[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:50+00:00",
  "ms": 653,
  "reply": {
   "slug": "action-firewall",
   "title": "Z3 proves a computer-use agent's plan breaks the approval rule before it runs",
   "status": "ok",
   "input": null,
   "total_ms": 585,
   "steps": [
    {
     "call": "POST /verify",
     "request": {
      "agent_id": "computer-use-agent",
      "plan": [
       {
        "index": 0,
        "action": "approve",
        "approver": "alice"
       },
       {
        "index": 1,
        "action": "wire_transfer",
        "value": 50000
       }
      ],
      "rules": [
       {
        "id": "dual-approval",
        "type": "VALUE_THRESHOLD_APPROVAL",
        "action": "wire_transfer",
        "threshold": 10000,
        "approval_action": "approve",
        "min_distinct_approvers": 2
       },
       {
        "id": "no-exfil",
        "type": "FORBIDDEN_COMBINATION",
        "actions": [
         "open_terminal",
         "upload_file"
        ]
       }
      ]
     },
     "status": 200,
     "ms": 191,
     "reply": {
      "verification_id": "1680ab64-b397-43d9-bf9c-d9107b16d983",
      "trust_decision": {
       "signed_by": "action-firewall (this deployment's own Ed25519 key; no external TrustDecision engine is configured)",
       "algorithm": "Ed25519",
       "public_key_hex": "d403d30d7898f25153165e2da71db9b71e4228aedb0f1abb9ced858550d7fb44",
       "statement": {
        "verification_id": "1680ab64-b397-43d9-bf9c-d9107b16d983",
        "agent_id": "computer-use-agent",
        "verdict": "BLOCK",
        "rule_verdicts": [
         {
          "rule_id": "dual-approval",
          "rule_type": "VALUE_THRESHOLD_APPROVAL",
          "verdict": "PROVEN_VIOLATION",
          "detail": "step 1: 'wire_transfer' value 50000.0 > threshold 10000.0 requires 2 distinct 'approve' approvals first; found 1 distinct (['alice'])",
          "counterexample": {
           "step": 1,
           "value": 50000.0,
           "approvers_seen": [
            "alice"
           ]
          }
         },
         {
          "rule_id": "no-exfil",
          "rule_type": "FORBIDDEN_COMBINATION",
          "verdict": "PROVEN_SAFE",
          "detail": "forbidden combination not present",
          "counterexample": null
         }
        ],
        "step_count": 2,
        "issued_at": "2026-11-03T22:47:49.494802+00:00"
       },
       "statement_sha256": "730a055a3808da9de014e714a994a63eac3b8b3b8f81e6386681ae86320a87e5",
       "signature_hex": "5ff56a3aef6b774a50d5cca49be621a034cfa9df926926cb2862142e8a9042bfd3bd6e766900fd4ca2c96ba8d8017da6da806f0b345194d83e7a0c850cbb4809",
       "verify": "Ed25519 verify(public_key_hex, signature_hex, canonical JSON of statement (sorted keys, no spaces))"
      },
      "verdict": "BLOCK",
      "rule_verdicts": [
       {
        "rule_id": "dual-approval",
        "rule_type": "VALUE_THRESHOLD_APPROVAL",
        "verdict": "PROVEN_VIOLATION",
        "detail": "step 1: 'wire_transfer' value 50000.0 > threshold 10000.0 requires 2 distinct 'approve' approvals first; found 1 distinct (['alice'])",
        "counterexample": {
         "step": 1,
         "value": 50000.0,
         "approvers_seen": [
          "alice"
         ]
        }
       },
       {
        "rule_id": "no-exfil",
        "rule_type": "FORBIDDEN_COMBINATION",
        "verdict": "PROVEN_SAFE",
        "detail": "forbidden combination not present",
        "counterexample": null
       }
      ],
      "note": "Fails closed: any UNDECIDABLE rule (malformed, or a step missing a field a rule needs) blocks the plan, same as a PROVEN_VIOLATION -- never silently passed."
     }
    },
    {
     "call": "POST /verify",
     "request": {
      "agent_id": "computer-use-agent",
      "plan": [
       {
        "index": 0,
        "action": "approve",
        "approver": "alice"
       },
       {
        "index": 1,
        "action": "approve",
        "approver": "bob"
       },
       {
        "index": 2,
        "action": "wire_transfer",
        "value": 50000
       }
      ],
      "rules": [
       {
        "id": "dual-approval",
        "type": "VALUE_THRESHOLD_APPROVAL",
        "action": "wire_transfer",
        "threshold": 10000,
        "approval_action": "approve",
        "min_distinct_approvers": 2
       }
      ]
     },
     "status": 200,
     "ms": 376,
     "reply": {
      "verification_id": "dafdef64-b286-4c71-afca-4c1aecd97770",
      "trust_decision": {
       "signed_by": "action-firewall (this deployment's own Ed25519 key; no external TrustDecision engine is configured)",
       "algorithm": "Ed25519",
       "public_key_hex": "d403d30d7898f25153165e2da71db9b71e4228aedb0f1abb9ced858550d7fb44",
       "statement": {
        "verification_id": "dafdef64-b286-4c71-afca-4c1aecd97770",
        "agent_id": "computer-use-agent",
        "verdict": "PROCEED",
        "rule_verdicts": [
         {
          "rule_id": "dual-approval",
          "rule_type": "VALUE_THRESHOLD_APPROVAL",
          "verdict": "PROVEN_SAFE",
          "detail": "no violation found",
          "counterexample": null
         }
        ],
        "step_count": 3,
        "issued_at": "2026-11-03T22:47:49.968160+00:00"
       },
       "statement_sha256": "132e328d67eac845cf9aff591204a5a8e881aa18eb041b2521ff233dede2dac8",
       "signature_hex": "9ba841b6b52bb8ca344c2082ffc190268487eb75d1446b4a744abe041c0753d5470885c4715f3d676867a71d7ef90a4541db23ba484ca00f6af732239fedce04",
       "verify": "Ed25519 verify(public_key_hex, signature_hex, canonical JSON of statement (sorted keys, no spaces))"
      },
      "verdict": "PROCEED",
      "rule_verdicts": [
       {
        "rule_id": "dual-approval",
        "rule_type": "VALUE_THRESHOLD_APPROVAL",
        "verdict": "PROVEN_SAFE",
        "detail": "no violation found",
        "counterexample": null
       }
      ],
      "note": "Fails closed: any UNDECIDABLE rule (malformed, or a step missing a field a rule needs) blocks the plan, same as a PROVEN_VIOLATION -- never silently passed."
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:50+00:00",
  "ms": 0,
  "reply": {
   "slug": "action-firewall",
   "title": "Z3 proves a computer-use agent's plan breaks the approval rule before it runs",
   "status": "ok",
   "input": null,
   "total_ms": 585,
   "steps": [
    {
     "call": "POST /verify",
     "request": {
      "agent_id": "computer-use-agent",
      "plan": [
       {
        "index": 0,
        "action": "approve",
        "approver": "alice"
       },
       {
        "index": 1,
        "action": "wire_transfer",
        "value": 50000
       }
      ],
      "rules": [
       {
        "id": "dual-approval",
        "type": "VALUE_THRESHOLD_APPROVAL",
        "action": "wire_transfer",
        "threshold": 10000,
        "approval_action": "approve",
        "min_distinct_approvers": 2
       },
       {
        "id": "no-exfil",
        "type": "FORBIDDEN_COMBINATION",
        "actions": [
         "open_terminal",
         "upload_file"
        ]
       }
      ]
     },
     "status": 200,
     "ms": 191,
     "reply": {
      "verification_id": "1680ab64-b397-43d9-bf9c-d9107b16d983",
      "trust_decision": {
       "signed_by": "action-firewall (this deployment's own Ed25519 key; no external TrustDecision engine is configured)",
       "algorithm": "Ed25519",
       "public_key_hex": "d403d30d7898f25153165e2da71db9b71e4228aedb0f1abb9ced858550d7fb44",
       "statement": {
        "verification_id": "1680ab64-b397-43d9-bf9c-d9107b16d983",
        "agent_id": "computer-use-agent",
        "verdict": "BLOCK",
        "rule_verdicts": [
         {
          "rule_id": "dual-approval",
          "rule_type": "VALUE_THRESHOLD_APPROVAL",
          "verdict": "PROVEN_VIOLATION",
          "detail": "step 1: 'wire_transfer' value 50000.0 > threshold 10000.0 requires 2 distinct 'approve' approvals first; found 1 distinct (['alice'])",
          "counterexample": {
           "step": 1,
           "value": 50000.0,
           "approvers_seen": [
            "alice"
           ]
          }
         },
         {
          "rule_id": "no-exfil",
          "rule_type": "FORBIDDEN_COMBINATION",
          "verdict": "PROVEN_SAFE",
          "detail": "forbidden combination not present",
          "counterexample": null
         }
        ],
        "step_count": 2,
        "issued_at": "2026-11-03T22:47:49.494802+00:00"
       },
       "statement_sha256": "730a055a3808da9de014e714a994a63eac3b8b3b8f81e6386681ae86320a87e5",
       "signature_hex": "5ff56a3aef6b774a50d5cca49be621a034cfa9df926926cb2862142e8a9042bfd3bd6e766900fd4ca2c96ba8d8017da6da806f0b345194d83e7a0c850cbb4809",
       "verify": "Ed25519 verify(public_key_hex, signature_hex, canonical JSON of statement (sorted keys, no spaces))"
      },
      "verdict": "BLOCK",
      "rule_verdicts": [
       {
        "rule_id": "dual-approval",
        "rule_type": "VALUE_THRESHOLD_APPROVAL",
        "verdict": "PROVEN_VIOLATION",
        "detail": "step 1: 'wire_transfer' value 50000.0 > threshold 10000.0 requires 2 distinct 'approve' approvals first; found 1 distinct (['alice'])",
        "counterexample": {
         "step": 1,
         "value": 50000.0,
         "approvers_seen": [
          "alice"
         ]
        }
       },
       {
        "rule_id": "no-exfil",
        "rule_type": "FORBIDDEN_COMBINATION",
        "verdict": "PROVEN_SAFE",
        "detail": "forbidden combination not present",
        "counterexample": null
       }
      ],
      "note": "Fails closed: any UNDECIDABLE rule (malformed, or a step missing a field a rule needs) blocks the plan, same as a PROVEN_VIOLATION -- never silently passed."
     }
    },
    {
     "call": "POST /verify",
     "request": {
      "agent_id": "computer-use-agent",
      "plan": [
       {
        "index": 0,
        "action": "approve",
        "approver": "alice"
       },
       {
        "index": 1,
        "action": "approve",
        "approver": "bob"
       },
       {
        "index": 2,
        "action": "wire_transfer",
        "value": 50000
       }
      ],
      "rules": [
       {
        "id": "dual-approval",
        "type": "VALUE_THRESHOLD_APPROVAL",
        "action": "wire_transfer",
        "threshold": 10000,
        "approval_action": "approve",
        "min_distinct_approvers": 2
       }
      ]
     },
     "status": 200,
     "ms": 376,
     "reply": {
      "verification_id": "dafdef64-b286-4c71-afca-4c1aecd97770",
      "trust_decision": {
       "signed_by": "action-firewall (this deployment's own Ed25519 key; no external TrustDecision engine is configured)",
       "algorithm": "Ed25519",
       "public_key_hex": "d403d30d7898f25153165e2da71db9b71e4228aedb0f1abb9ced858550d7fb44",
       "statement": {
        "verification_id": "dafdef64-b286-4c71-afca-4c1aecd97770",
        "agent_id": "computer-use-agent",
        "verdict": "PROCEED",
        "rule_verdicts": [
         {
          "rule_id": "dual-approval",
          "rule_type": "VALUE_THRESHOLD_APPROVAL",
          "verdict": "PROVEN_SAFE",
          "detail": "no violation found",
          "counterexample": null
         }
        ],
        "step_count": 3,
        "issued_at": "2026-11-03T22:47:49.968160+00:00"
       },
       "statement_sha256": "132e328d67eac845cf9aff591204a5a8e881aa18eb041b2521ff233dede2dac8",
       "signature_hex": "9ba841b6b52bb8ca344c2082ffc190268487eb75d1446b4a744abe041c0753d5470885c4715f3d676867a71d7ef90a4541db23ba484ca00f6af732239fedce04",
       "verify": "Ed25519 verify(public_key_hex, signature_hex, canonical JSON of statement (sorted keys, no spaces))"
      },
      "verdict": "PROCEED",
      "rule_verdicts": [
       {
        "rule_id": "dual-approval",
        "rule_type": "VALUE_THRESHOLD_APPROVAL",
        "verdict": "PROVEN_SAFE",
        "detail": "no violation found",
        "counterexample": null
       }
      ],
      "note": "Fails closed: any UNDECIDABLE rule (malformed, or a step missing a field a rule needs) blocks the plan, same as a PROVEN_VIOLATION -- never silently passed."
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:51+00:00",
  "ms": 0,
  "reply": {
   "slug": "action-firewall",
   "title": "Z3 proves a computer-use agent's plan breaks the approval rule before it runs",
   "status": "ok",
   "input": null,
   "total_ms": 585,
   "steps": [
    {
     "call": "POST /verify",
     "request": {
      "agent_id": "computer-use-agent",
      "plan": [
       {
        "index": 0,
        "action": "approve",
        "approver": "alice"
       },
       {
        "index": 1,
        "action": "wire_transfer",
        "value": 50000
       }
      ],
      "rules": [
       {
        "id": "dual-approval",
        "type": "VALUE_THRESHOLD_APPROVAL",
        "action": "wire_transfer",
        "threshold": 10000,
        "approval_action": "approve",
        "min_distinct_approvers": 2
       },
       {
        "id": "no-exfil",
        "type": "FORBIDDEN_COMBINATION",
        "actions": [
         "open_terminal",
         "upload_file"
        ]
       }
      ]
     },
     "status": 200,
     "ms": 191,
     "reply": {
      "verification_id": "1680ab64-b397-43d9-bf9c-d9107b16d983",
      "trust_decision": {
       "signed_by": "action-firewall (this deployment's own Ed25519 key; no external TrustDecision engine is configured)",
       "algorithm": "Ed25519",
       "public_key_hex": "d403d30d7898f25153165e2da71db9b71e4228aedb0f1abb9ced858550d7fb44",
       "statement": {
        "verification_id": "1680ab64-b397-43d9-bf9c-d9107b16d983",
        "agent_id": "computer-use-agent",
        "verdict": "BLOCK",
        "rule_verdicts": [
         {
          "rule_id": "dual-approval",
          "rule_type": "VALUE_THRESHOLD_APPROVAL",
          "verdict": "PROVEN_VIOLATION",
          "detail": "step 1: 'wire_transfer' value 50000.0 > threshold 10000.0 requires 2 distinct 'approve' approvals first; found 1 distinct (['alice'])",
          "counterexample": {
           "step": 1,
           "value": 50000.0,
           "approvers_seen": [
            "alice"
           ]
          }
         },
         {
          "rule_id": "no-exfil",
          "rule_type": "FORBIDDEN_COMBINATION",
          "verdict": "PROVEN_SAFE",
          "detail": "forbidden combination not present",
          "counterexample": null
         }
        ],
        "step_count": 2,
        "issued_at": "2026-11-03T22:47:49.494802+00:00"
       },
       "statement_sha256": "730a055a3808da9de014e714a994a63eac3b8b3b8f81e6386681ae86320a87e5",
       "signature_hex": "5ff56a3aef6b774a50d5cca49be621a034cfa9df926926cb2862142e8a9042bfd3bd6e766900fd4ca2c96ba8d8017da6da806f0b345194d83e7a0c850cbb4809",
       "verify": "Ed25519 verify(public_key_hex, signature_hex, canonical JSON of statement (sorted keys, no spaces))"
      },
      "verdict": "BLOCK",
      "rule_verdicts": [
       {
        "rule_id": "dual-approval",
        "rule_type": "VALUE_THRESHOLD_APPROVAL",
        "verdict": "PROVEN_VIOLATION",
        "detail": "step 1: 'wire_transfer' value 50000.0 > threshold 10000.0 requires 2 distinct 'approve' approvals first; found 1 distinct (['alice'])",
        "counterexample": {
         "step": 1,
         "value": 50000.0,
         "approvers_seen": [
          "alice"
         ]
        }
       },
       {
        "rule_id": "no-exfil",
        "rule_type": "FORBIDDEN_COMBINATION",
        "verdict": "PROVEN_SAFE",
        "detail": "forbidden combination not present",
        "counterexample": null
       }
      ],
      "note": "Fails closed: any UNDECIDABLE rule (malformed, or a step missing a field a rule needs) blocks the plan, same as a PROVEN_VIOLATION -- never silently passed."
     }
    },
    {
     "call": "POST /verify",
     "request": {
      "agent_id": "computer-use-agent",
      "plan": [
       {
        "index": 0,
        "action": "approve",
        "approver": "alice"
       },
       {
        "index": 1,
        "action": "approve",
        "approver": "bob"
       },
       {
        "index": 2,
        "action": "wire_transfer",
        "value": 50000
       }
      ],
      "rules": [
       {
        "id": "dual-approval",
        "type": "VALUE_THRESHOLD_APPROVAL",
        "action": "wire_transfer",
        "threshold": 10000,
        "approval_action": "approve",
        "min_distinct_approvers": 2
       }
      ]
     },
     "status": 200,
     "ms": 376,
     "reply": {
      "verification_id": "dafdef64-b286-4c71-afca-4c1aecd97770",
      "trust_decision": {
       "signed_by": "action-firewall (this deployment's own Ed25519 key; no external TrustDecision engine is configured)",
       "algorithm": "Ed25519",
       "public_key_hex": "d403d30d7898f25153165e2da71db9b71e4228aedb0f1abb9ced858550d7fb44",
       "statement": {
        "verification_id": "dafdef64-b286-4c71-afca-4c1aecd97770",
        "agent_id": "computer-use-agent",
        "verdict": "PROCEED",
        "rule_verdicts": [
         {
          "rule_id": "dual-approval",
          "rule_type": "VALUE_THRESHOLD_APPROVAL",
          "verdict": "PROVEN_SAFE",
          "detail": "no violation found",
          "counterexample": null
         }
        ],
        "step_count": 3,
        "issued_at": "2026-11-03T22:47:49.968160+00:00"
       },
       "statement_sha256": "132e328d67eac845cf9aff591204a5a8e881aa18eb041b2521ff233dede2dac8",
       "signature_hex": "9ba841b6b52bb8ca344c2082ffc190268487eb75d1446b4a744abe041c0753d5470885c4715f3d676867a71d7ef90a4541db23ba484ca00f6af732239fedce04",
       "verify": "Ed25519 verify(public_key_hex, signature_hex, canonical JSON of statement (sorted keys, no spaces))"
      },
      "verdict": "PROCEED",
      "rule_verdicts": [
       {
        "rule_id": "dual-approval",
        "rule_type": "VALUE_THRESHOLD_APPROVAL",
        "verdict": "PROVEN_SAFE",
        "detail": "no violation found",
        "counterexample": null
       }
      ],
      "note": "Fails closed: any UNDECIDABLE rule (malformed, or a step missing a field a rule needs) blocks the plan, same as a PROVEN_VIOLATION -- never silently passed."
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]