[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:46+00:00",
  "ms": 222,
  "reply": {
   "slug": "a2a-guard",
   "title": "Sign an A2A Agent Card, then catch a tampered copy",
   "status": "ok",
   "input": "transfer_funds",
   "total_ms": 166,
   "steps": [
    {
     "call": "POST /cards/register",
     "request": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a"
     },
     "status": 200,
     "ms": 132,
     "reply": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "card_hash": "3c032974e4b1de3646b2e70c54e776569c8551e46f36e1586ebe5b5f56d109fa",
      "signature": "658ec7308b8140060a425bb688399ad884734ba64bb6a380ea27830f8bd4ed16192f2b17c6470a8ccbcddc6bc27360fedd80b5e57821f1ac7c2819310ebe5202",
      "signer_public_key": "16d8a1bd0ae42d2febf7c6140bcde1f689b405406fbf12cd039b50ea830a1c5b",
      "issued_at": "2026-11-03T22:47:46.280268+00:00",
      "note": "Verify this card offline with Ed25519: signature over json.dumps({'agent_id','capabilities':sorted,'endpoint_url'}, sort_keys=True, separators=(',',':'))."
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "658ec7308b8140060a425bb688399ad884734ba64bb6a380ea27830f8bd4ed16192f2b17c6470a8ccbcddc6bc27360fedd80b5e57821f1ac7c2819310ebe5202"
     },
     "status": 200,
     "ms": 10,
     "reply": {
      "valid": true,
      "reason": "signature verified: card content matches what was signed, no tampering detected",
      "revoked": false,
      "known_to_this_registry": true
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize",
       "transfer_funds"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "658ec7308b8140060a425bb688399ad884734ba64bb6a380ea27830f8bd4ed16192f2b17c6470a8ccbcddc6bc27360fedd80b5e57821f1ac7c2819310ebe5202"
     },
     "status": 200,
     "ms": 9,
     "reply": {
      "valid": false,
      "reason": "signature verification failed: InvalidSignature -- card content does not match signature, or signature/key is malformed",
      "revoked": false,
      "known_to_this_registry": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:46+00:00",
  "ms": 0,
  "reply": {
   "slug": "a2a-guard",
   "title": "Sign an A2A Agent Card, then catch a tampered copy",
   "status": "ok",
   "input": "transfer_funds",
   "total_ms": 166,
   "steps": [
    {
     "call": "POST /cards/register",
     "request": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a"
     },
     "status": 200,
     "ms": 132,
     "reply": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "card_hash": "3c032974e4b1de3646b2e70c54e776569c8551e46f36e1586ebe5b5f56d109fa",
      "signature": "658ec7308b8140060a425bb688399ad884734ba64bb6a380ea27830f8bd4ed16192f2b17c6470a8ccbcddc6bc27360fedd80b5e57821f1ac7c2819310ebe5202",
      "signer_public_key": "16d8a1bd0ae42d2febf7c6140bcde1f689b405406fbf12cd039b50ea830a1c5b",
      "issued_at": "2026-11-03T22:47:46.280268+00:00",
      "note": "Verify this card offline with Ed25519: signature over json.dumps({'agent_id','capabilities':sorted,'endpoint_url'}, sort_keys=True, separators=(',',':'))."
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "658ec7308b8140060a425bb688399ad884734ba64bb6a380ea27830f8bd4ed16192f2b17c6470a8ccbcddc6bc27360fedd80b5e57821f1ac7c2819310ebe5202"
     },
     "status": 200,
     "ms": 10,
     "reply": {
      "valid": true,
      "reason": "signature verified: card content matches what was signed, no tampering detected",
      "revoked": false,
      "known_to_this_registry": true
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-5017bf51",
      "capabilities": [
       "search",
       "summarize",
       "transfer_funds"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "658ec7308b8140060a425bb688399ad884734ba64bb6a380ea27830f8bd4ed16192f2b17c6470a8ccbcddc6bc27360fedd80b5e57821f1ac7c2819310ebe5202"
     },
     "status": 200,
     "ms": 9,
     "reply": {
      "valid": false,
      "reason": "signature verification failed: InvalidSignature -- card content does not match signature, or signature/key is malformed",
      "revoked": false,
      "known_to_this_registry": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:47+00:00",
  "ms": 97,
  "reply": {
   "slug": "a2a-guard",
   "title": "Sign an A2A Agent Card, then catch a tampered copy",
   "status": "ok",
   "input": "wire_transfer_unlimited",
   "total_ms": 50,
   "steps": [
    {
     "call": "POST /cards/register",
     "request": {
      "agent_id": "demo-agent-a9d9ea7b",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a"
     },
     "status": 200,
     "ms": 15,
     "reply": {
      "agent_id": "demo-agent-a9d9ea7b",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "card_hash": "13c52f1ebfb0423314163b23e28770ad2d52dbe6db13ee1649412ed2f95c9211",
      "signature": "4e91c99108244f23e728fd6ba278771bef4e50a2575f2078e2af26a3c4f0d339d92c7d273263bafa01fb2cfd1916019fe8f54d1c352a673bf0aca797729bf907",
      "signer_public_key": "16d8a1bd0ae42d2febf7c6140bcde1f689b405406fbf12cd039b50ea830a1c5b",
      "issued_at": "2026-11-03T22:47:47.380265+00:00",
      "note": "Verify this card offline with Ed25519: signature over json.dumps({'agent_id','capabilities':sorted,'endpoint_url'}, sort_keys=True, separators=(',',':'))."
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-a9d9ea7b",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "4e91c99108244f23e728fd6ba278771bef4e50a2575f2078e2af26a3c4f0d339d92c7d273263bafa01fb2cfd1916019fe8f54d1c352a673bf0aca797729bf907"
     },
     "status": 200,
     "ms": 9,
     "reply": {
      "valid": true,
      "reason": "signature verified: card content matches what was signed, no tampering detected",
      "revoked": false,
      "known_to_this_registry": true
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-a9d9ea7b",
      "capabilities": [
       "search",
       "summarize",
       "wire_transfer_unlimited"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "4e91c99108244f23e728fd6ba278771bef4e50a2575f2078e2af26a3c4f0d339d92c7d273263bafa01fb2cfd1916019fe8f54d1c352a673bf0aca797729bf907"
     },
     "status": 200,
     "ms": 8,
     "reply": {
      "valid": false,
      "reason": "signature verification failed: InvalidSignature -- card content does not match signature, or signature/key is malformed",
      "revoked": false,
      "known_to_this_registry": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C04",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:48+00:00",
  "ms": 90,
  "reply": {
   "slug": "a2a-guard",
   "title": "Sign an A2A Agent Card, then catch a tampered copy",
   "status": "ok",
   "input": "delete_all_users",
   "total_ms": 45,
   "steps": [
    {
     "call": "POST /cards/register",
     "request": {
      "agent_id": "demo-agent-5f501c39",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a"
     },
     "status": 200,
     "ms": 16,
     "reply": {
      "agent_id": "demo-agent-5f501c39",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "card_hash": "bbddc1b22815b82037fc2a47a591fb34259a1634f2e6c537aaab3504aa7be761",
      "signature": "b5fcbab87a7764b347d41521f1f90cfad32ecac2734b1987e4673f28123a717928e24e79fb92467bf89917d9bf33dc67fa4fde8d4855e2b2502e30385b55590e",
      "signer_public_key": "16d8a1bd0ae42d2febf7c6140bcde1f689b405406fbf12cd039b50ea830a1c5b",
      "issued_at": "2026-11-03T22:47:47.968514+00:00",
      "note": "Verify this card offline with Ed25519: signature over json.dumps({'agent_id','capabilities':sorted,'endpoint_url'}, sort_keys=True, separators=(',',':'))."
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-5f501c39",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "b5fcbab87a7764b347d41521f1f90cfad32ecac2734b1987e4673f28123a717928e24e79fb92467bf89917d9bf33dc67fa4fde8d4855e2b2502e30385b55590e"
     },
     "status": 200,
     "ms": 9,
     "reply": {
      "valid": true,
      "reason": "signature verified: card content matches what was signed, no tampering detected",
      "revoked": false,
      "known_to_this_registry": true
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-5f501c39",
      "capabilities": [
       "search",
       "summarize",
       "delete_all_users"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "b5fcbab87a7764b347d41521f1f90cfad32ecac2734b1987e4673f28123a717928e24e79fb92467bf89917d9bf33dc67fa4fde8d4855e2b2502e30385b55590e"
     },
     "status": 200,
     "ms": 9,
     "reply": {
      "valid": false,
      "reason": "signature verification failed: InvalidSignature -- card content does not match signature, or signature/key is malformed",
      "revoked": false,
      "known_to_this_registry": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C05",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:47:48+00:00",
  "ms": 102,
  "reply": {
   "slug": "a2a-guard",
   "title": "Sign an A2A Agent Card, then catch a tampered copy",
   "status": "ok",
   "input": "read_calendar",
   "total_ms": 56,
   "steps": [
    {
     "call": "POST /cards/register",
     "request": {
      "agent_id": "demo-agent-f5720c06",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a"
     },
     "status": 200,
     "ms": 22,
     "reply": {
      "agent_id": "demo-agent-f5720c06",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "card_hash": "4d30a2e6980ce09313132f03d987670246506a4b0ee1a2468b3a1537a9816f04",
      "signature": "04fae77d5242e2b4251fdf3b6821233bb530bcf1912e55e66f62ab8518c75b423997f7de7302d763539fb51b9fcd1c47bb915fb9ef3d0e9882bd7be47961ce06",
      "signer_public_key": "16d8a1bd0ae42d2febf7c6140bcde1f689b405406fbf12cd039b50ea830a1c5b",
      "issued_at": "2026-11-03T22:47:48.566180+00:00",
      "note": "Verify this card offline with Ed25519: signature over json.dumps({'agent_id','capabilities':sorted,'endpoint_url'}, sort_keys=True, separators=(',',':'))."
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-f5720c06",
      "capabilities": [
       "search",
       "summarize"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "04fae77d5242e2b4251fdf3b6821233bb530bcf1912e55e66f62ab8518c75b423997f7de7302d763539fb51b9fcd1c47bb915fb9ef3d0e9882bd7be47961ce06"
     },
     "status": 200,
     "ms": 9,
     "reply": {
      "valid": true,
      "reason": "signature verified: card content matches what was signed, no tampering detected",
      "revoked": false,
      "known_to_this_registry": true
     }
    },
    {
     "call": "POST /cards/verify",
     "request": {
      "agent_id": "demo-agent-f5720c06",
      "capabilities": [
       "search",
       "summarize",
       "read_calendar"
      ],
      "endpoint_url": "https://agents.example/a",
      "signature": "04fae77d5242e2b4251fdf3b6821233bb530bcf1912e55e66f62ab8518c75b423997f7de7302d763539fb51b9fcd1c47bb915fb9ef3d0e9882bd7be47961ce06"
     },
     "status": 200,
     "ms": 8,
     "reply": {
      "valid": false,
      "reason": "signature verification failed: InvalidSignature -- card content does not match signature, or signature/key is malformed",
      "revoked": false,
      "known_to_this_registry": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]