[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:54:51+00:00",
  "ms": 44,
  "reply": {
   "isolation_verified": true,
   "status": "PASS",
   "attacker_skill": "smart_home_hub",
   "victim_skill": "onepassword_vault",
   "victim_memory_region": "mem_region_onepassword",
   "leak_detected": false,
   "victim_control_read_ok": true,
   "checks": [
    {
     "attack": "attacker thread reads with its own valid capability",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_SKILL_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'smart_home_hub' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's de"
    },
    {
     "attack": "attacker claims the victim's skill and thread, with no capability",
     "refused": true,
     "violation": "CAPABILITY_REQUIRED",
     "detail": "READ: a thread capability is required (declared skill names are not trusted)"
    },
    {
     "attack": "attacker presents a forged capability",
     "refused": true,
     "violation": "FORGED_OR_UNKNOWN_CAPABILITY",
     "detail": "READ: the capability is not one this sandbox issued (forged, revoked or expired)"
    },
    {
     "attack": "attacker presents its own capability but declares the victim's identity",
     "refused": true,
     "violation": "IDENTITY_MISMATCH",
     "detail": "READ: the declared skill/thread does not match the capability"
    },
    {
     "attack": "another thread of the victim skill reads the block (thread pinning)",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_THREAD_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 1002 of skill 'onepassword_vault' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's"
    },
    {
     "attack": "raw ciphertext decrypted with the attacker's key (no policy checks at all)",
     "refused": true,
     "violation": "AEAD_REJECTED",
     "detail": "AES-GCM rejected the attacker's key"
    },
    {
     "attack": "control: the victim thread reads its own block",
     "refused": false,
     "detail": "victim read its secret"
    }
   ],
   "halt_latency_ms": 5.53,
   "exception_raised": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'smart_home_hub' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's de",
   "receipt": {
    "receipt_id": "rcpt-iso-0b2a02e56309",
    "event": "BLOCKED_CROSS_SKILL_VIOLATION",
    "source_skill_id": "smart_home_hub",
    "target_skill_id": "onepassword_vault",
    "thread_id": 2002,
    "attempted_action": "EXFILTRATE_MEMORY_mem_region_onepassword",
    "memory_region": "mem_region_onepassword",
    "enforcement": "BLOCKED_FAIL_CLOSED",
    "halt_latency_ms": 5.529917019885033,
    "timestamp": 1793746491.5964904,
    "signature_b64": "5x/YV3x3hUqDA7HVCePFpHvfwdg//W02BQHWczMVOJuochA+sSOBDWH9ffZDsO6/2+msAYwOQuhwOkbiQDsjDQ=="
   },
   "receipt_public_key_b64": "Mb4DAcT/gAZrl/Kt11Aen4E5gEcZG8o8/TxylkqG8ww=",
   "receipt_signed_payload": "canonical JSON (sorted keys, no spaces) of the receipt without signature_b64"
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:54:52+00:00",
  "ms": 0,
  "reply": {
   "isolation_verified": true,
   "status": "PASS",
   "attacker_skill": "smart_home_hub",
   "victim_skill": "onepassword_vault",
   "victim_memory_region": "mem_region_onepassword",
   "leak_detected": false,
   "victim_control_read_ok": true,
   "checks": [
    {
     "attack": "attacker thread reads with its own valid capability",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_SKILL_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'smart_home_hub' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's de"
    },
    {
     "attack": "attacker claims the victim's skill and thread, with no capability",
     "refused": true,
     "violation": "CAPABILITY_REQUIRED",
     "detail": "READ: a thread capability is required (declared skill names are not trusted)"
    },
    {
     "attack": "attacker presents a forged capability",
     "refused": true,
     "violation": "FORGED_OR_UNKNOWN_CAPABILITY",
     "detail": "READ: the capability is not one this sandbox issued (forged, revoked or expired)"
    },
    {
     "attack": "attacker presents its own capability but declares the victim's identity",
     "refused": true,
     "violation": "IDENTITY_MISMATCH",
     "detail": "READ: the declared skill/thread does not match the capability"
    },
    {
     "attack": "another thread of the victim skill reads the block (thread pinning)",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_THREAD_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 1002 of skill 'onepassword_vault' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's"
    },
    {
     "attack": "raw ciphertext decrypted with the attacker's key (no policy checks at all)",
     "refused": true,
     "violation": "AEAD_REJECTED",
     "detail": "AES-GCM rejected the attacker's key"
    },
    {
     "attack": "control: the victim thread reads its own block",
     "refused": false,
     "detail": "victim read its secret"
    }
   ],
   "halt_latency_ms": 5.53,
   "exception_raised": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'smart_home_hub' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's de",
   "receipt": {
    "receipt_id": "rcpt-iso-0b2a02e56309",
    "event": "BLOCKED_CROSS_SKILL_VIOLATION",
    "source_skill_id": "smart_home_hub",
    "target_skill_id": "onepassword_vault",
    "thread_id": 2002,
    "attempted_action": "EXFILTRATE_MEMORY_mem_region_onepassword",
    "memory_region": "mem_region_onepassword",
    "enforcement": "BLOCKED_FAIL_CLOSED",
    "halt_latency_ms": 5.529917019885033,
    "timestamp": 1793746491.5964904,
    "signature_b64": "5x/YV3x3hUqDA7HVCePFpHvfwdg//W02BQHWczMVOJuochA+sSOBDWH9ffZDsO6/2+msAYwOQuhwOkbiQDsjDQ=="
   },
   "receipt_public_key_b64": "Mb4DAcT/gAZrl/Kt11Aen4E5gEcZG8o8/TxylkqG8ww=",
   "receipt_signed_payload": "canonical JSON (sorted keys, no spaces) of the receipt without signature_b64"
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:54:52+00:00",
  "ms": 0,
  "reply": {
   "isolation_verified": true,
   "status": "PASS",
   "attacker_skill": "smart_home_hub",
   "victim_skill": "onepassword_vault",
   "victim_memory_region": "mem_region_onepassword",
   "leak_detected": false,
   "victim_control_read_ok": true,
   "checks": [
    {
     "attack": "attacker thread reads with its own valid capability",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_SKILL_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'smart_home_hub' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's de"
    },
    {
     "attack": "attacker claims the victim's skill and thread, with no capability",
     "refused": true,
     "violation": "CAPABILITY_REQUIRED",
     "detail": "READ: a thread capability is required (declared skill names are not trusted)"
    },
    {
     "attack": "attacker presents a forged capability",
     "refused": true,
     "violation": "FORGED_OR_UNKNOWN_CAPABILITY",
     "detail": "READ: the capability is not one this sandbox issued (forged, revoked or expired)"
    },
    {
     "attack": "attacker presents its own capability but declares the victim's identity",
     "refused": true,
     "violation": "IDENTITY_MISMATCH",
     "detail": "READ: the declared skill/thread does not match the capability"
    },
    {
     "attack": "another thread of the victim skill reads the block (thread pinning)",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_THREAD_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 1002 of skill 'onepassword_vault' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's"
    },
    {
     "attack": "raw ciphertext decrypted with the attacker's key (no policy checks at all)",
     "refused": true,
     "violation": "AEAD_REJECTED",
     "detail": "AES-GCM rejected the attacker's key"
    },
    {
     "attack": "control: the victim thread reads its own block",
     "refused": false,
     "detail": "victim read its secret"
    }
   ],
   "halt_latency_ms": 5.53,
   "exception_raised": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'smart_home_hub' cannot decrypt memory segment 'mem_region_onepassword' owned by thread 1001 of 'onepassword_vault' (AES-GCM authentication failed under the reader's de",
   "receipt": {
    "receipt_id": "rcpt-iso-0b2a02e56309",
    "event": "BLOCKED_CROSS_SKILL_VIOLATION",
    "source_skill_id": "smart_home_hub",
    "target_skill_id": "onepassword_vault",
    "thread_id": 2002,
    "attempted_action": "EXFILTRATE_MEMORY_mem_region_onepassword",
    "memory_region": "mem_region_onepassword",
    "enforcement": "BLOCKED_FAIL_CLOSED",
    "halt_latency_ms": 5.529917019885033,
    "timestamp": 1793746491.5964904,
    "signature_b64": "5x/YV3x3hUqDA7HVCePFpHvfwdg//W02BQHWczMVOJuochA+sSOBDWH9ffZDsO6/2+msAYwOQuhwOkbiQDsjDQ=="
   },
   "receipt_public_key_b64": "Mb4DAcT/gAZrl/Kt11Aen4E5gEcZG8o8/TxylkqG8ww=",
   "receipt_signed_payload": "canonical JSON (sorted keys, no spaces) of the receipt without signature_b64"
  }
 },
 {
  "id": "C04",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:54:53+00:00",
  "ms": 35,
  "reply": {
   "isolation_verified": true,
   "status": "PASS",
   "attacker_skill": "onepassword_vault",
   "victim_skill": "smart_home_hub",
   "victim_memory_region": "mem_region_smart_home",
   "leak_detected": false,
   "victim_control_read_ok": true,
   "checks": [
    {
     "attack": "attacker thread reads with its own valid capability",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_SKILL_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'onepassword_vault' cannot decrypt memory segment 'mem_region_smart_home' owned by thread 1001 of 'smart_home_hub' (AES-GCM authentication failed under the reader's der"
    },
    {
     "attack": "attacker claims the victim's skill and thread, with no capability",
     "refused": true,
     "violation": "CAPABILITY_REQUIRED",
     "detail": "READ: a thread capability is required (declared skill names are not trusted)"
    },
    {
     "attack": "attacker presents a forged capability",
     "refused": true,
     "violation": "FORGED_OR_UNKNOWN_CAPABILITY",
     "detail": "READ: the capability is not one this sandbox issued (forged, revoked or expired)"
    },
    {
     "attack": "attacker presents its own capability but declares the victim's identity",
     "refused": true,
     "violation": "IDENTITY_MISMATCH",
     "detail": "READ: the declared skill/thread does not match the capability"
    },
    {
     "attack": "another thread of the victim skill reads the block (thread pinning)",
     "refused": true,
     "violation": "UNAUTHORIZED_CROSS_THREAD_READ",
     "detail": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 1002 of skill 'smart_home_hub' cannot decrypt memory segment 'mem_region_smart_home' owned by thread 1001 of 'smart_home_hub' (AES-GCM authentication failed under the reader's derive"
    },
    {
     "attack": "raw ciphertext decrypted with the attacker's key (no policy checks at all)",
     "refused": true,
     "violation": "AEAD_REJECTED",
     "detail": "AES-GCM rejected the attacker's key"
    },
    {
     "attack": "control: the victim thread reads its own block",
     "refused": false,
     "detail": "victim read its secret"
    }
   ],
   "halt_latency_ms": 1.502,
   "exception_raised": "CRYPTOGRAPHIC_ISOLATION_FAULT: thread 2002 of skill 'onepassword_vault' cannot decrypt memory segment 'mem_region_smart_home' owned by thread 1001 of 'smart_home_hub' (AES-GCM authentication failed under the reader's der",
   "receipt": {
    "receipt_id": "rcpt-iso-633da02962af",
    "event": "BLOCKED_CROSS_SKILL_VIOLATION",
    "source_skill_id": "onepassword_vault",
    "target_skill_id": "smart_home_hub",
    "thread_id": 2002,
    "attempted_action": "EXFILTRATE_MEMORY_mem_region_smart_home",
    "memory_region": "mem_region_smart_home",
    "enforcement": "BLOCKED_FAIL_CLOSED",
    "halt_latency_ms": 1.5017660334706306,
    "timestamp": 1793746493.13446,
    "signature_b64": "m+tyPvJ/KtJ4sP+Ilf2XmGJTt5KrjZEvKiyy6loM1D2TnmSNHL1sCFGN9vD8sve0HxacjSrg6R7iykbwJKT3Dw=="
   },
   "receipt_public_key_b64": "6Fspxc/uWxzCQH39+azuNgJtE76MaRnhPgAAdc90oAE=",
   "receipt_signed_payload": "canonical JSON (sorted keys, no spaces) of the receipt without signature_b64"
  }
 }
]