{
  "label": "Recomputes a governed enterprise execution: policy decision, approval independence and timing, enforcement depth, effect hash, audit chaining and claim honesty. It does not re-run the action.",
  "public_key_b64": "UbiexrX/WFtmXtvXNUNG3sROzVMzDSdfMo5DbDe5l9c=",
  "records": [
    {
      "checks": [
        {
          "detail": "an agent is named",
          "id": "request.agent",
          "ok": true
        },
        {
          "detail": "a tenant is named",
          "id": "request.tenant",
          "ok": true
        },
        {
          "detail": "the exact parameters are hashed",
          "id": "request.params_hash",
          "ok": true
        },
        {
          "detail": "decision 'ALLOW'",
          "id": "policy.decision",
          "ok": true
        },
        {
          "detail": "the policy revision is hashed",
          "id": "policy.revision_hash",
          "ok": true
        },
        {
          "detail": "execution starts after the decision",
          "id": "execution.after_decision",
          "ok": true
        },
        {
          "detail": "executed=True, decision='ALLOW'",
          "id": "decision.executed",
          "ok": true
        },
        {
          "detail": "not a gated or high-risk execution",
          "id": "approval.not_required",
          "ok": true
        },
        {
          "detail": "the boundary applied the decision",
          "id": "enforcement.applied",
          "ok": true
        },
        {
          "detail": "depth 'runtime'",
          "id": "enforcement.depth",
          "ok": true
        },
        {
          "detail": "boundary 'mcp'",
          "id": "enforcement.boundary",
          "ok": true
        },
        {
          "detail": "a completed run carries an effect hash",
          "id": "execution.effect_hash",
          "ok": true
        },
        {
          "detail": "the run finishes after it starts",
          "id": "execution.ordered",
          "ok": true
        },
        {
          "detail": "the audit links to a previous record",
          "id": "audit.prev_link",
          "ok": true
        },
        {
          "detail": "the chain hash covers this audit record",
          "id": "audit.chain_hash",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.enforced_at_boundary",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.evidence_chained",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.policy_applied",
          "ok": true
        }
      ],
      "created_at": "2026-11-12T07:59:18Z",
      "engine": "a75-037/1.0.0",
      "extra": {
        "computed": {
          "enforced_at_boundary": true,
          "evidence_chained": true,
          "policy_applied": true
        },
        "decision": "ALLOW",
        "enforcement_depth": "runtime",
        "risk_score": 35.0,
        "status": "completed"
      },
      "failed": [],
      "label": "Recomputes a governed enterprise execution: policy decision, approval independence and timing, enforcement depth, effect hash, audit chaining and claim honesty. It does not re-run the action.",
      "prev_record_hash": "84348d37020e3236f948aae47ac0a443469a8056658dca47b90bee1deeb75c42",
      "public_key_b64": "UbiexrX/WFtmXtvXNUNG3sROzVMzDSdfMo5DbDe5l9c=",
      "record_hash": "e5fa1a624c88fd21b1835a022f154e3a71af91177850dd621946340a461118b8",
      "schema": "cain42.a75.executiongov.record.v1",
      "signature_b64": "8Z1JWVXPZMq2Hy5R/nXC+Pkcg/fqJxaXsexUbO2vBsklq92dE7qB3dRwMEsD171WGkOhPJT/y2LlWeEtONlABA==",
      "sku": "CAIN-A75-037",
      "subject": {
        "audit": {
          "action": "crm.read",
          "agent": "agent:worker",
          "chain_hash": "3eaf3575b93f07fe6e6a886a657b813d4392c2e1f173368633bb2b9c988f9a54",
          "prev_record_hash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
          "record_id": "AUD-1"
        },
        "claims": {
          "enforced_at_boundary": true,
          "evidence_chained": true,
          "policy_applied": true
        },
        "enforcement": {
          "applied": true,
          "boundary": "mcp",
          "enforcement_depth": "runtime",
          "result": "permitted"
        },
        "execution": {
          "effect_sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
          "finished_at": 1003.0,
          "started_at": 1002.0,
          "status": "completed"
        },
        "policy": {
          "decided_at": 1001.0,
          "decision": "ALLOW",
          "obligations": [
            "log"
          ],
          "policy_id": "POL-7",
          "revision_sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
          "risk_score": 35.0
        },
        "request": {
          "action": "crm.read",
          "agent": "agent:worker",
          "id": "REQ-1",
          "params_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
          "requested_at": 1000.0,
          "resource": "crm/customers",
          "tenant": "tenant-a"
        },
        "schema": "cain42.a75.execution.gov.v1"
      },
      "subject_sha256": "a617c7e92f30c58cb07a8a8761730aa59ec1756e0e61bc47d48a923892e3306e",
      "verdict": "COMPLIANT"
    }
  ],
  "run_hash": "9c40d362129af0f985255031c0b7d153978bdad90bb6d0e9c14422d59984e036",
  "schema": "cain42.a75.executiongov.run.v1",
  "sku": "CAIN-A75-037",
  "verdict": "VERIFIED",
  "verdicts": [
    "COMPLIANT"
  ]
}