{ "created_at": "2026-11-12T07:59:12Z", "result": { "engine": "coding_gate", "limits": "Reviews the action record. It does not execute commands, touch the workspace, or prove an allowed code edit is correct or safe. The run is Ed25519-signed; pin the issuer key out of band.", "module": "cain_a75_engines/codinggate/engine.py", "profile": "xcode_session", "run": { "label": "Recomputes a coding-agent action record: authority, kind, path/command/network allowlists, approvals for privileged actions, effect consistency and claim honesty. It does not execute commands or touch the workspace.", "public_key_b64": "j8XmBxDZZiKkUyM0N7JRUR8m/WJcdlwX3nEuw4B4pPQ=", "records": [ { "checks": [ { "detail": "named principal", "id": "authority.principal", "ok": true }, { "detail": "expires 2000.0 > now 1000.0", "id": "authority.not_expired", "ok": true }, { "detail": "tools ['xcode', 'terminal']", "id": "authority.tool_scope", "ok": true }, { "detail": "workspaces ['/work/ios-app']", "id": "authority.workspace_scope", "ok": true }, { "detail": "path and command allowlists exist", "id": "policy.allowlists_present", "ok": true }, { "detail": "network allowlist ['api.apple.com', 'github.com']", "id": "policy.network_no_catch_all", "ok": true }, { "detail": "kind 'read', allowed ['read', 'edit', 'run', 'network']", "id": "A1-read.kind", "ok": true }, { "detail": "target '/work/ios-app/src/App.swift'", "id": "A1-read.target", "ok": true }, { "detail": "approval not required for this kind", "id": "A1-read.approval_not_required", "ok": true }, { "detail": "applied=True, allowed_by_rules=True", "id": "A1-read.effect_consistent", "ok": true }, { "detail": "kind 'edit', allowed ['read', 'edit', 'run', 'network']", "id": "A2-edit.kind", "ok": true }, { "detail": "target '/work/ios-app/src/App.swift'", "id": "A2-edit.not_forbidden_path", "ok": true }, { "detail": "target '/work/ios-app/src/App.swift'", "id": "A2-edit.target", "ok": true }, { "detail": "approval not required for this kind", "id": "A2-edit.approval_not_required", "ok": true }, { "detail": "applied=True, allowed_by_rules=True", "id": "A2-edit.effect_consistent", "ok": true }, { "detail": "an applied edit carries a diff hash", "id": "A2-edit.diff_hash", "ok": true }, { "detail": "kind 'run', allowed ['read', 'edit', 'run', 'network']", "id": "A3-test.kind", "ok": true }, { "detail": "no shell metacharacters", "id": "A3-test.no_shell_meta", "ok": true }, { "detail": "target 'swift test'", "id": "A3-test.target", "ok": true }, { "detail": "approval not required for this kind", "id": "A3-test.approval_not_required", "ok": true }, { "detail": "applied=True, allowed_by_rules=True", "id": "A3-test.effect_consistent", "ok": true }, { "detail": "claimed True, computed True", "id": "claims.all_actions_allowed", "ok": true }, { "detail": "claimed True, computed True", "id": "claims.approvals_valid", "ok": true }, { "detail": "claimed True, computed True", "id": "claims.no_forbidden_write", "ok": true } ], "created_at": "2026-11-12T07:59:12Z", "engine": "a75-024/1.0.0", "extra": { "actions": { "A1-read": { "allowed": true, "applied": true, "kind": "read", "target": "/work/ios-app/src/App.swift" }, "A2-edit": { "allowed": true, "applied": true, "kind": "edit", "target": "/work/ios-app/src/App.swift" }, "A3-test": { "allowed": true, "applied": true, "kind": "run", "target": "swift test" } }, "blocked": [], "computed": { "all_actions_allowed": true, "approvals_valid": true, "no_forbidden_write": true } }, "failed": [], "label": "Recomputes a coding-agent action record: authority, kind, path/command/network allowlists, approvals for privileged actions, effect consistency and claim honesty. It does not execute commands or touch the workspace.", "prev_record_hash": "acc99e34dfa1bda1fcb5909dd8d6589717215d1699ac01a81a0076c10b6352a9", "public_key_b64": "j8XmBxDZZiKkUyM0N7JRUR8m/WJcdlwX3nEuw4B4pPQ=", "record_hash": "5e073036b20194e5c50d5afab3eb0644ac833b01882a0ad9d619e7a7f8bca382", "schema": "cain42.a75.codinggate.record.v1", "signature_b64": "VolaW554Y5ck4Qmj7jxT8IwkVnYo7QW9FzjeoOXJF1KLmmFG/Io/Fnq4aslBofGbfIaUZ8OUTdytQjG6Qk5RAQ==", "sku": "CAIN-A75-024", "subject": { "actions": [ { "id": "A1-read", "kind": "read", "target": "/work/ios-app/src/App.swift" }, { "id": "A2-edit", "kind": "edit", "target": "/work/ios-app/src/App.swift" }, { "id": "A3-test", "kind": "run", "target": "swift test" } ], "approvals": [], "authority": { "expires_at": 2000.0, "now": 1000.0, "principal": "human:dana", "scope": { "tools": [ "xcode", "terminal" ], "workspaces": [ "/work/ios-app" ] } }, "claims": { "all_actions_allowed": true, "approvals_valid": true, "no_forbidden_write": true }, "effects": [ { "action_id": "A1-read", "applied": true, "output_sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc" }, { "action_id": "A2-edit", "applied": true, "diff_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, { "action_id": "A3-test", "applied": true, "output_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" } ], "policy": { "allowed_kinds": [ "read", "edit", "run", "network" ], "command_allowlist": [ "swift test", "swift build", "xcodebuild -scheme" ], "network_allowlist": [ "api.apple.com", "github.com" ], "path_allowlist": [ "/work/ios-app/src", "/work/ios-app/tests" ], "require_approval": [ "install" ] }, "schema": "cain42.a75.coding.gate.v1", "session": { "agent": "agent:coder", "id": "S-1", "tool": "xcode", "workspace": "/work/ios-app" } }, "subject_sha256": "6c86f6f767dfbdbd9d63e767c2db457f397628375fce88527ccce7fa8220f14b", "verdict": "ALLOWED" } ], "run_hash": "dee8926d0a352689642f621b637f871e454d509941f56248f6d4660383356a88", "schema": "cain42.a75.codinggate.run.v1", "sku": "CAIN-A75-024", "verdict": "VERIFIED", "verdicts": [ "ALLOWED" ] }, "scenarios": [ { "actions": [ "A1-read", "A2-edit", "A3-test" ], "name": "xcode_coding_session", "run_hash": "dee8926d0a352689642f621b637f871e454d509941f56248f6d4660383356a88", "verdict": "VERIFIED" }, { "expected": "ALLOWED", "name": "honest_coding_session", "verdict": "ALLOWED" }, { "expected": "BLOCKED", "name": "edit_env_file", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "edit_outside_allowlist", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "edit_git_internals", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "run_command_not_allowlisted", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "run_shell_metacharacters", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "network_not_allowlisted", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "network_catch_all", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "install_without_approval", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "install_self_approved", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "install_approval_expired", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "kind_not_allowed", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "authority_expired", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "workspace_out_of_scope", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "tool_out_of_scope", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "blocked_action_applied", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "applied_without_diff_hash", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "claim_overstates", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "duplicate_action", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "unknown_claim", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "wrong_schema", "verdict": "BLOCKED" }, { "expected": "BLOCKED", "name": "garbage", "verdict": "BLOCKED" } ], "summary": "VERIFIED: authority, kind, paths, commands, network and approvals recomputed; 22/22 action-failure cases as expected" }, "schema": "cain42.agentic75.findings.v1", "sku": "CAIN-A75-024" }