{
 "product": "ARGUS Behavioral Envelope",
 "slug": "argus-envelope",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-argus-envelope.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "Searches the knowledge base -> Inside every limit.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/argus/envelope/evaluate",
     "body": {
      "envelope": {
       "envelope_id": "env-1",
       "agent": "support-bot",
       "principal": "human:dana",
       "authority_ceiling": "LOW",
       "permitted_action_classes": [
        "read"
       ],
       "permitted_tools": [
        "search",
        "read_file"
       ],
       "prohibited_tools": [
        "wire_transfer"
       ],
       "max_delegation_depth": 0,
       "max_cumulative_amount": 100,
       "max_consequence": "LOW"
      },
      "path": [
       {
        "tool": "search",
        "action_class": "read",
        "resource": "kb",
        "consequence_class": "LOW"
       }
      ]
     }
    }
   ],
   "path": "verdict",
   "expect": [
    "COMPLIANT"
   ]
  },
  {
   "id": "C02",
   "kind": "control",
   "claim": "Reads a file, then searches -> Both tools allowed.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/argus/envelope/evaluate",
     "body": {
      "envelope": {
       "envelope_id": "env-1",
       "agent": "support-bot",
       "principal": "human:dana",
       "authority_ceiling": "LOW",
       "permitted_action_classes": [
        "read"
       ],
       "permitted_tools": [
        "search",
        "read_file"
       ],
       "prohibited_tools": [
        "wire_transfer"
       ],
       "max_delegation_depth": 0,
       "max_cumulative_amount": 100,
       "max_consequence": "LOW"
      },
      "path": [
       {
        "tool": "read_file",
        "action_class": "read",
        "resource": "kb",
        "consequence_class": "LOW"
       },
       {
        "tool": "search",
        "action_class": "read",
        "resource": "kb",
        "consequence_class": "LOW"
       }
      ]
     }
    }
   ],
   "path": "verdict",
   "expect": [
    "COMPLIANT"
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "Searches, then attempts a $5,000 wire -> Forbidden tool, critical consequence.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/argus/envelope/evaluate",
     "body": {
      "envelope": {
       "envelope_id": "env-1",
       "agent": "support-bot",
       "principal": "human:dana",
       "authority_ceiling": "LOW",
       "permitted_action_classes": [
        "read"
       ],
       "permitted_tools": [
        "search",
        "read_file"
       ],
       "prohibited_tools": [
        "wire_transfer"
       ],
       "max_delegation_depth": 0,
       "max_cumulative_amount": 100,
       "max_consequence": "LOW"
      },
      "path": [
       {
        "tool": "search",
        "action_class": "read",
        "resource": "kb",
        "consequence_class": "LOW"
       },
       {
        "tool": "wire_transfer",
        "action_class": "wire_transfer",
        "resource": "bank",
        "amount": 5000,
        "consequence_class": "CRITICAL"
       }
      ]
     }
    }
   ],
   "path": "verdict",
   "expect": [
    "VIOLATION"
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "Uses a tool not on the list (send_email) -> Not permitted, even though it is 'just' email.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/argus/envelope/evaluate",
     "body": {
      "envelope": {
       "envelope_id": "env-1",
       "agent": "support-bot",
       "principal": "human:dana",
       "authority_ceiling": "LOW",
       "permitted_action_classes": [
        "read"
       ],
       "permitted_tools": [
        "search",
        "read_file"
       ],
       "prohibited_tools": [
        "wire_transfer"
       ],
       "max_delegation_depth": 0,
       "max_cumulative_amount": 100,
       "max_consequence": "LOW"
      },
      "path": [
       {
        "tool": "send_email",
        "action_class": "read",
        "resource": "mail",
        "consequence_class": "LOW"
       }
      ]
     }
    }
   ],
   "path": "verdict",
   "expect": [
    "VIOLATION"
   ]
  },
  {
   "id": "C05",
   "kind": "attack",
   "claim": "Two $60 steps (total $120 > $100) -> Amounts add up across the path.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/argus/envelope/evaluate",
     "body": {
      "envelope": {
       "envelope_id": "env-1",
       "agent": "support-bot",
       "principal": "human:dana",
       "authority_ceiling": "LOW",
       "permitted_action_classes": [
        "read"
       ],
       "permitted_tools": [
        "search",
        "read_file"
       ],
       "prohibited_tools": [
        "wire_transfer"
       ],
       "max_delegation_depth": 0,
       "max_cumulative_amount": 100,
       "max_consequence": "LOW"
      },
      "path": [
       {
        "tool": "search",
        "action_class": "read",
        "resource": "kb",
        "consequence_class": "LOW",
        "amount": 60
       },
       {
        "tool": "search",
        "action_class": "read",
        "resource": "kb",
        "consequence_class": "LOW",
        "amount": 60
       }
      ]
     }
    }
   ],
   "path": "verdict",
   "expect": [
    "VIOLATION"
   ]
  },
  {
   "id": "C06",
   "kind": "attack",
   "claim": "Reads payroll (high-consequence data) -> Allowed tool, but the consequence is above the envelope.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/argus/envelope/evaluate",
     "body": {
      "envelope": {
       "envelope_id": "env-1",
       "agent": "support-bot",
       "principal": "human:dana",
       "authority_ceiling": "LOW",
       "permitted_action_classes": [
        "read"
       ],
       "permitted_tools": [
        "search",
        "read_file"
       ],
       "prohibited_tools": [
        "wire_transfer"
       ],
       "max_delegation_depth": 0,
       "max_cumulative_amount": 100,
       "max_consequence": "LOW"
      },
      "path": [
       {
        "tool": "read_file",
        "action_class": "read",
        "resource": "payroll",
        "consequence_class": "HIGH"
       }
      ]
     }
    }
   ],
   "path": "verdict",
   "expect": [
    "VIOLATION"
   ]
  }
 ]
}