{
  "label": "Recomputes enterprise agent governance: ownership and review age, required controls, scoped exceptions, high-risk policy enforcement, governance authority and claim honesty. It does not inspect the live fleet.",
  "public_key_b64": "6Jev2AJNK2FX0i4zOxT0xoKey3Qu/6v9CLUGCSXxv1E=",
  "records": [
    {
      "checks": [
        {
          "detail": "a governance body is named",
          "id": "authority.body",
          "ok": true
        },
        {
          "detail": "the policy revision is named by hash",
          "id": "authority.policy_hash",
          "ok": true
        },
        {
          "detail": "a high-risk policy is not switched off",
          "id": "policy.PII-ENFORCE.not_off",
          "ok": true
        },
        {
          "detail": "policy does not cover a high-risk class",
          "id": "policy.OPS-LOG.not_off",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-crm.identity",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-crm.logging",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-crm.data_boundary",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-crm.kill_switch",
          "ok": true
        },
        {
          "detail": "reviewed 20 days ago, max 90.0",
          "id": "agent-crm.review_current",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-ops.identity",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-ops.logging",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-ops.data_boundary",
          "ok": true
        },
        {
          "detail": "pass",
          "id": "agent-ops.kill_switch",
          "ok": true
        },
        {
          "detail": "reviewed 35 days ago, max 90.0",
          "id": "agent-ops.review_current",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.all_agents_reviewed",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.all_controls_active",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.no_high_risk_policy_off",
          "ok": true
        }
      ],
      "created_at": "2026-11-12T07:59:15Z",
      "engine": "a75-018/1.0.0",
      "extra": {
        "agents": {
          "agent-crm": {
            "data_classes": [
              "pii"
            ],
            "environment": "prod"
          },
          "agent-ops": {
            "data_classes": [
              "internal"
            ],
            "environment": "prod"
          }
        },
        "computed": {
          "all_agents_reviewed": true,
          "all_controls_active": true,
          "no_high_risk_policy_off": true
        },
        "exceptions": []
      },
      "failed": [],
      "label": "Recomputes enterprise agent governance: ownership and review age, required controls, scoped exceptions, high-risk policy enforcement, governance authority and claim honesty. It does not inspect the live fleet.",
      "prev_record_hash": "ee5a602318b635495c47252adc17317a4f0b49ec06b15fc29d407661c312aafa",
      "public_key_b64": "6Jev2AJNK2FX0i4zOxT0xoKey3Qu/6v9CLUGCSXxv1E=",
      "record_hash": "c6d5830acbbf68b74eb8e602dd60c6a5b4b6232e242220e2dbd10d8323229129",
      "schema": "cain42.a75.enterprise.record.v1",
      "signature_b64": "F5yOhboOb16SAnhVK30lwee3DxbSN1fqyVop+sO7+edi2lYfc4StxsFpSpUeOCDFJgJzhrZJjJXlVusY4c7FBw==",
      "sku": "CAIN-A75-018",
      "subject": {
        "agents": [
          {
            "agent_id": "agent-crm",
            "data_classes": [
              "pii"
            ],
            "environment": "prod",
            "last_review_days_ago": 20,
            "owner": "revops",
            "purpose": "Draft CRM follow-ups",
            "tools": [
              "crm.read",
              "crm.draft"
            ]
          },
          {
            "agent_id": "agent-ops",
            "data_classes": [
              "internal"
            ],
            "environment": "prod",
            "last_review_days_ago": 35,
            "owner": "platform",
            "purpose": "Triage incidents",
            "tools": [
              "incident.read",
              "pager.write"
            ]
          }
        ],
        "authority": {
          "governance_body": "AI Risk Council",
          "now": 1000.0,
          "policy_revision_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
        },
        "claims": {
          "all_agents_reviewed": true,
          "all_controls_active": true,
          "no_high_risk_policy_off": true
        },
        "controls": [
          {
            "agent_id": "agent-crm",
            "control": "identity",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          },
          {
            "agent_id": "agent-crm",
            "control": "logging",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          },
          {
            "agent_id": "agent-crm",
            "control": "data_boundary",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          },
          {
            "agent_id": "agent-crm",
            "control": "kill_switch",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          },
          {
            "agent_id": "agent-ops",
            "control": "identity",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          },
          {
            "agent_id": "agent-ops",
            "control": "logging",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          },
          {
            "agent_id": "agent-ops",
            "control": "data_boundary",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          },
          {
            "agent_id": "agent-ops",
            "control": "kill_switch",
            "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
            "status": "pass"
          }
        ],
        "exceptions": [],
        "max_review_age_days": 90,
        "policies": [
          {
            "data_classes": [
              "pii"
            ],
            "enforcement": "enforce",
            "id": "PII-ENFORCE"
          },
          {
            "data_classes": [
              "internal"
            ],
            "enforcement": "enforce",
            "id": "OPS-LOG"
          }
        ],
        "schema": "cain42.a75.enterprise.governance.v1"
      },
      "subject_sha256": "6b4ab1fd48d3be45f6ec3df7775ebf5dea9e251ce666ea5aaf744a10a03845e9",
      "verdict": "CONFORMANT"
    }
  ],
  "run_hash": "b0329cd476de26a0a450397f4ecd928256f1536462f137d096d83edded0277cf",
  "schema": "cain42.a75.enterprise.run.v1",
  "sku": "CAIN-A75-018",
  "verdict": "VERIFIED",
  "verdicts": [
    "CONFORMANT"
  ]
}