{
  "label": "Recomputes a coding-agent action record: authority, kind, path/command/network allowlists, approvals for privileged actions, effect consistency and claim honesty. It does not execute commands or touch the workspace.",
  "public_key_b64": "j8XmBxDZZiKkUyM0N7JRUR8m/WJcdlwX3nEuw4B4pPQ=",
  "records": [
    {
      "checks": [
        {
          "detail": "named principal",
          "id": "authority.principal",
          "ok": true
        },
        {
          "detail": "expires 2000.0 > now 1000.0",
          "id": "authority.not_expired",
          "ok": true
        },
        {
          "detail": "tools ['xcode', 'terminal']",
          "id": "authority.tool_scope",
          "ok": true
        },
        {
          "detail": "workspaces ['/work/ios-app']",
          "id": "authority.workspace_scope",
          "ok": true
        },
        {
          "detail": "path and command allowlists exist",
          "id": "policy.allowlists_present",
          "ok": true
        },
        {
          "detail": "network allowlist ['api.apple.com', 'github.com']",
          "id": "policy.network_no_catch_all",
          "ok": true
        },
        {
          "detail": "kind 'read', allowed ['read', 'edit', 'run', 'network']",
          "id": "A1-read.kind",
          "ok": true
        },
        {
          "detail": "target '/work/ios-app/src/App.swift'",
          "id": "A1-read.target",
          "ok": true
        },
        {
          "detail": "approval not required for this kind",
          "id": "A1-read.approval_not_required",
          "ok": true
        },
        {
          "detail": "applied=True, allowed_by_rules=True",
          "id": "A1-read.effect_consistent",
          "ok": true
        },
        {
          "detail": "kind 'edit', allowed ['read', 'edit', 'run', 'network']",
          "id": "A2-edit.kind",
          "ok": true
        },
        {
          "detail": "target '/work/ios-app/src/App.swift'",
          "id": "A2-edit.not_forbidden_path",
          "ok": true
        },
        {
          "detail": "target '/work/ios-app/src/App.swift'",
          "id": "A2-edit.target",
          "ok": true
        },
        {
          "detail": "approval not required for this kind",
          "id": "A2-edit.approval_not_required",
          "ok": true
        },
        {
          "detail": "applied=True, allowed_by_rules=True",
          "id": "A2-edit.effect_consistent",
          "ok": true
        },
        {
          "detail": "an applied edit carries a diff hash",
          "id": "A2-edit.diff_hash",
          "ok": true
        },
        {
          "detail": "kind 'run', allowed ['read', 'edit', 'run', 'network']",
          "id": "A3-test.kind",
          "ok": true
        },
        {
          "detail": "no shell metacharacters",
          "id": "A3-test.no_shell_meta",
          "ok": true
        },
        {
          "detail": "target 'swift test'",
          "id": "A3-test.target",
          "ok": true
        },
        {
          "detail": "approval not required for this kind",
          "id": "A3-test.approval_not_required",
          "ok": true
        },
        {
          "detail": "applied=True, allowed_by_rules=True",
          "id": "A3-test.effect_consistent",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.all_actions_allowed",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.approvals_valid",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.no_forbidden_write",
          "ok": true
        }
      ],
      "created_at": "2026-11-12T07:59:16Z",
      "engine": "a75-024/1.0.0",
      "extra": {
        "actions": {
          "A1-read": {
            "allowed": true,
            "applied": true,
            "kind": "read",
            "target": "/work/ios-app/src/App.swift"
          },
          "A2-edit": {
            "allowed": true,
            "applied": true,
            "kind": "edit",
            "target": "/work/ios-app/src/App.swift"
          },
          "A3-test": {
            "allowed": true,
            "applied": true,
            "kind": "run",
            "target": "swift test"
          }
        },
        "blocked": [],
        "computed": {
          "all_actions_allowed": true,
          "approvals_valid": true,
          "no_forbidden_write": true
        }
      },
      "failed": [],
      "label": "Recomputes a coding-agent action record: authority, kind, path/command/network allowlists, approvals for privileged actions, effect consistency and claim honesty. It does not execute commands or touch the workspace.",
      "prev_record_hash": "acc99e34dfa1bda1fcb5909dd8d6589717215d1699ac01a81a0076c10b6352a9",
      "public_key_b64": "j8XmBxDZZiKkUyM0N7JRUR8m/WJcdlwX3nEuw4B4pPQ=",
      "record_hash": "5e39a4557ad5888042ce9c1e64ea93bba5437ba3904673e726aba0a6e070499c",
      "schema": "cain42.a75.codinggate.record.v1",
      "signature_b64": "glKjRseUBVEGlQD02/9wzTezqRqJ+Ke5m0Uwo30cUaWRgOI9Hv7/af3ifAAn9Q0sJHSRJYcVdEivepOvLnoIBQ==",
      "sku": "CAIN-A75-024",
      "subject": {
        "actions": [
          {
            "id": "A1-read",
            "kind": "read",
            "target": "/work/ios-app/src/App.swift"
          },
          {
            "id": "A2-edit",
            "kind": "edit",
            "target": "/work/ios-app/src/App.swift"
          },
          {
            "id": "A3-test",
            "kind": "run",
            "target": "swift test"
          }
        ],
        "approvals": [],
        "authority": {
          "expires_at": 2000.0,
          "now": 1000.0,
          "principal": "human:dana",
          "scope": {
            "tools": [
              "xcode",
              "terminal"
            ],
            "workspaces": [
              "/work/ios-app"
            ]
          }
        },
        "claims": {
          "all_actions_allowed": true,
          "approvals_valid": true,
          "no_forbidden_write": true
        },
        "effects": [
          {
            "action_id": "A1-read",
            "applied": true,
            "output_sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
          },
          {
            "action_id": "A2-edit",
            "applied": true,
            "diff_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
          },
          {
            "action_id": "A3-test",
            "applied": true,
            "output_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
          }
        ],
        "policy": {
          "allowed_kinds": [
            "read",
            "edit",
            "run",
            "network"
          ],
          "command_allowlist": [
            "swift test",
            "swift build",
            "xcodebuild -scheme"
          ],
          "network_allowlist": [
            "api.apple.com",
            "github.com"
          ],
          "path_allowlist": [
            "/work/ios-app/src",
            "/work/ios-app/tests"
          ],
          "require_approval": [
            "install"
          ]
        },
        "schema": "cain42.a75.coding.gate.v1",
        "session": {
          "agent": "agent:coder",
          "id": "S-1",
          "tool": "xcode",
          "workspace": "/work/ios-app"
        }
      },
      "subject_sha256": "6c86f6f767dfbdbd9d63e767c2db457f397628375fce88527ccce7fa8220f14b",
      "verdict": "ALLOWED"
    }
  ],
  "run_hash": "88da4efef5e0d7e8e52570c91e45d506ec6c03ed1a11a9d860fbe2b1b2507128",
  "schema": "cain42.a75.codinggate.run.v1",
  "sku": "CAIN-A75-024",
  "verdict": "VERIFIED",
  "verdicts": [
    "ALLOWED"
  ]
}