{ "schema_version": "1", "started_at": "2026-09-30T22:20:16.808735+00:00", "execution_mode": "actual_openshell", "openshell_source_pin": "6648bd0c290efbc41ba131ee9831ee45cd431f94", "synthetic_only": true, "operator_approvals": "scripted host fixture, not a human approval observation", "claims": [ "Actual sandbox exec and upstream-signed extension JWTs; no fixture-issued JWTs", "HTTPS synthetic purchases only; no real financial effects", "Reference evaluator decisions remain non-authoritative outside this demo", "Native policy restricts host/path/binary; ControlSpec adds business conditions", "ControlSpec target additionally validates signed tickets", "Supervisor image adds the synthetic root CA; NVIDIA executable unchanged" ], "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f", "sandbox_name": "csrt-20260930-8e3f", "action_prefix": "runtime-43e46fd5e9", "observations": [ { "scenario": "allowed_42", "timestamp": "2026-09-30T22:20:19.592244+00:00", "action_id": "runtime-43e46fd5e9-allowed", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-allowed\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.151, "stdout": "HTTP/1.1 200 OK\ndate: Wed, 30 Sep 2026 22:20:18 GMT\nserver: uvicorn\ncontent-length: 617\ncontent-type: application/json\n\n{\"schema_version\":\"1\",\"synthetic_only\":true,\"status\":\"committed\",\"action_id\":\"runtime-43e46fd5e9-allowed\",\"scope\":{\"gateway_id\":\"controlspec-runtime-18a317b6341a\",\"sandbox_id\":\"cf9877e9-b1d4-4c13-b919-f222cc9dae1f\"},\"request_digest\":\"sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087\",\"nonce\":\"232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78\",\"amount_minor\":4200,\"committed_at\":\"2026-09-30T22:20:19.569888Z\",\"evidence_id\":\"sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54\",\"evidence_mac\":\"7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41\"}", "stderr": "", "http": { "status": 200, "headers": { "date": "Wed, 30 Sep 2026 22:20:18 GMT", "server": "uvicorn", "content-length": "617", "content-type": "application/json" }, "body": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "runtime-43e46fd5e9-allowed", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41" } }, "target_before": { "observed_at": "2026-09-30T22:20:19.441310+00:00", "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "run_purchases": [] }, "target_after": { "observed_at": "2026-09-30T22:20:19.592031+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 1, "target_spend_delta_minor": 4200, "expected_status": 200, "expected_purchase_delta": 1, "assertions_passed": true, "receipt_supplied": true, "completion_verified": true }, { "scenario": "replay_same_action", "timestamp": "2026-09-30T22:20:19.759259+00:00", "action_id": "runtime-43e46fd5e9-allowed", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-allowed\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.133, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 309\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"action_already_reserved\"}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "309", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "action_already_reserved" } }, "target_before": { "observed_at": "2026-09-30T22:20:19.625909+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:19.759183+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "action_already_reserved", "denial_attribution_verified": true, "assertions_passed": true }, { "scenario": "over_limit_without_approval", "timestamp": "2026-09-30T22:20:19.889795+00:00", "action_id": "runtime-43e46fd5e9-over", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-over\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.111, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 303\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"approval_required\"}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "303", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "approval_required" } }, "target_before": { "observed_at": "2026-09-30T22:20:19.778378+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:19.889727+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "approval_required", "denial_attribution_verified": true, "assertions_passed": true }, { "scenario": "exact_before_approval", "timestamp": "2026-09-30T22:20:20.023227+00:00", "action_id": "runtime-43e46fd5e9-exact", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-exact\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.113, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 303\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"approval_required\"}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "303", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "approval_required" } }, "target_before": { "observed_at": "2026-09-30T22:20:19.910400+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:20.023151+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "approval_required", "denial_attribution_verified": true, "assertions_passed": true }, { "scenario": "exact_after_approval", "timestamp": "2026-09-30T22:20:20.242311+00:00", "action_id": "runtime-43e46fd5e9-exact", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-exact\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.132, "stdout": "HTTP/1.1 200 OK\ndate: Wed, 30 Sep 2026 22:20:19 GMT\nserver: uvicorn\ncontent-length: 616\ncontent-type: application/json\n\n{\"schema_version\":\"1\",\"synthetic_only\":true,\"status\":\"committed\",\"action_id\":\"runtime-43e46fd5e9-exact\",\"scope\":{\"gateway_id\":\"controlspec-runtime-18a317b6341a\",\"sandbox_id\":\"cf9877e9-b1d4-4c13-b919-f222cc9dae1f\"},\"request_digest\":\"sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c\",\"nonce\":\"dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93\",\"amount_minor\":14200,\"committed_at\":\"2026-09-30T22:20:20.218781Z\",\"evidence_id\":\"sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59\",\"evidence_mac\":\"2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973\"}", "stderr": "", "http": { "status": 200, "headers": { "date": "Wed, 30 Sep 2026 22:20:19 GMT", "server": "uvicorn", "content-length": "616", "content-type": "application/json" }, "body": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "runtime-43e46fd5e9-exact", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973" } }, "target_before": { "observed_at": "2026-09-30T22:20:20.110721+00:00", "purchase_count": 2, "spent_minor": 8400, "balance_minor": 991600, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:20.242234+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 1, "target_spend_delta_minor": 14200, "expected_status": 200, "expected_purchase_delta": 1, "assertions_passed": true, "receipt_supplied": true, "completion_verified": true }, { "scenario": "changed_before_approval", "timestamp": "2026-09-30T22:20:20.442482+00:00", "action_id": "runtime-43e46fd5e9-changed", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-changed\",\"amount_minor\":14200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.141, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 303\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"approval_required\"}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "303", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "approval_required" } }, "target_before": { "observed_at": "2026-09-30T22:20:20.301446+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:20.442427+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "approval_required", "denial_attribution_verified": true, "assertions_passed": true }, { "scenario": "changed_amount_after_approval", "timestamp": "2026-09-30T22:20:20.650230+00:00", "action_id": "runtime-43e46fd5e9-changed", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-changed\",\"amount_minor\":14300,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.113, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 300\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"action_changed\"}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "300", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "action_changed" } }, "target_before": { "observed_at": "2026-09-30T22:20:20.537115+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:20.650114+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "action_changed", "denial_attribution_verified": true, "assertions_passed": true }, { "scenario": "recurring_purchase", "timestamp": "2026-09-30T22:20:20.866743+00:00", "action_id": "runtime-43e46fd5e9-recurring", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-recurring\",\"amount_minor\":999,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":true}" ], "exit_code": 0, "elapsed_seconds": 0.158, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 299\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request rejected by configured middleware\",\"error\":\"middleware_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"middleware\":\"controlspec-purchases\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"reason_code\":\"policy_denied\"}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "299", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "Request rejected by configured middleware", "error": "middleware_denied", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "middleware": "controlspec-purchases", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081, "reason_code": "policy_denied" } }, "target_before": { "observed_at": "2026-09-30T22:20:20.708353+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:20.866652+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_denied", "expected_reason_code": "policy_denied", "denial_attribution_verified": true, "assertions_passed": true }, { "scenario": "missing_receipt", "timestamp": "2026-09-30T22:20:21.047193+00:00", "action_id": "runtime-43e46fd5e9-missing", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-missing\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.131, "stdout": "HTTP/1.1 200 OK\ndate: Wed, 30 Sep 2026 22:20:20 GMT\nserver: uvicorn\ncontent-length: 617\ncontent-type: application/json\n\n{\"schema_version\":\"1\",\"synthetic_only\":true,\"status\":\"committed\",\"action_id\":\"runtime-43e46fd5e9-missing\",\"scope\":{\"gateway_id\":\"controlspec-runtime-18a317b6341a\",\"sandbox_id\":\"cf9877e9-b1d4-4c13-b919-f222cc9dae1f\"},\"request_digest\":\"sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766\",\"nonce\":\"4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd\",\"amount_minor\":4200,\"committed_at\":\"2026-09-30T22:20:21.016488Z\",\"evidence_id\":\"sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5\",\"evidence_mac\":\"272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5\"}", "stderr": "", "http": { "status": 200, "headers": { "date": "Wed, 30 Sep 2026 22:20:20 GMT", "server": "uvicorn", "content-length": "617", "content-type": "application/json" }, "body": { "schema_version": "1", "synthetic_only": true, "status": "committed", "action_id": "runtime-43e46fd5e9-missing", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5" } }, "target_before": { "observed_at": "2026-09-30T22:20:20.916310+00:00", "purchase_count": 3, "spent_minor": 22600, "balance_minor": 977400, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:21.047105+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 1, "target_spend_delta_minor": 4200, "expected_status": 200, "expected_purchase_delta": 1, "assertions_passed": true, "receipt_supplied": false, "completion_verified": false }, { "scenario": "alternate_path", "timestamp": "2026-09-30T22:20:21.267158+00:00", "action_id": "runtime-43e46fd5e9-path", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/state" ], "exit_code": 0, "elapsed_seconds": 0.096, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 422\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"GET /state not permitted by policy\",\"error\":\"policy_denied\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"GET\",\"next_steps\":[],\"path\":\"/state\",\"policy\":\"synthetic-purchase\",\"port\":18081,\"protocol\":\"rest\",\"rule\":\"GET /state\",\"rule_missing\":{\"binary\":\"/usr/bin/curl\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"GET\",\"path\":\"/state\",\"port\":18081,\"type\":\"rest_allow\"}}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "422", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "GET /state not permitted by policy", "error": "policy_denied", "host": "host.openshell.internal", "layer": "l7", "method": "GET", "next_steps": [], "path": "/state", "policy": "synthetic-purchase", "port": 18081, "protocol": "rest", "rule": "GET /state", "rule_missing": { "binary": "/usr/bin/curl", "host": "host.openshell.internal", "layer": "l7", "method": "GET", "path": "/state", "port": 18081, "type": "rest_allow" } } }, "target_before": { "observed_at": "2026-09-30T22:20:21.171399+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:21.267063+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "expected_error": "policy_denied", "expected_reason_code": null, "denial_attribution_verified": true, "assertions_passed": true }, { "scenario": "direct_ip_attempt", "timestamp": "2026-09-30T22:20:21.357219+00:00", "action_id": "runtime-43e46fd5e9-ip", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://172.30.0.2:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-ip\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 7, "elapsed_seconds": 0.04, "stdout": "", "stderr": "curl: (7) Failed to connect to 172.30.0.2 port 18081 after 0 ms: Couldn't connect to server\n", "http": { "status": null, "headers": {}, "body": null }, "target_before": { "observed_at": "2026-09-30T22:20:21.317143+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:21.357187+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "policy_attribution": "requires corroborating supervisor log", "assertions_passed": true }, { "scenario": "gateway_control_plane_attempt", "timestamp": "2026-09-30T22:20:21.473810+00:00", "action_id": "runtime-43e46fd5e9-gateway", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "http://172.30.0.2:17670/.well-known/openid-configuration" ], "exit_code": 7, "elapsed_seconds": 0.046, "stdout": "", "stderr": "curl: (7) Failed to connect to 172.30.0.2 port 17670 after 0 ms: Couldn't connect to server\n", "http": { "status": null, "headers": {}, "body": null }, "target_before": { "observed_at": "2026-09-30T22:20:21.427360+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:21.473777+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "policy_attribution": "requires corroborating supervisor log", "assertions_passed": true }, { "scenario": "middleware_control_plane_attempt", "timestamp": "2026-09-30T22:20:21.569241+00:00", "action_id": "runtime-43e46fd5e9-middleware", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://172.30.0.2:50051/" ], "exit_code": 7, "elapsed_seconds": 0.045, "stdout": "", "stderr": "curl: (7) Failed to connect to 172.30.0.2 port 50051 after 0 ms: Couldn't connect to server\n", "http": { "status": null, "headers": {}, "body": null }, "target_before": { "observed_at": "2026-09-30T22:20:21.524601+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:21.569161+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": null, "expected_purchase_delta": 0, "policy_attribution": "requires corroborating supervisor log", "assertions_passed": true }, { "scenario": "middleware_outage", "timestamp": "2026-09-30T22:20:21.936915+00:00", "action_id": "runtime-43e46fd5e9-outage", "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "sandbox", "exec", "--name", "csrt-20260930-8e3f", "--no-tty", "--no-login-shell", "--", "/usr/bin/curl", "-sS", "-i", "--max-time", "12", "https://host.openshell.internal:18081/purchases", "--header", "content-type: application/json", "--data", "{\"schema_version\":\"1\",\"action_id\":\"runtime-43e46fd5e9-outage\",\"amount_minor\":4200,\"currency\":\"USD\",\"merchant\":\"demo-store\",\"recurring\":false}" ], "exit_code": 0, "elapsed_seconds": 0.093, "stdout": "HTTP/1.1 403 Forbidden\nContent-Type: application/json\nContent-Length: 246\nX-OpenShell-Policy: synthetic-purchase\nConnection: close\n\n{\"binary\":\"/usr/bin/curl\",\"detail\":\"Request could not be processed by configured middleware\",\"error\":\"middleware_failed\",\"host\":\"host.openshell.internal\",\"layer\":\"l7\",\"method\":\"POST\",\"path\":\"/purchases\",\"policy\":\"synthetic-purchase\",\"port\":18081}", "stderr": "", "http": { "status": 403, "headers": { "content-type": "application/json", "content-length": "246", "x-openshell-policy": "synthetic-purchase", "connection": "close" }, "body": { "binary": "/usr/bin/curl", "detail": "Request could not be processed by configured middleware", "error": "middleware_failed", "host": "host.openshell.internal", "layer": "l7", "method": "POST", "path": "/purchases", "policy": "synthetic-purchase", "port": 18081 } }, "target_before": { "observed_at": "2026-09-30T22:20:21.844026+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_after": { "observed_at": "2026-09-30T22:20:21.936828+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] }, "target_purchase_delta": 0, "target_spend_delta_minor": 0, "expected_status": 403, "expected_purchase_delta": 0, "expected_error": "middleware_failed", "expected_reason_code": null, "denial_attribution_verified": true, "assertions_passed": true } ], "status": "passed", "middleware_stopped": true, "source": { "revision": "98f91d119db5f61c18f5743aee1802802ce030d2", "dirty": false }, "provenance_commands": { "revision": { "command": [ "git", "-c", "safe.directory=/repo", "-C", "/repo", "rev-parse", "HEAD" ], "exit_code": 0, "stdout": "98f91d119db5f61c18f5743aee1802802ce030d2\n", "stderr": "" }, "worktree_status": { "command": [ "git", "-c", "safe.directory=/repo", "-C", "/repo", "status", "--porcelain" ], "exit_code": 0, "stdout": "", "stderr": "" }, "openshell_version": { "command": [ "openshell", "--version" ], "exit_code": 0, "stdout": "openshell 0.1.2\n", "stderr": "" }, "effective_policy": { "command": [ "openshell", "--gateway-endpoint", "http://127.0.0.1:17670", "policy", "get", "csrt-20260930-8e3f", "--full", "--output", "json" ], "exit_code": 0, "stdout": "{\n \"active_version\": 2,\n \"config_revision\": 16511938764146938059,\n \"hash\": \"672621067d5e56ef6db856be8c756d9a1529ef66327428263026eea079f779fd\",\n \"policy\": {\n \"filesystem_policy\": {\n \"include_workdir\": true,\n \"read_only\": [\n \"/usr\",\n \"/lib\",\n \"/etc\",\n \"/var/log\",\n \"/proc\",\n \"/dev/urandom\"\n ],\n \"read_write\": [\n \"/tmp\",\n \"/dev/null\"\n ]\n },\n \"network_middlewares\": {\n \"controlspec-purchases\": {\n \"config\": {\n \"profile\": \"synthetic-purchases-v1\"\n },\n \"endpoints\": {\n \"include\": [\n \"host.openshell.internal\"\n ]\n },\n \"middleware\": \"controlspec-demo\",\n \"name\": \"ControlSpec synthetic purchases\",\n \"on_error\": \"fail_closed\",\n \"order\": 100\n }\n },\n \"network_policies\": {\n \"synthetic-purchase\": {\n \"binaries\": [\n {\n \"path\": \"/usr/bin/curl\"\n }\n ],\n \"endpoints\": [\n {\n \"enforcement\": \"enforce\",\n \"host\": \"host.openshell.internal\",\n \"port\": 18081,\n \"protocol\": \"rest\",\n \"rules\": [\n {\n \"allow\": {\n \"method\": \"POST\",\n \"path\": \"/purchases\"\n }\n }\n ]\n }\n ],\n \"name\": \"Synthetic purchases\"\n }\n },\n \"version\": 1\n },\n \"policy_source\": \"sandbox\",\n \"sandbox\": \"csrt-20260930-8e3f\",\n \"scope\": \"sandbox\",\n \"status\": \"effective\",\n \"version\": 2\n}\n", "stderr": "" } }, "effective_policy": { "active_version": 2, "config_revision": 16511938764146938059, "hash": "672621067d5e56ef6db856be8c756d9a1529ef66327428263026eea079f779fd", "policy": { "filesystem_policy": { "include_workdir": true, "read_only": [ "/usr", "/lib", "/etc", "/var/log", "/proc", "/dev/urandom" ], "read_write": [ "/tmp", "/dev/null" ] }, "network_middlewares": { "controlspec-purchases": { "config": { "profile": "synthetic-purchases-v1" }, "endpoints": { "include": [ "host.openshell.internal" ] }, "middleware": "controlspec-demo", "name": "ControlSpec synthetic purchases", "on_error": "fail_closed", "order": 100 } }, "network_policies": { "synthetic-purchase": { "binaries": [ { "path": "/usr/bin/curl" } ], "endpoints": [ { "enforcement": "enforce", "host": "host.openshell.internal", "port": 18081, "protocol": "rest", "rules": [ { "allow": { "method": "POST", "path": "/purchases" } } ] } ], "name": "Synthetic purchases" } }, "version": 1 }, "policy_source": "sandbox", "sandbox": "csrt-20260930-8e3f", "scope": "sandbox", "status": "effective", "version": 2 }, "initial_target_state": { "observed_at": "2026-09-30T22:20:19.430894+00:00", "purchase_count": 1, "spent_minor": 4200, "balance_minor": 995800, "run_purchases": [] }, "recorded_at": "2026-09-30T22:20:21.988213+00:00", "decision_ledger_events": [ { "sequence": 3, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-bbfdb5b3dafff1f79ec8dfb4aa4d6990bd928aa800d671b70b7dbdd7776331e4", "evaluated_at": "2026-09-30T22:20:19.538501Z", "expires_at": "2026-09-30T22:22:19.538501Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:19.538501Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-allowed", "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.538501Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:8d539f239bf87be0ba4262292bcc43d3ca78a77ba14d51a0cba977f9d7d230c7" } }, "previous_hash": "sha256:638000af98a3995cf78eae8ee6fb432a223f0ec0a762408402d9ad32cf524e9a", "event_hash": "sha256:92a1254748e49114b5b584b3b78b7df5fe357239a30151aef55f47a54d80037a" }, { "sequence": 4, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-bbfdb5b3dafff1f79ec8dfb4aa4d6990bd928aa800d671b70b7dbdd7776331e4", "evaluated_at": "2026-09-30T22:20:19.538501Z", "expires_at": "2026-09-30T22:22:19.538501Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:19.538501Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-allowed", "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.538501Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "reservation": { "action_id": "runtime-43e46fd5e9-allowed", "decision_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "expires_at": "2026-09-30T22:20:49.538501Z", "issued_at": "2026-09-30T22:20:19.538501Z", "method": "POST", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" } }, "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:8d539f239bf87be0ba4262292bcc43d3ca78a77ba14d51a0cba977f9d7d230c7" } }, "previous_hash": "sha256:92a1254748e49114b5b584b3b78b7df5fe357239a30151aef55f47a54d80037a", "event_hash": "sha256:830d075de23ee9564409c7fc4fb6cf2698ac1d20054aaa652fc16de4f10d5aaf" }, { "sequence": 5, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "reconciliation", "payload": { "at": "2026-09-30T22:20:19.602493Z", "receipt": { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:830d075de23ee9564409c7fc4fb6cf2698ac1d20054aaa652fc16de4f10d5aaf", "event_hash": "sha256:b6ae40f25c9bdd658962b1b96dda170394b654276a85a129bd5c24224d60510e" }, { "sequence": 6, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-bce37c268be64df18860a983dadae54699dab198f61b365294a2c015577a3cfa", "evaluated_at": "2026-09-30T22:20:19.714667Z", "expires_at": "2026-09-30T22:22:19.714667Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:84b4598b7a7460b122c40a04fbe87eca85eadb5a7cde9b0bdc6399b1b2d7069d", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:19.538501Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:40014ad23e42331f750a78550bc1821d3c3e1553b25d48cb7621ed9ca0640c41", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-allowed", "intent_digest": "sha256:557801ef2f4e2ce3e1564619c8e770381a256f9dbff12527b19bba5d19856425", "intent_id": "runtime-43e46fd5e9-allowed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.538501Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "reservation": { "action_id": "runtime-43e46fd5e9-allowed", "decision_digest": "sha256:42b2ee138b47d112c06082add322777efa9281aa4589dda0293345c1d793f612", "expires_at": "2026-09-30T22:20:49.538501Z", "issued_at": "2026-09-30T22:20:19.538501Z", "method": "POST", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" } }, "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:6e2fde7237f145c2e615bbefcc079c6fa6ad759e7b0589a8055e7c7e88b44b58" } }, "previous_hash": "sha256:b6ae40f25c9bdd658962b1b96dda170394b654276a85a129bd5c24224d60510e", "event_hash": "sha256:cc411560fff5edc775b348137bd55273950bb459c0cd0e207e4263db802ca2e4" }, { "sequence": 7, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-allowed", "kind": "denied", "payload": { "at": "2026-09-30T22:20:19.714667Z", "reason": "action_already_reserved" }, "previous_hash": "sha256:cc411560fff5edc775b348137bd55273950bb459c0cd0e207e4263db802ca2e4", "event_hash": "sha256:6464388293338e67ca1ea53abcb1bc43f27ae65520fb20003e7cd224fa4232cc" }, { "sequence": 8, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-over", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:abb83373b6fd186d3eb0d8d44953a2fd7bed9adf5ca7ff32ddbb86e1f6638e4e", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:3d65cac420e764d32be518f2ec679e40c48b7a613db949abafc1ca348a06fcf4", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-1e2582a8186babbe5007f07fbe1400dcd4c17d93a65cc4026fb24070066eb30c", "evaluated_at": "2026-09-30T22:20:19.856093Z", "expires_at": "2026-09-30T22:22:19.856093Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:3d65cac420e764d32be518f2ec679e40c48b7a613db949abafc1ca348a06fcf4", "intent_id": "runtime-43e46fd5e9-over", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:95b45405d6f9ceb24e8609489c9e82ef3473cf5376a64dc03cfac93ca9eba56b", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:20:19.856093Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-over", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:151318884753f4ca57610eba62ec6929b9b0db717f31c4c6d9ff5cccdd26c433", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:abb83373b6fd186d3eb0d8d44953a2fd7bed9adf5ca7ff32ddbb86e1f6638e4e", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-over", "intent_digest": "sha256:3d65cac420e764d32be518f2ec679e40c48b7a613db949abafc1ca348a06fcf4", "intent_id": "runtime-43e46fd5e9-over", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.856093Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-over", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:151318884753f4ca57610eba62ec6929b9b0db717f31c4c6d9ff5cccdd26c433", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:40fa6fc73411b2aec7a99120bf4a9b4e32d0da84bdea311499d66431b4dd46a5" } }, "previous_hash": "sha256:6464388293338e67ca1ea53abcb1bc43f27ae65520fb20003e7cd224fa4232cc", "event_hash": "sha256:386b90456ea8c40e42de82d54a6ac5219ee7b11b34f0e8c92c2910742feb8356" }, { "sequence": 9, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-over", "kind": "denied", "payload": { "at": "2026-09-30T22:20:19.856093Z", "reason": "approval_required" }, "previous_hash": "sha256:386b90456ea8c40e42de82d54a6ac5219ee7b11b34f0e8c92c2910742feb8356", "event_hash": "sha256:b5af6f2a297bd409fd9c7ef35dafdb98c0fead94cca0249ad4156d7b937d844b" }, { "sequence": 10, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "evaluated_at": "2026-09-30T22:20:19.982339Z", "expires_at": "2026-09-30T22:22:19.982339Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:6c7b888dc98bda37811b18e28cfa2bfe4c7494fd2f373563d960c5d0fc7bedee" } }, "previous_hash": "sha256:b5af6f2a297bd409fd9c7ef35dafdb98c0fead94cca0249ad4156d7b937d844b", "event_hash": "sha256:37d644384b9b2b61ac40bc9d88f888c436d09d2d1a80a3eb7651c2a6c9b7d7de" }, { "sequence": 11, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "denied", "payload": { "at": "2026-09-30T22:20:19.982339Z", "reason": "approval_required" }, "previous_hash": "sha256:37d644384b9b2b61ac40bc9d88f888c436d09d2d1a80a3eb7651c2a6c9b7d7de", "event_hash": "sha256:ffeabe9ecfe3b59ea0c6d8949e00c1d480428cd4c8b420bcdca4220009653d8c" }, { "sequence": 12, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z" } ], "basis": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "evaluated_at": "2026-09-30T22:20:19.982339Z", "expires_at": "2026-09-30T22:22:19.982339Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:6c7b888dc98bda37811b18e28cfa2bfe4c7494fd2f373563d960c5d0fc7bedee" } }, "previous_hash": "sha256:ffeabe9ecfe3b59ea0c6d8949e00c1d480428cd4c8b420bcdca4220009653d8c", "event_hash": "sha256:118f854a6dc980fec50b120967a5584b438fdf9a1b2a92de48c9cd5fdacc98dc" }, { "sequence": 13, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z" } ], "basis": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-9508b27b6213ec5cf8e5bb7e6edc777124c48477652f53ead04ab2d5a7d996b3", "evaluated_at": "2026-09-30T22:20:20.045969Z", "expires_at": "2026-09-30T22:22:20.045969Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a9b342279cf926c788242c15bcb28cdbb00eb2a75f636fad3829df1dc5463f6f", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:0d7677cda7f932900ea1fcfb10d6110cef91b1275df738fb929ce98f02ab5fd4", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:7cbaf2222dc8a2ae9082c7c5e326967429c2a85bad46a771ab55612520e4c9eb" } }, "previous_hash": "sha256:118f854a6dc980fec50b120967a5584b438fdf9a1b2a92de48c9cd5fdacc98dc", "event_hash": "sha256:2e6a3202eb0f4147fa1d511a768c3a4d992d27d65f92524aa8acf0c11e68cf3a" }, { "sequence": 14, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z" } ], "basis": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-4db332f110d008a0a1a940a97a7258d636db4b464034fadcfd0fc83e34399228", "evaluated_at": "2026-09-30T22:20:20.188248Z", "expires_at": "2026-09-30T22:22:20.188248Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:947da55a7fa6ef21aa21722e9ec59234cb94d9639ff1322d5af2f53f0e3bf7d2", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:0d7677cda7f932900ea1fcfb10d6110cef91b1275df738fb929ce98f02ab5fd4", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:49e7166378a3e879ee98c9807e0c6af5b88ab928359fdea1c4efcbce01cc38c2" } }, "previous_hash": "sha256:2e6a3202eb0f4147fa1d511a768c3a4d992d27d65f92524aa8acf0c11e68cf3a", "event_hash": "sha256:1be4fcbef108425a497214f3fdd188130d678ebca36a5533e4dd7198072507f1" }, { "sequence": 15, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-0087c7c4e6a1af23529d6e28e3339d10", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "fact_digest": "sha256:e3c1974d7a2e36cf7b8f70e1fa02cdf1a16f552d95129f88adc6e9cb65df991b", "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.045969Z", "valid_until": "2026-09-30T22:22:19.982339Z" } ], "basis": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-4db332f110d008a0a1a940a97a7258d636db4b464034fadcfd0fc83e34399228", "evaluated_at": "2026-09-30T22:20:20.188248Z", "expires_at": "2026-09-30T22:22:20.188248Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:947da55a7fa6ef21aa21722e9ec59234cb94d9639ff1322d5af2f53f0e3bf7d2", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:19.982339Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "intent_id": "runtime-43e46fd5e9-exact", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:19.982339Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "reservation": { "action_id": "runtime-43e46fd5e9-exact", "decision_digest": "sha256:947da55a7fa6ef21aa21722e9ec59234cb94d9639ff1322d5af2f53f0e3bf7d2", "expires_at": "2026-09-30T22:20:50.188248Z", "issued_at": "2026-09-30T22:20:20.188248Z", "method": "POST", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" } }, "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:0d7677cda7f932900ea1fcfb10d6110cef91b1275df738fb929ce98f02ab5fd4", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:49e7166378a3e879ee98c9807e0c6af5b88ab928359fdea1c4efcbce01cc38c2" } }, "previous_hash": "sha256:1be4fcbef108425a497214f3fdd188130d678ebca36a5533e4dd7198072507f1", "event_hash": "sha256:c85b2771c02055baedf4665b59dce3b2b5f696dfe5395123bcdd95197f1992e2" }, { "sequence": 16, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-exact", "kind": "reconciliation", "payload": { "at": "2026-09-30T22:20:20.270331Z", "receipt": { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, "verified": true }, "previous_hash": "sha256:c85b2771c02055baedf4665b59dce3b2b5f696dfe5395123bcdd95197f1992e2", "event_hash": "sha256:2c0e16013e94284bd60a5f9b7fdcc4843b56c6e8f798a2ba7f688d5727560b57" }, { "sequence": 17, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "evaluated_at": "2026-09-30T22:20:20.386417Z", "expires_at": "2026-09-30T22:22:20.386417Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:20:20.386417Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.386417Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:d3a18ad1455a3df5b6062ca6cad8552044e28fa54b6e6c4cbbbad6257dc294ed" } }, "previous_hash": "sha256:2c0e16013e94284bd60a5f9b7fdcc4843b56c6e8f798a2ba7f688d5727560b57", "event_hash": "sha256:869ba57ecfbe209d891adc09ceccf05ba91a5e6240d8718bc632545056bd3a62" }, { "sequence": 18, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "denied", "payload": { "at": "2026-09-30T22:20:20.386417Z", "reason": "approval_required" }, "previous_hash": "sha256:869ba57ecfbe209d891adc09ceccf05ba91a5e6240d8718bc632545056bd3a62", "event_hash": "sha256:0fcb017f6c5025fca5043896d8f128d8c1b290e47d6da322b6b1003eae262709" }, { "sequence": 19, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-9202a59c8facc87c2b8df9c19274e1e8", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc" }, "fact_digest": "sha256:5d1bdf3dcddb3dd26f827ade9991ab061a230d35266244467acb1b07f5b6ddbf", "intent_ref": { "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.476483Z", "valid_until": "2026-09-30T22:22:20.386417Z" } ], "basis": { "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "evaluated_at": "2026-09-30T22:20:20.386417Z", "expires_at": "2026-09-30T22:22:20.386417Z", "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": true, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc", "verdict": "require_approval" }, "first_seen": "2026-09-30T22:20:20.386417Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.386417Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.approval.required", "controlspec.synthetic.above_limit", "controlspec.synthetic.approval_required" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "require_approval", "snapshot_digest": "sha256:d3a18ad1455a3df5b6062ca6cad8552044e28fa54b6e6c4cbbbad6257dc294ed" } }, "previous_hash": "sha256:0fcb017f6c5025fca5043896d8f128d8c1b290e47d6da322b6b1003eae262709", "event_hash": "sha256:8ec4378e5e590fae8c497d6cdb0a5d702e2a5ac6bd34c35187fced840f0aa68b" }, { "sequence": 20, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "state", "payload": { "approvals": [ { "approval_id": "approval-9202a59c8facc87c2b8df9c19274e1e8", "approved": true, "approver": { "actor_id": "demo-human", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema_name": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "human", "version": "1" }, "authority_ref": { "digest": "sha256:52ed8bcf00038db0c8aea7a6be3a30976770f1657d2537ff97976feb2e4ee9dc", "namespace": "controlspec.synthetic.purchase", "object_id": "demo-human", "object_type": "controlspec.synthetic.operator_authority", "version": "1" }, "basis_decision_ref": { "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc" }, "fact_digest": "sha256:5d1bdf3dcddb3dd26f827ade9991ab061a230d35266244467acb1b07f5b6ddbf", "intent_ref": { "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase" }, "lineage_complete": true, "requirement_id": "exact-human-approval", "roles": [ "controlspec.synthetic.operator" ], "scope_digest": "sha256:357ae51ac9af39931ad35822582174da2c56d93480db4203fece52ebd85b2688", "separated_role_actor_ids": {}, "valid_from": "2026-09-30T22:20:20.476483Z", "valid_until": "2026-09-30T22:22:20.386417Z" } ], "basis": { "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc" }, "decision": { "applied_controls": [ { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" } ], "approval_requirements": [ { "failure": { "code": "controlspec.synthetic.approval_required", "route": null, "verdict": "require_approval" }, "minimum_count": 1, "requirement_id": "exact-human-approval", "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "separate_from_actor": true, "separate_from_roles": [], "validity_seconds": 120 } ], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-efc786f2610f034a3b4e75010c46a2ecd43b594beb08c028491ece66db413909", "evaluated_at": "2026-09-30T22:20:20.476483Z", "expires_at": "2026-09-30T22:22:20.476483Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": { "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc" }, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:89b971dbbb0b4e10806cc47a2e07ad208d2687bacb36a2e01987e25c04457901", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:20.386417Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 14200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "intent_id": "runtime-43e46fd5e9-changed", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.386417Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-changed", "amount_minor": 14200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:368f08b79149a98d1582806456e9fc8518af24eceb4f3af94eaf32c56b59c7a4", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "approved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "above_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.above_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "facts_digest": "sha256:4e4a7dd73d25a58d3f669aee77e37f51f6a8351460ee1a23409ca8e1b5721280", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:dd3ac7bf7fcded8dcb3696588cc0476a52f8af3e8f7533cb19615fc48b3fa57f" } }, "previous_hash": "sha256:8ec4378e5e590fae8c497d6cdb0a5d702e2a5ac6bd34c35187fced840f0aa68b", "event_hash": "sha256:a693b1ff75e49e8f176e60a927310b1b6c2b9d46d2085366968350ae5c6cb589" }, { "sequence": 21, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-changed", "kind": "denied", "payload": { "at": "2026-09-30T22:20:20.625902Z", "reason": "action_changed" }, "previous_hash": "sha256:a693b1ff75e49e8f176e60a927310b1b6c2b9d46d2085366968350ae5c6cb589", "event_hash": "sha256:3af84b4202b44732afb530850eb19f0b86e43161c476309663bd0523b7b62c52" }, { "sequence": 22, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-recurring", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "recurring_blocked", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:4e738f1f41e76d2cdd88b77be98294d9bac347a69cfc8642e635321ffc731db9", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:7b088105a70a3a7aed964789f36ba71d5e3d3dc5f966a33b66b14d2316d5b74f", "control_set_digest": "sha256:c36d3501d6df4ac606f4b63fdd026c9a24e14cf376bd4b0bdfce21df70bf6e52", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:f323f481d8ea00f6ed3e06dccfe7e82ce293697df3e6adf2327a6500076ee97a", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-e571049215ea325c61b9e0e2fbf9dddc5ee980a4d2aad68e699be4b3800e8c0d", "evaluated_at": "2026-09-30T22:20:20.824204Z", "expires_at": "2026-09-30T22:22:20.824204Z", "explanation_codes": [ "controlspec.core.explicit_block", "controlspec.synthetic.recurring_blocked" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:f323f481d8ea00f6ed3e06dccfe7e82ce293697df3e6adf2327a6500076ee97a", "intent_id": "runtime-43e46fd5e9-recurring", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "block", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "block", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:f0b3000f027c9afe89ba77ac0216301a7b2c467b5b32e263b643cc110ea071b2", "verdict": "block" }, "first_seen": "2026-09-30T22:20:20.824204Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-recurring", "amount_minor": 999, "currency": "USD", "merchant": "demo-store", "recurring": true, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 999, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": true, "controlspec.synthetic.request_digest": "sha256:8c09b4f1a5209586e501116cc87019a7a6034e0244ff690a328cce699b4a9876", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:7b088105a70a3a7aed964789f36ba71d5e3d3dc5f966a33b66b14d2316d5b74f", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-recurring", "intent_digest": "sha256:f323f481d8ea00f6ed3e06dccfe7e82ce293697df3e6adf2327a6500076ee97a", "intent_id": "runtime-43e46fd5e9-recurring", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.824204Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-recurring", "amount_minor": 999, "currency": "USD", "merchant": "demo-store", "recurring": true, "schema_version": "1" }, "request_digest": "sha256:8c09b4f1a5209586e501116cc87019a7a6034e0244ff690a328cce699b4a9876", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "recurring_blocked", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:4e738f1f41e76d2cdd88b77be98294d9bac347a69cfc8642e635321ffc731db9", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.recurring_blocked", "predicate_results": [ "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.explicit_block", "controlspec.synthetic.recurring_blocked" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "block", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "block", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "block", "snapshot_digest": "sha256:ae8f249f92ef8e2bd40108e2b83f5b160d2c380c6a8907713787796ba5a28025" } }, "previous_hash": "sha256:3af84b4202b44732afb530850eb19f0b86e43161c476309663bd0523b7b62c52", "event_hash": "sha256:42615e958f8dd3cfce9a57871a09a783bd0bc172d1aa3855b68d3c05fd32a881" }, { "sequence": 23, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-recurring", "kind": "denied", "payload": { "at": "2026-09-30T22:20:20.824204Z", "reason": "policy_denied" }, "previous_hash": "sha256:42615e958f8dd3cfce9a57871a09a783bd0bc172d1aa3855b68d3c05fd32a881", "event_hash": "sha256:7298e9cba7f993617e177d58eceafea04be7e72ff1fc04a098c3dbe5f65c2c98" }, { "sequence": 24, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-missing", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-c6ba1d3d7573f1ab09e3fc74c919c69861ec3f9223380763c6d7636ebe11db5a", "evaluated_at": "2026-09-30T22:20:20.989949Z", "expires_at": "2026-09-30T22:22:20.989949Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:ec9812a2bb30757ea37c7fc9bd257933ac03b0156f99f60731c070134a41b69d", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:20.989949Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-missing", "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.989949Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "pending", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:e04f08ff1390085ff6804db4ad2ec3ed2355badab241c5ab044ca74c08f456ff" } }, "previous_hash": "sha256:7298e9cba7f993617e177d58eceafea04be7e72ff1fc04a098c3dbe5f65c2c98", "event_hash": "sha256:a4cd380ebfa7850f51103637d5439aa3633d6fe14c9c56bfaa7412e72fdf27dc" }, { "sequence": 25, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-missing", "kind": "state", "payload": { "approvals": [], "basis": null, "decision": { "applied_controls": [ { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" } ], "approval_requirements": [], "binding": { "action_type": "commit", "actor_ref": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "namespace": "controlspec.synthetic.purchase", "version": "1" }, "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "control_set_digest": "sha256:9a063ba2d0f9fe11b984cd4667d95588dc95c0c31d6965a261d7a5a06a185efd", "domain_action": "controlspec.synthetic.purchase", "evaluator": { "name": "controlspec.core", "version": "0.1.0" }, "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "type": "controlspec.synthetic.cart", "version": "1" } }, "conditions": [], "decision_id": "decision-c6ba1d3d7573f1ab09e3fc74c919c69861ec3f9223380763c6d7636ebe11db5a", "evaluated_at": "2026-09-30T22:20:20.989949Z", "expires_at": "2026-09-30T22:22:20.989949Z", "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "extensions": { "controlspec.conformance.non_authoritative": true }, "intent_ref": { "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase" }, "namespace": "controlspec.synthetic.purchase", "predecessor_decision_ref": null, "required_evidence": [], "requires_recheck": false, "route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "schema": "controlspec/v0/decision", "schema_version": "0.1.0", "semantic_digest": "sha256:ec9812a2bb30757ea37c7fc9bd257933ac03b0156f99f60731c070134a41b69d", "verdict": "allow" }, "first_seen": "2026-09-30T22:20:20.989949Z", "intent": { "action": { "domain_action": "controlspec.synthetic.purchase", "requested_effect": { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "type": "commit" }, "actor": { "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "attributes": {}, "extensions": {}, "lineage_refs": [], "namespace": "controlspec.synthetic.purchase", "owner_ref": null, "schema": "controlspec/v0/actor", "schema_version": "0.1.0", "type": "agent", "version": "1" }, "context": { "controlspec.synthetic.amount_minor": 4200, "controlspec.synthetic.method": "POST", "controlspec.synthetic.path": "/purchases", "controlspec.synthetic.recurring": false, "controlspec.synthetic.request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "controlspec.synthetic.scope_digest": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2" }, "context_digest": "sha256:16110ea876aeed861c7edfdcae94d5618b560c69ef18758a77f3c723ebdbee47", "cost": null, "evidence_refs": [], "extensions": {}, "idempotency_key": "runtime-43e46fd5e9-missing", "intent_digest": "sha256:a1259b5c4f440649f0e8c61d9d52e4b553ec0951ce6cd51e840804f319e5af9d", "intent_id": "runtime-43e46fd5e9-missing", "namespace": "controlspec.synthetic.purchase", "requested_at": "2026-09-30T22:20:20.989949Z", "requested_route": null, "resource": { "attributes": {}, "business_id": null, "display_name": null, "extensions": {}, "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "schema": "controlspec/v0/resource", "schema_version": "0.1.0", "type": "controlspec.synthetic.cart", "version": "1" }, "retry_count": 0, "schema": "controlspec/v0/action-intent", "schema_version": "0.1.0" }, "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "request": { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "currency": "USD", "merchant": "demo-store", "recurring": false, "schema_version": "1" }, "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "reservation": { "action_id": "runtime-43e46fd5e9-missing", "decision_digest": "sha256:ec9812a2bb30757ea37c7fc9bd257933ac03b0156f99f60731c070134a41b69d", "expires_at": "2026-09-30T22:20:50.989949Z", "issued_at": "2026-09-30T22:20:20.989949Z", "method": "POST", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "path": "/purchases", "policy_digest": "sha256:558cf1a9ca441b90fde0b487ccec26e31418060d38f85ed483bdc93109a3a2cf", "purpose": "synthetic-purchase-only", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" } }, "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "reserved", "trace": { "evaluated_controls": [ { "control_ref": { "control_id": "within_limit", "namespace": "controlspec.synthetic.purchase", "semantic_digest": "sha256:73233c83c2f9f2f9647cc9dc5a94443331ca94dd35240882d29b5c9d70ec4314", "version": "1.0.0" }, "emitted_code": "controlspec.synthetic.within_limit", "predicate_results": [ "true", "true" ], "selection": "effect" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.within_limit" ], "facts_digest": "sha256:797ecc4575878d31cc0f80d0ef951cf143f6ac4b72062acd8154fec203ce35d2", "final_route": { "extensions": {}, "kind": "continue", "namespace": "controlspec.synthetic.purchase", "parameters": {}, "requires_recheck": false, "route_id": "continue", "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "target_ref": null }, "final_verdict": "allow", "snapshot_digest": "sha256:e04f08ff1390085ff6804db4ad2ec3ed2355badab241c5ab044ca74c08f456ff" } }, "previous_hash": "sha256:a4cd380ebfa7850f51103637d5439aa3633d6fe14c9c56bfaa7412e72fdf27dc", "event_hash": "sha256:38c8730382c7765789312d2c6f89345da507461990cee7013b2d88f2ed04dc49" }, { "sequence": 26, "scope": "sha256:f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "action_id": "runtime-43e46fd5e9-missing", "kind": "reconciliation", "payload": { "at": "2026-09-30T22:20:21.119923Z", "receipt": null, "verified": false }, "previous_hash": "sha256:38c8730382c7765789312d2c6f89345da507461990cee7013b2d88f2ed04dc49", "event_hash": "sha256:9c1a5d4ec00e75e37fffc4c7108af7c8cc4e815ba5bded5021b952bf7e6d2535" } ], "decision_ledger_hash_chain_valid": true, "scripted_operator_actions": [ { "action_id": "runtime-43e46fd5e9-exact", "observed_at": "2026-09-30T22:20:20.091488+00:00", "operator_kind": "scripted synthetic fixture outside sandbox", "decision": { "schema_name": "controlspec/v0/decision", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": { "controlspec.conformance.non_authoritative": true }, "decision_id": "decision-9508b27b6213ec5cf8e5bb7e6edc777124c48477652f53ead04ab2d5a7d996b3", "intent_ref": { "namespace": "controlspec.synthetic.purchase", "intent_id": "runtime-43e46fd5e9-exact", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e" }, "evaluated_at": "2026-09-30T22:20:20.045969Z", "expires_at": "2026-09-30T22:22:20.045969Z", "predecessor_decision_ref": { "namespace": "controlspec.synthetic.purchase", "decision_id": "decision-1bf37d994f4ce8d1b5d65112f15f169f5b44dd1ae35dec6d768d165c9cddabce", "semantic_digest": "sha256:a13806eca1e6bdea9186492cc632bf4e796f614ae2ef39d1bf886c7b4cd61ea1" }, "verdict": "allow", "route": { "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": {}, "route_id": "continue", "kind": "continue", "target_ref": null, "parameters": {}, "requires_recheck": false }, "conditions": [], "approval_requirements": [ { "requirement_id": "exact-human-approval", "failure": { "verdict": "require_approval", "route": null, "code": "controlspec.synthetic.approval_required" }, "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "minimum_count": 1, "validity_seconds": 120, "separate_from_actor": true, "separate_from_roles": [] } ], "required_evidence": [], "applied_controls": [ { "namespace": "controlspec.synthetic.purchase", "control_id": "above_limit", "version": "1.0.0", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "binding": { "actor_ref": { "namespace": "controlspec.synthetic.purchase", "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "version": "1" }, "action_type": "commit", "domain_action": "controlspec.synthetic.purchase", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "version": "1", "type": "controlspec.synthetic.cart" }, "context_digest": "sha256:c36544089d0b3dad46f690592eb07236c783a284016b23dfe95d49f1f8e1eb38", "intent_digest": "sha256:f702f447daf4eb128a93110d8368008295fa7c83a0c3cada3707797b6fe4c97e", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "evaluator": { "name": "controlspec.core", "version": "0.1.0" } }, "requires_recheck": false, "semantic_digest": "sha256:a9b342279cf926c788242c15bcb28cdbb00eb2a75f636fad3829df1dc5463f6f" } }, { "action_id": "runtime-43e46fd5e9-changed", "observed_at": "2026-09-30T22:20:20.511205+00:00", "operator_kind": "scripted synthetic fixture outside sandbox", "decision": { "schema_name": "controlspec/v0/decision", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": { "controlspec.conformance.non_authoritative": true }, "decision_id": "decision-efc786f2610f034a3b4e75010c46a2ecd43b594beb08c028491ece66db413909", "intent_ref": { "namespace": "controlspec.synthetic.purchase", "intent_id": "runtime-43e46fd5e9-changed", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc" }, "evaluated_at": "2026-09-30T22:20:20.476483Z", "expires_at": "2026-09-30T22:22:20.476483Z", "predecessor_decision_ref": { "namespace": "controlspec.synthetic.purchase", "decision_id": "decision-fe3957be9d6ac5cca0251fc6af5e940239eb79d1cfa5c0f7acc01a51d177b1d5", "semantic_digest": "sha256:a4bd0f2ff344d65c3561faab7c6f1ba0fb11ef47e93a07c583e3f4e3deb998fc" }, "verdict": "allow", "route": { "schema_name": "controlspec/v0/route", "schema_version": "0.1.0", "namespace": "controlspec.synthetic.purchase", "extensions": {}, "route_id": "continue", "kind": "continue", "target_ref": null, "parameters": {}, "requires_recheck": false }, "conditions": [], "approval_requirements": [ { "requirement_id": "exact-human-approval", "failure": { "verdict": "require_approval", "route": null, "code": "controlspec.synthetic.approval_required" }, "requirement_type": "approval", "role": "controlspec.synthetic.operator", "scope": { "controlspec.synthetic.target": "POST /purchases" }, "minimum_count": 1, "validity_seconds": 120, "separate_from_actor": true, "separate_from_roles": [] } ], "required_evidence": [], "applied_controls": [ { "namespace": "controlspec.synthetic.purchase", "control_id": "above_limit", "version": "1.0.0", "semantic_digest": "sha256:5c63e6875fb56314ce6c5a772c98a4e947109b86526e94417abc9770c2fd8df3" } ], "explanation_codes": [ "controlspec.core.allow", "controlspec.synthetic.above_limit" ], "binding": { "actor_ref": { "namespace": "controlspec.synthetic.purchase", "actor_id": "agent-f8756cdf272ebbdb894318050d68e29a80bdab12b52352fb5579fb4cf6294bd2", "version": "1" }, "action_type": "commit", "domain_action": "controlspec.synthetic.purchase", "resource_ref": { "namespace": "controlspec.synthetic.purchase", "resource_id": "demo-store", "version": "1", "type": "controlspec.synthetic.cart" }, "context_digest": "sha256:491cce8c994e5f2ff7e701cee2199b4b42ccd52fced8320be9f4cf972ef8008a", "intent_digest": "sha256:b8fc8173e984003915dcf75e94aaef02883c1539d1049cd774aa3152734469fc", "control_set_digest": "sha256:229353de0244870bfba395eafac983beab7e827a9c5ef740761275b3129274ad", "canonicalizer": { "name": "RFC8785-INTEGER-AUTHORITY", "version": "1" }, "evaluator": { "name": "controlspec.core", "version": "0.1.0" } }, "requires_recheck": false, "semantic_digest": "sha256:89b971dbbb0b4e10806cc47a2e07ad208d2687bacb36a2e01987e25c04457901" } } ], "middleware_stop_timestamp": "2026-09-30T22:20:21.617485+00:00", "middleware_listener_closed": true, "completed_at": "2026-09-30T22:20:21.982386+00:00", "final_target_state": { "observed_at": "2026-09-30T22:20:21.988190+00:00", "purchase_count": 4, "spent_minor": 26800, "balance_minor": 973200, "run_purchases": [ { "action_id": "runtime-43e46fd5e9-allowed", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:19.569888Z", "evidence_id": "sha256:ba8cad014c214c7a49df96b8a344659112e968e847b67356e68085e50e186e54", "evidence_mac": "7b99485e9ff29bf5c10df170bbfea16164c242e8c6eb5d23648517dc4da0da41", "nonce": "232deef740f71ff9451822e08859beae21f8f38543eece291e37fea1d72cdb78", "request_digest": "sha256:29487cbbf128e5e57b19fa94d3c89f136c12c196bb2aa943edadaab420649087", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-exact", "amount_minor": 14200, "committed_at": "2026-09-30T22:20:20.218781Z", "evidence_id": "sha256:6ff64cd938b128f1360ec08b6a7aed2fad68209d1bdd6efdc5000d34c2599d59", "evidence_mac": "2fc6c34a79a2095326d62aca39db62a25dbb5417aef5ff011d63d7ac794a2973", "nonce": "dd3511c9dc7f3873987446e1cd449bb27a5f1e5f9ab35fb3417dea4e4698af93", "request_digest": "sha256:55f64b891c2e3a694abe6580f9c64ca651bcc4d651c5ad3664b4a34f4aeb453c", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true }, { "action_id": "runtime-43e46fd5e9-missing", "amount_minor": 4200, "committed_at": "2026-09-30T22:20:21.016488Z", "evidence_id": "sha256:d629c3983831e406aba3bdbaa65f34e4aeb9672f620e89a373d139412f2d3db5", "evidence_mac": "272851aff3b93588816247acaf4a8f32c72ae38d816eabde81ceb3e394d60ec5", "nonce": "4b102509298deafbd125dc673b73bef0875f26f7c7ffe75d6533045470afcabd", "request_digest": "sha256:f239286d1ab440c5ce96792e7826e00ff11a5b5ee3c3539f82f2d563a1da7766", "schema_version": "1", "scope": { "gateway_id": "controlspec-runtime-18a317b6341a", "sandbox_id": "cf9877e9-b1d4-4c13-b919-f222cc9dae1f" }, "status": "committed", "synthetic_only": true } ] } }