{ "schema": "cain42.proof.test_vectors.v1", "generated": "2026-09-30T02:40:19Z", "produced_by": "the CAIN-42 code itself (cain45.canon, cain45.l5.*); check any implementation against it", "test_public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "other_public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "private_keys_published": false, "canonical_json": [ { "input": { "b": 2, "a": 1 }, "canonical_utf8": "{\"a\":1,\"b\":2}", "sha256": "43258cff783fe7036d8a43033f830adfc60ec037382473548ac742b888292777" }, { "input": { "z": [ 3, 1, 2 ], "nested": { "y": true, "x": null } }, "canonical_utf8": "{\"nested\":{\"x\":null,\"y\":true},\"z\":[3,1,2]}", "sha256": "51df8e50df62fa2f3acff94866a881e68a0cd3f75d5a2ebb49eb292b3c2f8a14" }, { "input": { "unicode": "caf\u00e9 \u2713" }, "canonical_utf8": "{\"unicode\":\"caf\\u00e9 \\u2713\"}", "sha256": "5863366e3a3dfa26dfaa9f65479b331a28aba945c6c0cf95c65e7d884b101542" }, { "input": { "num": 0.1, "int": 10, "neg": -3 }, "canonical_utf8": "{\"int\":10,\"neg\":-3,\"num\":0.1}", "sha256": "b672944c24e2d05224a89136702b34865f728bf7249d512516856d409e11253d" }, { "input": [], "canonical_utf8": "[]", "sha256": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" }, { "input": { "empty": {} }, "canonical_utf8": "{\"empty\":{}}", "sha256": "c5cd747263892d516ee30100e488ff01ddc2f25ffe027ec5f8030d2a7c713a58" } ], "signatures": [ { "case": "CAIN42/CAG-L5-SYSTEM-DECISION/v1 valid", "domain": "CAIN42/CAG-L5-SYSTEM-DECISION/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": 1790000000.0 }, "digest_sha256": "577293c38e35ba94bacd6697ce44573369afa54bea527bf62d972b3af6b8b06f", "signed_message": "577293c38e35ba94bacd6697ce44573369afa54bea527bf62d972b3af6b8b06f", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "uR+yJp45dFeXrLsHPHyIPfd3mxd0C8HV+2pTWfJyI99xUIhNvTmAZIcqExTk1972CCcMjsrKBDPHjGVMpT4qBQ==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-SYSTEM-DECISION/v1 field changed", "domain": "CAIN42/CAG-L5-SYSTEM-DECISION/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": "1790000000.0x" }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "uR+yJp45dFeXrLsHPHyIPfd3mxd0C8HV+2pTWfJyI99xUIhNvTmAZIcqExTk1972CCcMjsrKBDPHjGVMpT4qBQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-SYSTEM-DECISION/v1 wrong key", "domain": "CAIN42/CAG-L5-SYSTEM-DECISION/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": 1790000000.0 }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "uR+yJp45dFeXrLsHPHyIPfd3mxd0C8HV+2pTWfJyI99xUIhNvTmAZIcqExTk1972CCcMjsrKBDPHjGVMpT4qBQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1 valid", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "agent_id": "agent:a", "tool_id": "mcp:sql", "capability": "READ", "resource": "db:x/1" }, "digest_sha256": "93779ff22182f646fedbd71dc1b79ba214472e9477870b83504219e3056fab26", "signed_message": "93779ff22182f646fedbd71dc1b79ba214472e9477870b83504219e3056fab26", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "j1QaTqbzKyWvP+kAzcs4Iqupj54j83EHmCOivicApm+GGtptFwkYw4LKCk+x54xPA5lnYtqF+LEgtTWnojc0Cw==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1 field changed", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "agent_id": "agent:ax", "tool_id": "mcp:sql", "capability": "READ", "resource": "db:x/1" }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "j1QaTqbzKyWvP+kAzcs4Iqupj54j83EHmCOivicApm+GGtptFwkYw4LKCk+x54xPA5lnYtqF+LEgtTWnojc0Cw==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1 wrong key", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "agent_id": "agent:a", "tool_id": "mcp:sql", "capability": "READ", "resource": "db:x/1" }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "j1QaTqbzKyWvP+kAzcs4Iqupj54j83EHmCOivicApm+GGtptFwkYw4LKCk+x54xPA5lnYtqF+LEgtTWnojc0Cw==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EMERGENCY/v1 valid", "domain": "CAIN42/CAG-L5-EMERGENCY/v1", "fields": { "operator": "op:a", "action": "MCP_EXECUTION_FREEZE", "scope": "system", "ttl": 600 }, "digest_sha256": "61a212802184104ad073842659632d8f3387d85594060812cd83960f937235a2", "signed_message": "61a212802184104ad073842659632d8f3387d85594060812cd83960f937235a2", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "ApZ+gULhJkTGz1WRhgA5s3G+ZaJGHnnBKRYhCr7ZPoxGi5wAJY08+2mbkOFe9xjw872zkDy9S8v2ThVg74gDBA==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-EMERGENCY/v1 field changed", "domain": "CAIN42/CAG-L5-EMERGENCY/v1", "fields": { "operator": "op:a", "action": "MCP_EXECUTION_FREEZEx", "scope": "system", "ttl": 600 }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "ApZ+gULhJkTGz1WRhgA5s3G+ZaJGHnnBKRYhCr7ZPoxGi5wAJY08+2mbkOFe9xjw872zkDy9S8v2ThVg74gDBA==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-EMERGENCY/v1 wrong key", "domain": "CAIN42/CAG-L5-EMERGENCY/v1", "fields": { "operator": "op:a", "action": "MCP_EXECUTION_FREEZE", "scope": "system", "ttl": 600 }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "ApZ+gULhJkTGz1WRhgA5s3G+ZaJGHnnBKRYhCr7ZPoxGi5wAJY08+2mbkOFe9xjw872zkDy9S8v2ThVg74gDBA==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1 valid", "domain": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1", "fields": { "node_id": "n1", "state_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, "digest_sha256": "aec2d11cde8fd4300f05a17964777cc11b0ed79ac70587e704194fd9cde90f9a", "signed_message": "aec2d11cde8fd4300f05a17964777cc11b0ed79ac70587e704194fd9cde90f9a", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "lvcjGd5ZJr06mNUCMiDetXlaoNvsU+4CGaEhrVM2C4Bu7X+qXiTVZdYJgE7JiJiFU8TLr08Tli/jv0bAGuZ7DQ==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1 field changed", "domain": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1", "fields": { "node_id": "n1x", "state_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "lvcjGd5ZJr06mNUCMiDetXlaoNvsU+4CGaEhrVM2C4Bu7X+qXiTVZdYJgE7JiJiFU8TLr08Tli/jv0bAGuZ7DQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1 wrong key", "domain": "CAIN42/CAG-L5-GOVERNANCE-STATE/v1", "fields": { "node_id": "n1", "state_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "lvcjGd5ZJr06mNUCMiDetXlaoNvsU+4CGaEhrVM2C4Bu7X+qXiTVZdYJgE7JiJiFU8TLr08Tli/jv0bAGuZ7DQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-SYSTEM/v1 valid", "domain": "CAIN42/CAG-L5-SYSTEM/v1", "fields": { "system_id": "sys:x", "policy_version": "p1" }, "digest_sha256": "a31e0fb77c7aba927e75aa4262087fcbe9109f71af3d1619864734b25035d97e", "signed_message": "a31e0fb77c7aba927e75aa4262087fcbe9109f71af3d1619864734b25035d97e", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "lPGloEZ3ad6y0Wz9Ouo4GyAp7CbVyLM6g0zDOJSDjY7Yar85z4YddBPVWzjBS4RGAskp8v1LJNPtO7cI8pEcDQ==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-SYSTEM/v1 field changed", "domain": "CAIN42/CAG-L5-SYSTEM/v1", "fields": { "system_id": "sys:x", "policy_version": "p1x" }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "lPGloEZ3ad6y0Wz9Ouo4GyAp7CbVyLM6g0zDOJSDjY7Yar85z4YddBPVWzjBS4RGAskp8v1LJNPtO7cI8pEcDQ==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-SYSTEM/v1 wrong key", "domain": "CAIN42/CAG-L5-SYSTEM/v1", "fields": { "system_id": "sys:x", "policy_version": "p1" }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "lPGloEZ3ad6y0Wz9Ouo4GyAp7CbVyLM6g0zDOJSDjY7Yar85z4YddBPVWzjBS4RGAskp8v1LJNPtO7cI8pEcDQ==", "expected_valid": false }, { "case": "CAIN42/L5-AUTHORIZATION-LEASE/v1 valid", "domain": "CAIN42/L5-AUTHORIZATION-LEASE/v1", "fields": { "lease_id": "al_1", "agent_id": "agent:a", "trajectory_id": "tr_1" }, "digest_sha256": "2bcec7f63173977598e2b3fa03a1a945e4f32f7e98ae0b07f1e52653407389a1", "signed_message": "2bcec7f63173977598e2b3fa03a1a945e4f32f7e98ae0b07f1e52653407389a1", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "l4Ao5yRj6jKp2qCFtFBhYnB+9plWHOWFOxxBo2g+ZOUCYWhmlCRNkoYVr/DGgOyJpkuOWzYldO5AJU4SVWygBg==", "expected_valid": true }, { "case": "CAIN42/L5-AUTHORIZATION-LEASE/v1 field changed", "domain": "CAIN42/L5-AUTHORIZATION-LEASE/v1", "fields": { "lease_id": "al_1", "agent_id": "agent:ax", "trajectory_id": "tr_1" }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "l4Ao5yRj6jKp2qCFtFBhYnB+9plWHOWFOxxBo2g+ZOUCYWhmlCRNkoYVr/DGgOyJpkuOWzYldO5AJU4SVWygBg==", "expected_valid": false }, { "case": "CAIN42/L5-AUTHORIZATION-LEASE/v1 wrong key", "domain": "CAIN42/L5-AUTHORIZATION-LEASE/v1", "fields": { "lease_id": "al_1", "agent_id": "agent:a", "trajectory_id": "tr_1" }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "l4Ao5yRj6jKp2qCFtFBhYnB+9plWHOWFOxxBo2g+ZOUCYWhmlCRNkoYVr/DGgOyJpkuOWzYldO5AJU4SVWygBg==", "expected_valid": false }, { "case": "CAIN42/L5-TRAJECTORY-EVENT/v1 valid", "domain": "CAIN42/L5-TRAJECTORY-EVENT/v1", "fields": { "event_id": "te_1", "sequence_number": 0, "previous_event_hash": "" }, "digest_sha256": "ea03f8e5829c71dbbb2de3e038b06e301b850447d94efb479262aeed2f84286a", "signed_message": "ea03f8e5829c71dbbb2de3e038b06e301b850447d94efb479262aeed2f84286a", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "iv317LqHf0kzzuTuoS32cJv3ZthVEtyEnWZKPEdlWLG9q3L4lht9JpL+D1kgNg/w3JoEKdu9bqV9XXhBwSCBBA==", "expected_valid": true }, { "case": "CAIN42/L5-TRAJECTORY-EVENT/v1 field changed", "domain": "CAIN42/L5-TRAJECTORY-EVENT/v1", "fields": { "event_id": "te_1x", "sequence_number": 0, "previous_event_hash": "" }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "iv317LqHf0kzzuTuoS32cJv3ZthVEtyEnWZKPEdlWLG9q3L4lht9JpL+D1kgNg/w3JoEKdu9bqV9XXhBwSCBBA==", "expected_valid": false }, { "case": "CAIN42/L5-TRAJECTORY-EVENT/v1 wrong key", "domain": "CAIN42/L5-TRAJECTORY-EVENT/v1", "fields": { "event_id": "te_1", "sequence_number": 0, "previous_event_hash": "" }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "iv317LqHf0kzzuTuoS32cJv3ZthVEtyEnWZKPEdlWLG9q3L4lht9JpL+D1kgNg/w3JoEKdu9bqV9XXhBwSCBBA==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-AGENT-REQUEST/v1 valid", "domain": "CAIN42/CAG-L5-AGENT-REQUEST/v1", "fields": { "tenant": "t", "agent_id": "agent:a", "nonce": "n1", "at": 1790000000.0 }, "digest_sha256": "234009ef5fb9a551b906019c948641254be2e23d5e6c1edd3c89cf0d207c0797", "signed_message": "234009ef5fb9a551b906019c948641254be2e23d5e6c1edd3c89cf0d207c0797", "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "+Vhyw/Gi5UKoYh58kg8kzpxY7kAE9mWKHN1CLhwmJLOtLq87f3OlOOlipz7SPAFH/5orpWrDu9LxWhbGG4JHBw==", "expected_valid": true }, { "case": "CAIN42/CAG-L5-AGENT-REQUEST/v1 field changed", "domain": "CAIN42/CAG-L5-AGENT-REQUEST/v1", "fields": { "tenant": "t", "agent_id": "agent:ax", "nonce": "n1", "at": 1790000000.0 }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "+Vhyw/Gi5UKoYh58kg8kzpxY7kAE9mWKHN1CLhwmJLOtLq87f3OlOOlipz7SPAFH/5orpWrDu9LxWhbGG4JHBw==", "expected_valid": false }, { "case": "CAIN42/CAG-L5-AGENT-REQUEST/v1 wrong key", "domain": "CAIN42/CAG-L5-AGENT-REQUEST/v1", "fields": { "tenant": "t", "agent_id": "agent:a", "nonce": "n1", "at": 1790000000.0 }, "public_key_b64": "jUXZr47/bHQ1MmYMwCZpcbTew7ats95KrqDCLOeu4Ek=", "signature_b64": "+Vhyw/Gi5UKoYh58kg8kzpxY7kAE9mWKHN1CLhwmJLOtLq87f3OlOOlipz7SPAFH/5orpWrDu9LxWhbGG4JHBw==", "expected_valid": false }, { "case": "signature replayed under another domain", "domain": "CAIN42/CAG-L5-EXECUTION-COMMITMENT/v1", "fields": { "decision": "ALLOW", "reasons": [], "at": 1790000000.0 }, "public_key_b64": "DaYPdcq/2qXmkJpO6bezgNrT0dBid9MyZKGjN4jpuog=", "signature_b64": "uR+yJp45dFeXrLsHPHyIPfd3mxd0C8HV+2pTWfJyI99xUIhNvTmAZIcqExTk1972CCcMjsrKBDPHjGVMpT4qBQ==", "expected_valid": false } ], "merkle": { "rule": "leaf = the 32-byte hash itself; node = SHA-256(0x01 || left || right); an odd last node is promoted unchanged; empty tree = SHA-256('')", "cases": [ { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906" ], "root": "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc" ], "root": "be957cc0326c2b68851cc241d3f2180a09c08519ff458165f942d9222bee1cb5" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa" ], "root": "05378b42070c9de90a020e756277ea46013887a398bbf8847244db9f9f724044" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa", "faadd9f5710e2ee64366473a76676041698fe9bc14f2837f756ab44668d6e5a7" ], "root": "436e51670fe5512ec7acf021c91a6f91d939798832bcf428043e5c76c2a60d07" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa", "faadd9f5710e2ee64366473a76676041698fe9bc14f2837f756ab44668d6e5a7", "f226213787fa67fcd71cac979ffaea093aa7e37b8defd09d5fba16424141fd45" ], "root": "f3203277d61e115bb402610d87e576183681901992f8f547376e00a5a3730a06" }, { "leaves": [ "8d9bd036f8bede8d6114b607a676f826c3e21ee8cf107642b6105fb7c2d76906", "4d181974ff5ba1f22749a4aad4f1fe54e8b374d1a8cf3d29265d5b8eaa5e12dc", "980c96d1ddddc274cccff2d7fdf7b45efe51098908116c2edfd889fe9f905bfa", "faadd9f5710e2ee64366473a76676041698fe9bc14f2837f756ab44668d6e5a7", "f226213787fa67fcd71cac979ffaea093aa7e37b8defd09d5fba16424141fd45", "84ebe117802b8598e3ebb40bfc7e335bed38c5b1d13f4581f6578e8b0a270dc4", "ed9254691134e3a740555934286410d7285d0954ff578d27c89273d4aad62df8" ], "root": "be8440ce348ada7399542781a8c1cd40e90ccb7eb0622f77a42dfa40ff954f2d" }, { "leaves": [], "root": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" } ] }, "policy_precedence": { "levels": [ "CONSTITUTION", "SYSTEM_SAFETY", "ORGANIZATION", "ENVIRONMENT", "RESOURCE", "AGENT", "TRAJECTORY", "ACTION" ], "effects": [ "DENY", "REQUIRE_APPROVAL", "ALLOW" ], "cases": [ { "case": "higher DENY beats lower ALLOW", "rules": [ { "level": "CONSTITUTION", "effect": "DENY", "capabilities": [ "GRANT_ADMIN" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null }, { "level": "ACTION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "GRANT_ADMIN", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "REQUIRE_APPROVAL beats ALLOW", "rules": [ { "level": "SYSTEM_SAFETY", "effect": "REQUIRE_APPROVAL", "capabilities": [ "DELETE" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null }, { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "DELETE", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "REQUIRE_APPROVAL" }, { "case": "plain ALLOW", "rules": [ { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "db:*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "ALLOW" }, { "case": "no rule allows", "rules": [ { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "api:*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "malformed rule fails closed", "rules": [ { "level": "ORG", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "unknown effect fails closed", "rules": [ { "level": "ACTION", "effect": "MAYBE", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" }, { "case": "sensitivity-targeted deny", "rules": [ { "level": "ORGANIZATION", "effect": "ALLOW", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": null }, { "level": "RESOURCE", "effect": "DENY", "capabilities": [ "*" ], "resources": [ "*" ], "agents": [ "*" ], "environments": [ "*" ], "max_sensitivity": 1 } ], "request": { "agent": "agent:a", "capability": "READ", "resource": "db:x/1", "environment": "production", "sensitivity": 2 }, "expected_effect": "DENY" } ] }, "authority_intersection": { "rule": "allowed only if EVERY layer holds exactly (capability, pattern) with the resource inside the pattern; an empty or missing layer allows nothing; capabilities never imply each other", "cases": [ { "layers": { "AGENT": [ [ "READ", "db:a/*" ] ], "SYSTEM": [ [ "READ", "db:*" ] ] }, "capability": "READ", "resource": "db:a/t", "allowed": true, "outside": [] }, { "layers": { "AGENT": [ [ "READ", "db:a/*" ] ], "SYSTEM": [ [ "READ", "db:*" ] ] }, "capability": "READ", "resource": "db:b/t", "allowed": false, "outside": [ "AGENT" ] }, { "layers": { "AGENT": [ [ "ADMIN", "db:*" ] ], "SYSTEM": [ [ "ADMIN", "db:*" ], [ "READ", "db:*" ] ] }, "capability": "READ", "resource": "db:a/t", "allowed": false, "outside": [ "AGENT" ] }, { "layers": { "AGENT": [ [ "ADMIN", "db:*" ] ], "SYSTEM": [ [ "ADMIN", "db:*" ] ] }, "capability": "GRANT_ADMIN", "resource": "db:a/t", "allowed": false, "outside": [ "AGENT", "SYSTEM" ] }, { "layers": { "AGENT": [ [ "WRITE", "db:*" ] ], "SYSTEM": [] }, "capability": "WRITE", "resource": "db:a/t", "allowed": false, "outside": [ "SYSTEM" ] }, { "layers": { "AGENT": [ [ "READ", "db:*" ] ], "SYSTEM": [ [ "READ", "db:*" ] ], "TRAJECTORY": null }, "capability": "READ", "resource": "db:a/t", "allowed": false, "outside": [ "TRAJECTORY" ] } ] }, "blast_radius": { "classes": [ "LOCAL", "SERVICE", "MULTI-SERVICE", "ORGANIZATIONAL", "CROSS-ENVIRONMENT", "SYSTEM-WIDE", "CRITICAL" ], "cases": [ { "case": "single node", "nodes": { "db": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [], "target": "db", "reversibility": "REVERSIBLE", "expected_class": "LOCAL" }, { "case": "one service behind it", "nodes": { "db": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "s1": { "kind": "SERVICE", "environment": "production", "organization": "o" } }, "edges": [ [ "s1", "db" ] ], "target": "db", "reversibility": "REVERSIBLE", "expected_class": "SERVICE" }, { "case": "two services", "nodes": { "cfg": { "kind": "CONFIG", "environment": "production", "organization": "o" }, "s1": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "s2": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "q": { "kind": "QUEUE", "environment": "production", "organization": "o" }, "x": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [ [ "s1", "cfg" ], [ "s2", "s1" ] ], "target": "cfg", "reversibility": "REVERSIBLE", "expected_class": "MULTI-SERVICE" }, { "case": "two services, irreversible", "nodes": { "cfg": { "kind": "CONFIG", "environment": "production", "organization": "o" }, "s1": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "s2": { "kind": "SERVICE", "environment": "production", "organization": "o" }, "q": { "kind": "QUEUE", "environment": "production", "organization": "o" }, "x": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [ [ "s1", "cfg" ], [ "s2", "s1" ] ], "target": "cfg", "reversibility": "IRREVERSIBLE", "expected_class": "CRITICAL" }, { "case": "crosses environments", "nodes": { "a": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "b": { "kind": "SERVICE", "environment": "staging", "organization": "o" }, "c": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "d": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "e": { "kind": "DATABASE", "environment": "production", "organization": "o" } }, "edges": [ [ "b", "a" ] ], "target": "a", "reversibility": "REVERSIBLE", "expected_class": "CROSS-ENVIRONMENT" }, { "case": "crosses organizations", "nodes": { "a": { "kind": "DATABASE", "environment": "production", "organization": "o" }, "b": { "kind": "SERVICE", "environment": "production", "organization": "o2" } }, "edges": [ [ "b", "a" ] ], "target": "a", "reversibility": "REVERSIBLE", "expected_class": "SYSTEM-WIDE" } ] }, "governance_quorum": { "node_public_keys_b64": { "n1": "Po0UWxlEnefu/GnffkvoTsg7vUaNn9vSEJ57Y830lD8=", "n2": "JDZ7/3NCAdvsbclxawnEoGA8tGGGhgkjtU7iYBDLvE0=", "n3": "RBvjtEoCEne6k50hZpJ9A1iyRDF8P9pk1I5U6FFMwpk=", "n4": "5XeORlJOWLG0PAuJ1FSttFJqCp21lkepKaxOdHStKM4=" }, "quorum": 3, "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "cases": [ { "case": "3 of 4 agree", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "fN3qdcCOBsPReY3K5jymhZbSNQI+oaJ+sAgLMDsG9mkyzbJ60IKb8jOe98K50wx5tqczFsQfyxIj1Dh8C635AA==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "u87lfKh2WxkrmiUATybw7nJBhhFBVako1M5VGEktMgpIhIfpIdgNZ1GhE444q9ZTRQwSS9KHiPnj5jCjPdDKCA==" }, { "node_id": "n3", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "Jrga43O6II+aNkrwQHfn2xbp3V+UpW5QDgG6+caUt0AMLJaI0X7nFx7vAHYWAlOArZdb1znRkOL+vbakyZu7AA==" } ], "authoritative": true }, { "case": "2 of 4 (partition)", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "fN3qdcCOBsPReY3K5jymhZbSNQI+oaJ+sAgLMDsG9mkyzbJ60IKb8jOe98K50wx5tqczFsQfyxIj1Dh8C635AA==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "u87lfKh2WxkrmiUATybw7nJBhhFBVako1M5VGEktMgpIhIfpIdgNZ1GhE444q9ZTRQwSS9KHiPnj5jCjPdDKCA==" } ], "authoritative": false, "reason": "BELOW_QUORUM" }, { "case": "one node conflicts", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "fN3qdcCOBsPReY3K5jymhZbSNQI+oaJ+sAgLMDsG9mkyzbJ60IKb8jOe98K50wx5tqczFsQfyxIj1Dh8C635AA==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "u87lfKh2WxkrmiUATybw7nJBhhFBVako1M5VGEktMgpIhIfpIdgNZ1GhE444q9ZTRQwSS9KHiPnj5jCjPdDKCA==" }, { "node_id": "n3", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "Jrga43O6II+aNkrwQHfn2xbp3V+UpW5QDgG6+caUt0AMLJaI0X7nFx7vAHYWAlOArZdb1znRkOL+vbakyZu7AA==" }, { "node_id": "n4", "state_digest": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee", "signature": "vJ84Cf9Oak1YdXyEdyTSdKM03NlEJBj6LVBwyZqHiOJk+sYSlDT+S3XIQfOf8DjKbiN0IvPFg16hk+TILwIuCQ==" } ], "authoritative": false, "reason": "CONFLICTING_GOVERNANCE_STATE" }, { "case": "duplicated vote", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "fN3qdcCOBsPReY3K5jymhZbSNQI+oaJ+sAgLMDsG9mkyzbJ60IKb8jOe98K50wx5tqczFsQfyxIj1Dh8C635AA==" }, { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "fN3qdcCOBsPReY3K5jymhZbSNQI+oaJ+sAgLMDsG9mkyzbJ60IKb8jOe98K50wx5tqczFsQfyxIj1Dh8C635AA==" }, { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "fN3qdcCOBsPReY3K5jymhZbSNQI+oaJ+sAgLMDsG9mkyzbJ60IKb8jOe98K50wx5tqczFsQfyxIj1Dh8C635AA==" } ], "authoritative": false, "reason": "BELOW_QUORUM" }, { "case": "forged by an unregistered key", "votes": [ { "node_id": "n1", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "VBhnXriejg7bSsVqdB3Ow3ZAowuP3Q+NBS0iwfrOpHYfP3hrANKO3SY3qJl+SE5S4aURC/XOwxHHPCIZT46yCg==" }, { "node_id": "n2", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "dUOJyUsBH4ydTejJS3G39FQUzYJa6tJ/W15vBwTsi9RJmqV2pr7Td6bFlB8nNKEmOWoG0unTA0yNKeAuMvHeAQ==" }, { "node_id": "n3", "state_digest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "signature": "ij4SUsJVrOovOXchMJMvw6VVV5aLQx1+3e4eoAu3CvWonYPv3/Qn1evnExajU+ZuFclCJWA4QxIT/YRGmidYBQ==" } ], "authoritative": false, "reason": "NO_VALID_VOTES" } ] }, "lease_validity": { "max_ttl_seconds": 3600.0, "risk_bands": [ "LOW", "GUARDED", "ELEVATED", "HIGH", "CRITICAL" ], "cases": [ { "case": "valid", "lease": { "lease_id": "al_c11fc2c65b4f02bbbbb7", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [] }, { "case": "expired", "lease": { "lease_id": "al_03f9f6891097c109dea9", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 601.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_EXPIRED" ] }, { "case": "no expiry", "lease": { "lease_id": "al_069121f06ecdfe5c7743", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 0.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_UNBOUNDED" ] }, { "case": "longer than 1 h", "lease": { "lease_id": "al_2713f8edf52963e0abaa", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 7200.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_TTL_EXCEEDS_MAXIMUM" ] }, { "case": "not yet valid", "lease": { "lease_id": "al_53ddbae2b69b0ac3064d", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 50.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_NOT_YET_VALID" ] }, { "case": "policy changed", "lease": { "lease_id": "al_1bfe5a3b67c6df52fe49", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p2", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "POLICY_CHANGED" ] }, { "case": "unbound policy", "lease": { "lease_id": "al_1815c4dc148d6b9f342c", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "POLICY_UNBOUND" ] }, { "case": "trust below floor", "lease": { "lease_id": "al_bc6502c6162fc8f3bfad", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.4, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "TRUST_BELOW_FLOOR" ] }, { "case": "risk above ceiling", "lease": { "lease_id": "al_d5ac187af45d8a75480e", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "HIGH", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "RISK_CEILING_EXCEEDED" ] }, { "case": "context changed", "lease": { "lease_id": "al_7772ef7ea2f2ef871ed3", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c2", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "CONTEXT_CHANGED" ] }, { "case": "empty scope", "lease": { "lease_id": "al_fcd0f73ae54de009957f", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_SCOPE_EMPTY" ] }, { "case": "action outside scope", "lease": { "lease_id": "al_2536db353ed2303f90c2", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "WRITE", "resource": "db:x/1" }, "expected_reasons": [ "ACTION_SCOPE_EXCEEDED" ] }, { "case": "resource outside scope", "lease": { "lease_id": "al_f5f49a32e5deb704e8a0", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:y/1" }, "expected_reasons": [ "RESOURCE_SCOPE_EXCEEDED" ] }, { "case": "revoked", "lease": { "lease_id": "al_35433cddaa4b3f371d8d", "agent_id": "agent:a", "trajectory_id": "tr_1", "action_scope": [ "READ" ], "resource_scope": [ "db:x/*" ], "authority_scope": [], "policy_version": "p1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "c1", "issued_at": 0.0, "expires_at": 600.0, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "REVOKED" }, "request": { "now": 10.0, "policy_version": "p1", "trust": 0.9, "risk_band": "LOW", "context_hash": "c1", "action": "READ", "resource": "db:x/1" }, "expected_reasons": [ "LEASE_REVOKED" ] } ] } }