[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:31+00:00",
  "ms": 1562,
  "reply": {
   "scenario": {
    "id": "safe-read",
    "title": "A reasonable action",
    "explains": "A normal tool call with a declared intent, from a principal with no trust history yet. Policy and risk both pass, but unknown trust never becomes ALLOW on its own: the action is held for human approval."
   },
   "verdict": "REQUIRE_APPROVAL",
   "blocked": false,
   "decision_id": "fd_fd1f3745eb7445b5ac70eb78",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_bb2f7f73aba04b4b9ef5190f (expires 2026-11-03T23:46:30.118907+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no tool named in the payload to validate"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "execution held pending human approval"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: pending"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "63a8004b047e8d04aa57e08fbbdcce8b12a6a497de107a1f90542a7bf6493cdb",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_fd1f3745eb7445b5ac70eb78/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_fd1f3745eb7445b5ac70eb78",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "fa71d074cc6f6653f830e9ff467ed6e74e1488e3e9757ffd466720989af7d3da",
     "recomputed_digest": "fa71d074cc6f6653f830e9ff467ed6e74e1488e3e9757ffd466720989af7d3da",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "9rUFHsZdUkz8rg2z+JmGVSvWuZYSQhwhsBuVk3PIB8EBtPz6fZwAw1xgV4DNh0jvgj3BRYIGYEysHF5XQL/rDA==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 59
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:32+00:00",
  "ms": 713,
  "reply": {
   "scenario": {
    "id": "prompt-injection",
    "title": "A prompt-injection payload",
    "explains": "The same call, carrying text that tries to override the agent's instructions. The RISK stage screens the payload and denies it."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_1046b7a5635245ec82931655",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "matched injection technique: instruction override, system prompt extraction, credential exfiltration"
    },
    {
     "stage": "trust",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=high, decision=deny (first use of this tool with these destinations: a human approves it once)"
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "not_configured",
     "enforcing": false,
     "ran": true,
     "detail": "no human-approval rule is configured for this principal, so nothing was held for review"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "BLOCKED permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no tool named in the payload to validate"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "risk",
    "trust"
   ],
   "why": null,
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "7b753dbe3f832471325e9f5890fcea9d95b87337a68388ad2a45c3d847136a51",
    "pre_verdict": "BLOCKED",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_1046b7a5635245ec82931655/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_1046b7a5635245ec82931655",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "484225624f326e40564a770f4e838d683586d0c514e2f070f3804eaf5728a44c",
     "recomputed_digest": "484225624f326e40564a770f4e838d683586d0c514e2f070f3804eaf5728a44c",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "cVaL6xNAY2KClt6PjN50gJM/e+l8Xndpnqm68IGrCZ5zavwmtEMcDf8yfdo2YH0+YipN/+iv7HMrumrLL9SCCA==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 58
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:33+00:00",
  "ms": 278,
  "reply": {
   "scenario": {
    "id": "malformed-plan",
    "title": "A plan that cannot be reasoned about",
    "explains": "A plan whose steps name no tool. VERIFICATION catches it before ActionProof is asked to prove anything about it -- a malformed plan returning 'nothing to prove' would read as a pass."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_a5684f4fa91c4fc9b5c95870",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "the submitted plan is not well-formed: step 0 names no tool; step 1 names no tool"
    },
    {
     "stage": "actionproof",
     "verdict": "unavailable",
     "enforcing": true,
     "ran": false,
     "detail": "ActionProof returned HTTP 422"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_30a106740a3b4312b2fc3529 (expires 2026-11-03T23:46:33.503010+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "BLOCKED permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no tool named in the payload to validate"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "verification",
    "actionproof"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "37d69e0eedec1d6357502c89eeb70b853fce4aba4e647653378c4251e3283bd6",
    "pre_verdict": "BLOCKED",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_a5684f4fa91c4fc9b5c95870/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_a5684f4fa91c4fc9b5c95870",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "746199f7ff7ad660a7b1c1a9f499173e61be13480f8c84d375b0f738ea4dfba8",
     "recomputed_digest": "746199f7ff7ad660a7b1c1a9f499173e61be13480f8c84d375b0f738ea4dfba8",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "QXSp2myszgFuyWna8iqqh2+qip/PCp0DA+RWu10r4ocM1LeSnOhLpOqQCBf/lcFSmWqju6ns1zzNbZZabd7cAQ==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 57
  }
 },
 {
  "id": "C04",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:34+00:00",
  "ms": 278,
  "reply": {
   "scenario": {
    "id": "mission-escalation",
    "title": "An agent trying to exceed its mission (E38)",
    "explains": "Same signed mission (read inventory, low risk). The agent asks to WRITE inventory and cites a predicted reward of 1,000,000 and 99% confidence. Optimization cannot create authority: the MISSION stage refuses the call and the decision is BLOCKED."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_4e72d10c900943318bf7ba86",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_88056db6a5f142df8d8f1fe6 (expires 2026-11-03T23:46:34.252607+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no schema registered for 'inventory/write': recording only (observe mode)"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "mission",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "mission integrity refused the call: CAPABILITY_NOT_IN_ACTION, OUTCOME_OUTSIDE_ACTION, PROHIBITED_OUTCOME"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "mission"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "88b77ce5479698ddf83d5509fbec38be3cf75648eaae037e28b8c76764414e79",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_4e72d10c900943318bf7ba86/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_4e72d10c900943318bf7ba86",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "c020f33567de77eb42cfa6dfae53226fbf385adb2532562b79e689531b9d397c",
     "recomputed_digest": "c020f33567de77eb42cfa6dfae53226fbf385adb2532562b79e689531b9d397c",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "6XQ+atMftTv59L5GRJOebWW15FqqyxAtS/+gQAZhLXayDAMzRjobn81kJLFmDrDKZ17jnI1KalM9vliKwq45CQ==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 56
  }
 },
 {
  "id": "C05",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:34+00:00",
  "ms": 104,
  "reply": {
   "scenario": {
    "id": "horizon-exhausted",
    "title": "An action outside the contracted horizon (E7)",
    "explains": "Same policy, a $15,000 write: inside the nominal $20,000 budget, but outside the $10,000 the horizon contracts to under uncertainty 0.5. Uncertainty contracts authority, never expands it: CONSEQUENCE refuses the call and requires re-authorization."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_22f0a01c466b40b1a726c677",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_6385e95838c340538fe170be (expires 2026-11-03T23:46:34.892696+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no tool named in the payload to validate"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "consequence",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "consequence governance refused the call: HORIZON_EXHAUSTED:financial 15000.0>10000.0, REASSESS_REQUIRED"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "consequence"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "774b22c142ea64583fc0b7004f00e144dcb361064dd1dc99cf15da80e417f10d",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_22f0a01c466b40b1a726c677/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_22f0a01c466b40b1a726c677",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "280ef92605fba546466a31f0b494184d4959ea33d7c5f1bde2a7cd47eef1158d",
     "recomputed_digest": "280ef92605fba546466a31f0b494184d4959ea33d7c5f1bde2a7cd47eef1158d",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "8p6QMa2c1eQFMLn/jIaP+A5jH+IemoVfsvN5r0xgyGxyWt4lLmdnRfLaq0fluVzUuTbZwKb43ufSpZz4FUKCCA==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 55
  }
 },
 {
  "id": "C06",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:35+00:00",
  "ms": 143,
  "reply": {
   "scenario": {
    "id": "governance-program-reauth",
    "title": "A governed call without its quorum-issued lease (E15)",
    "explains": "Same program, same agent, same tool, but the agent has no lease from the governance quorum. The program's LEASE_CHECK sends it to REAUTH; a governance program can narrow, never grant, so the GOVERNANCE stage refuses the call and the decision is BLOCKED."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_b1bf97f9361b4b629b8c28a0",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_9e9b0d0b9ac84ab0adc65b2d (expires 2026-11-03T23:46:35.524117+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no allowlist configured for this tenant: recording only (observe mode). Add a rule to enforce."
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no schema registered for 'github/merge': recording only (observe mode)"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "governance",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "programmable governance refused the call: PROGRAM_VERDICT_REAUTH:LEASE_CHECK:NO_LEASE"
    },
    {
     "stage": "coherence",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "all 1 declared proof(s) name one subject, agent-1 (the caller did not name an agent to bind it to)"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "governance"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "6ed56ed92f80542b0e4f1325bde19e4b27647e7c64fc6da101ada0e37e73c9c6",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_b1bf97f9361b4b629b8c28a0/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_b1bf97f9361b4b629b8c28a0",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "63efed24ed360e666b1404d470064d347b5e683b1c0efa347f2e9e98b5bd4948",
     "recomputed_digest": "63efed24ed360e666b1404d470064d347b5e683b1c0efa347f2e9e98b5bd4948",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "bCgHwAUnUwDy85fbYxgbTEZrTH5L0IZpy+ayV2uqFMdLAVIn5FSGsHsF87S5vBOWXjgBWsRf+642C59CjON9Bg==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 54
  }
 },
 {
  "id": "C07",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:36+00:00",
  "ms": 651,
  "reply": {
   "scenario": {
    "id": "prediction-outside",
    "title": "An action the models predict breaks the safety envelope (E16)",
    "explains": "Same world, same models, a $950,000 transfer. Both models predict the treasury falls below its $100,000 floor. A prediction can only restrict: the PREDICTION stage refuses the call and the decision is BLOCKED."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_0307d3cc4a7b49a985db2c97",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (action risk critical: tool 'prediction-outside' is unclassified (medium); amount 950000 >= 10000) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (action risk critical: tool 'prediction-outside' is unclassified (medium); amount 950000 >= 10000) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_061f1dac6a774f89b34b1a7b (expires 2026-11-03T23:46:36.675248+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no allowlist configured for this tenant: recording only (observe mode). Add a rule to enforce."
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no schema registered for 'payments/transfer': recording only (observe mode)"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "prediction",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "prediction-bounded authorization refused the call: ENVELOPE_VERDICT_DENY"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "prediction"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "37beed15707428c38fb069889717e56910ed1234f59119322c42ace8e0cef667",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_0307d3cc4a7b49a985db2c97/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_0307d3cc4a7b49a985db2c97",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "33529b0e906b7ac70fe18274a21385468b15102499b4facd8f6ba52d366a2ed8",
     "recomputed_digest": "33529b0e906b7ac70fe18274a21385468b15102499b4facd8f6ba52d366a2ed8",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "JBRTuj8qoooQ3ZcGC0LEK0BYj4BP5t7Lkqr4NXQm5CyFWS1L6MNHXOgNxUdtJqe/Qa+0mAJ61X8TlEOMLcSYBg==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 53
  }
 },
 {
  "id": "C08",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:37+00:00",
  "ms": 169,
  "reply": {
   "scenario": {
    "id": "autonomy-substituted",
    "title": "Same agent key, swapped model: a different agent (L5)",
    "explains": "Same certificate, same lease, same key, but the agent is now running an unreviewed model version. The certificate binds the exact configuration, so this is a different agent: the AUTONOMY stage refuses the call and the decision is BLOCKED."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_c5067b204b374986a95d53c1",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_169c05198bcc42949995ea00 (expires 2026-11-03T23:46:37.316052+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no schema registered for 'tickets/close': recording only (observe mode)"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "autonomy",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "autonomy governance refused the call: CONFIGURATION_SUBSTITUTED:model_version"
    },
    {
     "stage": "coherence",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "all 1 declared proof(s) name one subject, demo-support-agent (the caller did not name an agent to bind it to)"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "autonomy"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "194eb4539e252a6de29cabf8760d652149c034d72527a79e1514b96ffd57b121",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_c5067b204b374986a95d53c1/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_c5067b204b374986a95d53c1",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "3c772fe213b38780f9d9a5f4e8b39bd3b1ea526248690346999751300802ee5c",
     "recomputed_digest": "3c772fe213b38780f9d9a5f4e8b39bd3b1ea526248690346999751300802ee5c",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "TNaigfSdxOrG6kDWr48OlMob8SFq7zVLdFfMRRDH06O9VJz0LyDqLlDmsNdTZOouyHjR6IOid/xNIqPXZEVRCA==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 52
  }
 },
 {
  "id": "C09",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:38+00:00",
  "ms": 142,
  "reply": {
   "scenario": {
    "id": "federation-transfer",
    "title": "Another organization's evidence is not permission (E37)",
    "explains": "Same federation. A now asks to WRITE B's inventory. B's own authority includes writes, and A's signed assurance lists inventory.write in its scope, but the federation only covers reads. Authority does not transfer across organizations: FEDERATION refuses the call and the decision is BLOCKED."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_42a0813a413048c8838ba25b",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (action risk high: tool 'federation-transfer' is payments (high); payment with no readable amount) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (action risk high: tool 'federation-transfer' is payments (high); payment with no readable amount) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_bf97d2f776c94be582d6569b (expires 2026-11-03T23:46:37.966756+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no schema registered for 'inventory/write': recording only (observe mode)"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "federation",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "federation governance refused the call: CAPABILITY_NOT_IN_CONTRACT, CAPABILITY_NOT_ACCEPTED_BY_FEDERATION"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "federation"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "cef9fd5a4995671bd68dadb5972167e0b1aa88e0e60b6d8fa1d74136332e09a0",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_42a0813a413048c8838ba25b/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_42a0813a413048c8838ba25b",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "4ca5719b067d249a7f3d6410716c0b3c91fa0f07b413c21385cd9436b9a8d449",
     "recomputed_digest": "4ca5719b067d249a7f3d6410716c0b3c91fa0f07b413c21385cd9436b9a8d449",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "NXY504fXjVew4DfCRdOoawptWW7v0DAw/Tu6SwEkchCCXmajO388Ye616c62h+cLwg1xtEIfYhNrjmEclEpOBg==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 51
  }
 },
 {
  "id": "C10",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:39+00:00",
  "ms": 768,
  "reply": {
   "scenario": {
    "id": "continuity-confused-deputy",
    "title": "A valid permit used for different arguments (ACP, E02)",
    "explains": "Same quorum-signed permit for 100 EUR, but the call asks to transfer 5,000 EUR. The permit covers exactly the authorized parameters, so CONTINUITY refuses it (confused-deputy guard) and the decision is BLOCKED."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_7ac25fb01bc842af9de2d20e",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (action risk high: tool 'continuity-confused-deputy' is unclassified (medium); amount 5000 >= 1000) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (action risk high: tool 'continuity-confused-deputy' is unclassified (medium); amount 5000 >= 1000) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_c8b59a8187614429b017bdc8 (expires 2026-11-03T23:46:39.267551+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "the action names no network destination to screen"
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no schema registered for 'payments/transfer': recording only (observe mode)"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "continuity",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "authority continuity refused the call: PARAMETER_MISMATCH"
    },
    {
     "stage": "coherence",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "all 1 declared proof(s) name one subject, alice (the caller did not name an agent to bind it to)"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "continuity"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "47a86f4623c815465b67e0e3bb3e69007d54821029740278c387a23ba5e916d2",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_7ac25fb01bc842af9de2d20e/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_7ac25fb01bc842af9de2d20e",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "b09b608853395d1d5306fd7c3aa0b99eab6297847f336ce184f8173d5fa5771e",
     "recomputed_digest": "b09b608853395d1d5306fd7c3aa0b99eab6297847f336ce184f8173d5fa5771e",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "Bw9ZqdJO4DIxxSAAKRB56fr8K+pNUZSZE5Tom1VjSzKnr4xcbHZdOMi2qo6ewQdzUGlgl5WYrPa/vuYbMnMnBg==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 50
  }
 },
 {
  "id": "C11",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:46:39+00:00",
  "ms": 126,
  "reply": {
   "scenario": {
    "id": "coherence-mixed",
    "title": "Valid proofs about different agents, stitched into one call (proof coherence)",
    "explains": "Same GOV-IR decision for agent-1, but the autonomy certificate belongs to agent-x. Each proof is valid on its own and passes its own stage; together they describe two actors for one action. COHERENCE refuses the call and the decision is BLOCKED."
   },
   "verdict": "BLOCKED",
   "blocked": true,
   "decision_id": "fd_81788fed3f4b4cbeb2cfcb67",
   "schema_version": 3,
   "chain": [
    {
     "stage": "identity",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "resolved service principal"
    },
    {
     "stage": "intent",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "intent declared by the caller"
    },
    {
     "stage": "policy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "OPA allow"
    },
    {
     "stage": "authorization",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "entitlement active"
    },
    {
     "stage": "risk",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no known attack pattern matched"
    },
    {
     "stage": "trust",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
    },
    {
     "stage": "verification",
     "verdict": "skipped",
     "enforcing": false,
     "ran": false,
     "detail": "no plan submitted, so there was nothing to verify structurally"
    },
    {
     "stage": "actionproof",
     "verdict": "skipped",
     "enforcing": true,
     "ran": false,
     "detail": "no plan submitted"
    },
    {
     "stage": "approval",
     "verdict": "require_approval",
     "enforcing": true,
     "ran": true,
     "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval (first use of this tool with these destinations: a human approves it once) -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_2aa95f1dc8744adeb7a5bba1 (expires 2026-11-03T23:46:39.891150+00:00)"
    },
    {
     "stage": "consensus",
     "verdict": "deferred",
     "enforcing": false,
     "ran": true,
     "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
    },
    {
     "stage": "egress",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no allowlist configured for this tenant: recording only (observe mode). Add a rule to enforce."
    },
    {
     "stage": "toolargs",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no schema registered for 'github/merge': recording only (observe mode)"
    },
    {
     "stage": "artifacts",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "no artifacts or skills named to verify"
    },
    {
     "stage": "governance",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "a GOV-IR program re-executed to ALLOW for exactly this call against a self-presented replica set (not operator-pinned: this check can only refuse, it proves nothing about whose quorum signed)"
    },
    {
     "stage": "autonomy",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "a certificate and lease bind this exact agent configuration to bounded autonomy that covers this call, signed by a self-presented issuer key (not operator-pinned: this check can only refuse)"
    },
    {
     "stage": "coherence",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "proof coherence refused the call: PROOF_SUBJECTS_DIVERGE"
    },
    {
     "stage": "enforcement",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "decision lands on the hosted gateway in this deployment's call path"
    },
    {
     "stage": "execution",
     "verdict": "deny",
     "enforcing": true,
     "ran": true,
     "detail": "execution prevented: an enforcing stage denied this action"
    },
    {
     "stage": "outcome",
     "verdict": "allow",
     "enforcing": true,
     "ran": true,
     "detail": "action lifecycle reached terminal state: halted"
    },
    {
     "stage": "evidence",
     "verdict": "allow",
     "enforcing": false,
     "ran": true,
     "detail": "decision recorded in the evidence store"
    }
   ],
   "enforcing": true,
   "mode": "enforce",
   "blocked_by": [
    "coherence"
   ],
   "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
   "consensus": {
    "mode": "deferred",
    "commitment_sha256": "2e7e671c3e6a8be36eefa9e1db903dba57ee0f552168681f26a1a803b7ab5eb2",
    "pre_verdict": "REQUIRE_APPROVAL",
    "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
    "verify": "/fabric/decisions/fd_81788fed3f4b4cbeb2cfcb67/integrity"
   },
   "evidence": {
    "integrity": {
     "found": true,
     "decision_id": "fd_81788fed3f4b4cbeb2cfcb67",
     "verifiable": true,
     "intact": true,
     "digest_matches": true,
     "schema_version": 3,
     "stored_digest": "d76d3bd8ce6667285f386c24ebd98505c6d44d95a21a2f8f795dfd24e9abe279",
     "recomputed_digest": "d76d3bd8ce6667285f386c24ebd98505c6d44d95a21a2f8f795dfd24e9abe279",
     "record_signature": {
      "signed": true,
      "signature_valid": true,
      "key_id": "8fcdf85b4a675f0e",
      "signature_b64": "sMYxjSMRWrCRtvo81om+JNidl68SakzZcv/uTP3yBQCUbMLd2Hd6+0bsi/zf0C1HFM+j56TK7LQ+KkRbjxYbCQ==",
      "detail": null
     },
     "scitt_statement_id": null,
     "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
     "consensus_anchor": {
      "anchored": false,
      "applicable": true,
      "mode": "deferred",
      "status": "pending",
      "detail": "ordering by the cluster is still pending (attempt 1)"
     }
    },
    "note": "this record's digest was recomputed just now and compared"
   },
   "next": {
    "other_scenarios": "GET /fabric/try",
    "the_evidence_standard": "https://cainstudio.online/fabric/proof",
    "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
   },
   "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
   "rate_limit_remaining": 49
  }
 },
 {
  "id": "C12",
  "http_status": 400,
  "recorded_at": "2026-11-03T22:46:40+00:00",
  "ms": 84,
  "reply": {
   "detail": "unknown scenario. GET /fabric/try lists them."
  }
 },
 {
  "id": "C13",
  "http_status": 401,
  "recorded_at": "2026-11-03T22:46:41+00:00",
  "ms": 45,
  "reply": {
   "detail": "missing X-API-Key: send your key in the X-API-Key header. No key yet? POST /subscribe/free/signup returns one (guide: /docs/quickstart)."
  }
 },
 {
  "id": "C14",
  "http_status": 401,
  "recorded_at": "2026-11-03T22:46:41+00:00",
  "ms": 38,
  "reply": {
   "detail": "missing X-API-Key: this route is tenant-scoped; send the tenant's X-API-Key (or use a 'public-demo' tenant for the shared demo sandbox)"
  }
 }
]