056e3a0a849f8dd6da1", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "replay", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.672678Z", "evidence_id": "sha256:5b902fece5a0ca45c9a9bc2d26c558d0333e1597fb61c4e31c536e836136a047", "evidence_mac": "8c4d6e09c46b5a575f93af2a64a52187049e7f4c183e8056e3a0a849f8dd6da1" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "action_already_reserved", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.705481Z", "evidence_id": "sha256:beeb1342834e8baf39ec1de5b9940e92ecccaabdca49b1a7848b46709ec2317d", "evidence_mac": "da0dc86f18bfab03341e08d7b3e84b7544f554df14d044db7ce9b6b5fbca41bb", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "effect", "message": "First delivery committed once; now retrying." }, { "kind": "decision", "message": "action_already_reserved" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "action_already_reserved", "forwarded": false, "reconciled": false, "rpc_elapsed_ms": 13.454, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-80d63d76294f7dcee7bfc44e99fbad41ff9879160e49a45c0d3da0e1dd1a0432", "evaluated_at": "2026-09-30T04:55:22.679161Z", "expires_at": "2026-09-30T04:57:22.679161Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:22.679161Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.679161Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:e7d56f5247d9945b57d3cbd0f01d886f27d119859f4df23698048a525d6102b4" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:f5ad921e85b7e390bccb5062b62775e9ebf2d6e98c1cf38c10c4429bc9f79dbf" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-80d63d76294f7dcee7bfc44e99fbad41ff9879160e49a45c0d3da0e1dd1a0432", "evaluated_at": "2026-09-30T04:55:22.679161Z", "expires_at": "2026-09-30T04:57:22.679161Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:22.679161Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.679161Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "reservation": { "action_id": "replay", "decision_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "expires_at": "2026-09-30T04:55:52.679161Z", "issued_at": "2026-09-30T04:55:22.679161Z", "method": "POST", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:e7d56f5247d9945b57d3cbd0f01d886f27d119859f4df23698048a525d6102b4" } }, "previous_hash": "sha256:f5ad921e85b7e390bccb5062b62775e9ebf2d6e98c1cf38c10c4429bc9f79dbf", "event_hash": "sha256:5e242872452e737c5af5aa8fcc07906eb5675425cee5c8fbb3891465053320b4" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "reconciliation", "payload": { "at": "2026-09-30T04:55:22.712187Z", "receipt": { "action_id": "replay", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:22.705481Z", "evidence_id": "sha256:beeb1342834e8baf39ec1de5b9940e92ecccaabdca49b1a7848b46709ec2317d", "evidence_mac": "da0dc86f18bfab03341e08d7b3e84b7544f554df14d044db7ce9b6b5fbca41bb", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:5e242872452e737c5af5aa8fcc07906eb5675425cee5c8fbb3891465053320b4", "event_hash": "sha256:cc24f156a2b5ddf32a0b901b4e91d756888d821ba98c24a7e48b0b579c2fec5d" }, { "sequence": 4, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-7000fa603464c77d6466de92da21a10d349c988e4e50efae0dd78f4e7f6f67c9", "evaluated_at": "2026-09-30T04:55:22.721876Z", "expires_at": "2026-09-30T04:57:22.721876Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:d284e7ab081d4381a239c0592ae0e9d09c6619d5db45e30117a32da0b2c1efef", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:22.679161Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:49e50e2c623d6e2eb44ae1c5712f7659a701037b51e636b4fd95e6ccf21e66dd", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "replay", "intent_digest": "sha256:3cbeaae7a6b9c2b27d2f9ea59f53ea07deaac5eae4426e9b02210524b1fe4397", "intent_id": "replay", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:22.679161Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "replay", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "reservation": { "action_id": "replay", "decision_digest": "sha256:71ac85d322fe855a403120217eb5c724908c4da3d0c515c97b4e4316fa76df6e", "expires_at": "2026-09-30T04:55:52.679161Z", "issued_at": "2026-09-30T04:55:22.679161Z", "method": "POST", "nonce": "47ef88f3560e214a4392602545dfd8e19ac10cd11bff6c8a6ccbdde5a599929d", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:50d0aab6cc44c2a73f7858e569521dbe9a07851385b9631cefc85764f7b3b405", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:3e405c9e41293f56503463358a584996d612407255a9a0bb1d718c10827bf5ab" } }, "previous_hash": "sha256:cc24f156a2b5ddf32a0b901b4e91d756888d821ba98c24a7e48b0b579c2fec5d", "event_hash": "sha256:56e67025852bc6f2dcc5a8cfca2448d430e570a38105154911dbd24c658ad6cc" }, { "sequence": 5, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "replay", "kind": "denied", "payload": { "at": "2026-09-30T04:55:22.721876Z", "reason": "action_already_reserved" }, "previous_hash": "sha256:56e67025852bc6f2dcc5a8cfca2448d430e570a38105154911dbd24c658ad6cc", "event_hash": "sha256:f983e012b45ee5b68486d73ac8b46d3f5eb5d58a4493d613517a3dc3ad828e90" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "missing-proof", "title": "The effect happened. Proof is missing.", "description": "The target commits, but the fixture withholds its receipt from reconciliation.", "request": { "schema_version": "1", "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "Known target state and verified completion are separate observations.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "missing-proof", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.056823Z", "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", "evidence_mac": "dcbb35a00a5f318d25465cfb7a48dfe31785bed93beeab546c95035e055334a9", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "missing-proof", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.056823Z", "evidence_id": "sha256:a504a8061025a70886828b8bbf8523b27cdd6152edfb99cf886e8ca856d2b6b8", "evidence_mac": "dcbb35a00a5f318d25465cfb7a48dfe31785bed93beeab546c95035e055334a9" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "effect_observed_evidence_missing", "reason": "completion_unverified", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "missing-proof", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.101992Z", "evidence_id": "sha256:046371297746deb4d2f6b2c39bb43237a947c84ee6b6255f8961d8fa0952c838", "evidence_mac": "e6f7adf40d1eca19cfdbce69ec8c6af83e9f28341dc55682d1863851596f17c3", "nonce": "15b3a3e1827e82a61a9b9b7d7e9bdfd458158a6f190f9a988a1616f2bccc35bd", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "completion_unverified" }, { "kind": "effect", "message": "Target purchase count: 1." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "effect_observed_evidence_missing", "reason": "completion_unverified", "forwarded": true, "reconciled": false, "rpc_elapsed_ms": 21.732, "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "missing-proof", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "nonce": "15b3a3e1827e82a61a9b9b7d7e9bdfd458158a6f190f9a988a1616f2bccc35bd", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.101992Z", "evidence_id": "sha256:046371297746deb4d2f6b2c39bb43237a947c84ee6b6255f8961d8fa0952c838", "evidence_mac": "e6f7adf40d1eca19cfdbce69ec8c6af83e9f28341dc55682d1863851596f17c3" }, "ledger_events": [ { "sequence": 1, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-f35044575248dfc009b39332a898e83652752f0a4d2b3ffd5108ef8b7853468d", "evaluated_at": "2026-09-30T04:55:23.063184Z", "expires_at": "2026-09-30T04:57:23.063184Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a6401352c3b1bf8c4dfcb837ead654b1232ea7f6c1965c9e4c2708d0dac3e6c5", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:23.063184Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "missing-proof", "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:23.063184Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:6f3075ec3d544308f8ce3b13b0e4e5e2d77e3e9fc1e99900076e688d5d60885d" } }, "previous_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000", "event_hash": "sha256:a61e162202e5a59c5e50298e794a164a0e8216c6b884a6f6b8068f418c90676f" }, { "sequence": 2, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-f35044575248dfc009b39332a898e83652752f0a4d2b3ffd5108ef8b7853468d", "evaluated_at": "2026-09-30T04:55:23.063184Z", "expires_at": "2026-09-30T04:57:23.063184Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a6401352c3b1bf8c4dfcb837ead654b1232ea7f6c1965c9e4c2708d0dac3e6c5", "verdict": "allow" }, "first_seen": "2026-09-30T04:55:23.063184Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "controlspec.synthetic.scope_digest": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2" }, "context_digest": "sha256:7ba6037b500e792b17ff88aa9037c3d7d5d408c6663f8fe8ad46d54c1a96252e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "missing-proof", "intent_digest": "sha256:0e29f08903e5811432a755ea60497fd987ec72c3ca28cf4add2e089def6e68fb", "intent_id": "missing-proof", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T04:55:23.063184Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "missing-proof", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "reservation": { "action_id": "missing-proof", "decision_digest": "sha256:a6401352c3b1bf8c4dfcb837ead654b1232ea7f6c1965c9e4c2708d0dac3e6c5", "expires_at": "2026-09-30T04:55:53.063184Z", "issued_at": "2026-09-30T04:55:23.063184Z", "method": "POST", "nonce": "15b3a3e1827e82a61a9b9b7d7e9bdfd458158a6f190f9a988a1616f2bccc35bd", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:75dc60ca7dd6834a7d3eea85bb0738a1d58a199dd9e5b2fbebf3a15244bd523a", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" } }, "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:6f3075ec3d544308f8ce3b13b0e4e5e2d77e3e9fc1e99900076e688d5d60885d" } }, "previous_hash": "sha256:a61e162202e5a59c5e50298e794a164a0e8216c6b884a6f6b8068f418c90676f", "event_hash": "sha256:e88c7461a40f9e6864cfc2721e1e01317aee5961113a309d3796ab3086a59d5b" }, { "sequence": 3, "scope": "sha256:599e82520ce875a08e243828a3eae936281b430c5ec750f0a6ac3d8d018b0ba2", "action_id": "missing-proof", "kind": "reconciliation", "payload": { "at": "2026-09-30T04:55:23.108675Z", "receipt": null, "verified": false }, "previous_hash": "sha256:e88c7461a40f9e6864cfc2721e1e01317aee5961113a309d3796ab3086a59d5b", "event_hash": "sha256:d02eaa9cc43c6bfd4062e8a4f97753206518113346f09674f499c832f9ad867a" } ], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "outage", "title": "The middleware goes offline", "description": "The fixture stops the gRPC service before attempting dispatch.", "request": { "schema_version": "1", "action_id": "outage", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The test dispatcher does not forward on RPC failure; OpenShell fail-closed behavior remains unrun.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "outage", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.422044Z", "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", "evidence_mac": "24751a4fab8ea74e3f4769f448f36b5e8d300d7741b0a4383cfee6f6df7f7371", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "outage", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:82134943e43abb6e61b199a603ced423a37e1975ea6052609769da638c64c386", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:23.422044Z", "evidence_id": "sha256:17bcf1327693dc70da1a30bd30ee2c1f7b7317ba9dfd3461640f3107eff05f67", "evidence_mac": "24751a4fab8ea74e3f4769f448f36b5e8d300d7741b0a4383cfee6f6df7f7371" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "not_forwarded", "reason": "grpc_deadline_exceeded", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "grpc_deadline_exceeded" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "not_forwarded", "reason": "grpc_deadline_exceeded", "forwarded": false, "reconciled": false, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "ledger_events": [], "ledger_chain_valid": true, "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] }, { "id": "direct", "title": "Skip the middleware", "description": "A real smolagents Tool calls the controlled HTTP target without an execution ticket.", "request": { "schema_version": "1", "action_id": "direct", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false }, "takeaway": "The target itself rejects a ticketless call. This tests the target, not sandbox bypass resistance.", "lanes": [ { "id": "unguarded", "label": "Unguarded target", "status": "observed", "outcome": "committed", "reason": "direct_synthetic_commit", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "purchases": [ { "action_id": "direct", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:25.704798Z", "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", "evidence_mac": "8fdb6deeec9ae1e6998a5166a07b5653cd601101470964b588e0423a95e23343", "nonce": "unguarded-synthetic-baseline", "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", "schema_version": "1", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "status": "committed", "synthetic_only": true } ] }, "events": [ { "kind": "effect", "message": "Direct host call to a separate synthetic target." } ], "evidence": { "target_receipt": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "direct", "scope": { "gateway_id": "recording-fixture", "sandbox_id": "scripted-agent" }, "request_digest": "sha256:da697bb82f7b6596f86cebcb2cb84285f768da65170e70624b510776d3868a88", "nonce": "unguarded-synthetic-baseline", "amount_minor": 4200, "committed_at": "2026-09-30T04:55:25.704798Z", "evidence_id": "sha256:c279855e06fe3556eb8bdf3a86b8d6936364976249708be7e620b97f2f863747", "evidence_mac": "8fdb6deeec9ae1e6998a5166a07b5653cd601101470964b588e0423a95e23343" }, "transport": "direct Python call", "target_idempotency": true, "ticket_required": false } }, { "id": "native", "label": "OpenShell native", "status": "not_run", "outcome": "not_run", "reason": "Not run: this recorder does not launch OpenShell. No OpenShell supervisor, native-policy result, or sandbox isolation result is observed. The protocol fixture below is not an OpenShell runtime.", "before": null, "after": null, "events": [], "evidence": { "policy": "integrations/openshell/policy-native.yaml", "note": "Native policy is body-aware. No native outcome is inferred here." } }, { "id": "combined", "label": "ControlSpec protocol fixture", "status": "observed", "outcome": "denied", "reason": "target_requires_ticket", "before": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "after": { "synthetic_only": true, "purchase_count": 0, "spent_minor": 0, "balance_minor": 1000000, "purchases": [] }, "events": [ { "kind": "intent", "message": "Scripted request: 4200 USD cents." }, { "kind": "decision", "message": "target_requires_ticket" }, { "kind": "effect", "message": "Target purchase count: 0." }, { "kind": "evidence", "message": "No verified completion for this attempt." } ], "evidence": { "outcome": "denied", "reason": "target_requires_ticket", "forwarded": true, "reconciled": false, "smolagents_tool_result": { "http_status": 403, "target_report": "{\"detail\":\"exactly one execution ticket required\"}", "assurance": "not_authorized_by_this_tool" }, "ledger_events": [], "ledger_chain_valid": true, "transport": "TLS gRPC with signed fixture JWT; loopback HTTP target", "supervisor": "explicit Python fixture, not NVIDIA OpenShell", "ticket_required": true } } ] } ], "limitations": [ "Actual OpenShell runtime, effective-policy admission, network isolation and bypass checks not run.", "The unguarded lane uses a direct Python target call; the controlled lane uses TLS gRPC + HTTP. They are illustrative arms, not latency benchmarks or a native OpenShell comparison.", "The controlled target requires a ticket; this extra defense is explicit and not attributed to OpenShell.", "The test operator is scripted. Host-only CLI is provided for manual approval; no production identity system.", "Reference decisions retain non-authoritative status. Synthetic permissions apply only to this fake target.", "Host administrators and the shared demo signing secret are trusted. Local hash chains are not tamper-proof.", "Replay protection is scoped to the same action ID. New IDs and cumulative budget limits require additional controls.", "Static replay cannot authorize anything. All amounts, identities and transactions are synthetic." ] }