[ { "id": "C01", "http_status": 200, "recorded_at": "2026-11-03T22:51:16+00:00", "ms": 2651, "reply": { "preset": "control", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [], "check": { "agent": "billing-agent-7", "allowed": true, "reason": "EXECUTION_PERMITTED", "check_ms": 0.076 }, "ledger": { "events": 0, "head": "GENESIS", "ok": true, "problems": [], "public_key_b64": "ISddV890EhAnoygwLkCPCN8iAja1oTVmuF5h/uPfZCs=", "signing_key_persistent": true } } }, { "id": "C02", "http_status": 200, "recorded_at": "2026-11-03T22:51:20+00:00", "ms": 3160, "reply": { "preset": "agent", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "quarantine billing-agent-7", "ok": true, "result": { "quarantine_id": "quar-agent-660e2f1a8477", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "ACTIVE", "reason": "goal drift: bulk export at 03:00", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:19.458535+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "859fedfa6bf57cf08db89b6aa816b03f892fc272527706ad0df28f34314bb2b7", "signature_b64": "Eel33X0TDHGU+KItHIXB88FNiFuOdZWMSvweUmuhg0pjQG+UqRoGLpvgJltAv8RwsiIeBpRjff0nvUQkIgJODg==", "lift_reason": null, "lifted_by": null, "lifted_at": null } } ], "signature_valid": true, "check": { "agent": "billing-agent-7", "allowed": false, "reason": "AGENT_QUARANTINED: Agent 'billing-agent-7' has been isolated for security policy containment.", "check_ms": 0.376 }, "bystander": { "agent": "support-agent-2", "allowed": true, "reason": "EXECUTION_PERMITTED", "check_ms": 0.077 }, "ledger": { "events": 1, "head": "30baedfa9f26d32a5cecbbf3d4db9d3519ceb6b1431a3d4ee827c8e9d3dc6322", "ok": true, "problems": [], "public_key_b64": "jX5USq5X4yLaxBtBC9WWhCFrC3thyCKdU+a/Oe6F/3Y=", "signing_key_persistent": true } } }, { "id": "C03", "http_status": 200, "recorded_at": "2026-11-03T22:51:20+00:00", "ms": 0, "reply": { "preset": "agent", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "quarantine billing-agent-7", "ok": true, "result": { "quarantine_id": "quar-agent-660e2f1a8477", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "ACTIVE", "reason": "goal drift: bulk export at 03:00", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:19.458535+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "859fedfa6bf57cf08db89b6aa816b03f892fc272527706ad0df28f34314bb2b7", "signature_b64": "Eel33X0TDHGU+KItHIXB88FNiFuOdZWMSvweUmuhg0pjQG+UqRoGLpvgJltAv8RwsiIeBpRjff0nvUQkIgJODg==", "lift_reason": null, "lifted_by": null, "lifted_at": null } } ], "signature_valid": true, "check": { "agent": "billing-agent-7", "allowed": false, "reason": "AGENT_QUARANTINED: Agent 'billing-agent-7' has been isolated for security policy containment.", "check_ms": 0.376 }, "bystander": { "agent": "support-agent-2", "allowed": true, "reason": "EXECUTION_PERMITTED", "check_ms": 0.077 }, "ledger": { "events": 1, "head": "30baedfa9f26d32a5cecbbf3d4db9d3519ceb6b1431a3d4ee827c8e9d3dc6322", "ok": true, "problems": [], "public_key_b64": "jX5USq5X4yLaxBtBC9WWhCFrC3thyCKdU+a/Oe6F/3Y=", "signing_key_persistent": true } } }, { "id": "C04", "http_status": 200, "recorded_at": "2026-11-03T22:51:21+00:00", "ms": 0, "reply": { "preset": "agent", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "quarantine billing-agent-7", "ok": true, "result": { "quarantine_id": "quar-agent-660e2f1a8477", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "ACTIVE", "reason": "goal drift: bulk export at 03:00", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:19.458535+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "859fedfa6bf57cf08db89b6aa816b03f892fc272527706ad0df28f34314bb2b7", "signature_b64": "Eel33X0TDHGU+KItHIXB88FNiFuOdZWMSvweUmuhg0pjQG+UqRoGLpvgJltAv8RwsiIeBpRjff0nvUQkIgJODg==", "lift_reason": null, "lifted_by": null, "lifted_at": null } } ], "signature_valid": true, "check": { "agent": "billing-agent-7", "allowed": false, "reason": "AGENT_QUARANTINED: Agent 'billing-agent-7' has been isolated for security policy containment.", "check_ms": 0.376 }, "bystander": { "agent": "support-agent-2", "allowed": true, "reason": "EXECUTION_PERMITTED", "check_ms": 0.077 }, "ledger": { "events": 1, "head": "30baedfa9f26d32a5cecbbf3d4db9d3519ceb6b1431a3d4ee827c8e9d3dc6322", "ok": true, "problems": [], "public_key_b64": "jX5USq5X4yLaxBtBC9WWhCFrC3thyCKdU+a/Oe6F/3Y=", "signing_key_persistent": true } } }, { "id": "C05", "http_status": 200, "recorded_at": "2026-11-03T22:51:24+00:00", "ms": 2795, "reply": { "preset": "swarm", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "quarantine swarm procurement-swarm", "ok": true, "result": { "quarantine_id": "quar-swarm-16a5b80a4113", "target_id": "procurement-swarm", "target_type": "SWARM", "level": "SWARM_FLEET_ISOLATION", "status": "ACTIVE", "reason": "cartel ring detected", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:24.044877+00:00", "revoked_svids": [ "spiffe://cain.local/swarm/procurement-swarm" ], "record_hash": "8a4c09e92cda0380097a4cf373d8d52f709a15db8bf66158e784fc08642cdf32", "signature_b64": "jkzgQazdnXnZjj+jtRoNWS1b3iAS2cqKyNHKfZqZZIDlrmelH1YFCr5o4uSxDi0/6MPRKD0aRvJf8mTmLShMAA==", "lift_reason": null, "lifted_by": null, "lifted_at": null } } ], "check": { "agent": "buyer-2", "allowed": false, "reason": "SWARM_QUARANTINED: Swarm fleet 'procurement-swarm' is isolated under containment protocol.", "check_ms": 0.389 }, "bystander": { "agent": "support-agent-2", "allowed": true, "reason": "EXECUTION_PERMITTED", "check_ms": 0.061 }, "ledger": { "events": 1, "head": "701a3eda890947be4c5e3cfabc95e84c94112cb9325c1515dca0b4cb5091e9b7", "ok": true, "problems": [], "public_key_b64": "zyWa1ZjGlooErGLlRG7ZRAl8vKCVX48EZfqoyVKjKDA=", "signing_key_persistent": true } } }, { "id": "C06", "http_status": 200, "recorded_at": "2026-11-03T22:51:27+00:00", "ms": 2776, "reply": { "preset": "lift_one_approver", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "quarantine billing-agent-7", "ok": true, "result": { "quarantine_id": "quar-agent-79025ea619ff", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "ACTIVE", "reason": "goal drift", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:27.322692+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "8bae3f7306f5cbf9f36ce63835f7e5594aa674a089bfafa9b166aefcd8a49ad7", "signature_b64": "yHIBbasyJdZmbxyIwpOsC5m1otVla+xe1iyBF9CaumMfeIvcuX098inSIH0R29ah/gcM7yTd2ynaq65UuHj5Aw==", "lift_reason": null, "lifted_by": null, "lifted_at": null } }, { "step": "lift by alice only", "ok": true, "result": { "quarantine_id": "quar-agent-79025ea619ff", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "ACTIVE", "reason": "goal drift", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:27.322692+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "8bae3f7306f5cbf9f36ce63835f7e5594aa674a089bfafa9b166aefcd8a49ad7", "signature_b64": "yHIBbasyJdZmbxyIwpOsC5m1otVla+xe1iyBF9CaumMfeIvcuX098inSIH0R29ah/gcM7yTd2ynaq65UuHj5Aw==", "lift_reason": null, "lifted_by": null, "lifted_at": null, "pending_lift_approvals": [ "alice" ], "lift_quorum": 2 } } ], "check": { "agent": "billing-agent-7", "allowed": false, "reason": "AGENT_QUARANTINED: Agent 'billing-agent-7' has been isolated for security policy containment.", "check_ms": 0.225 }, "ledger": { "events": 2, "head": "86cc48752aab76113b01213e74d92822a74df64e5a6e8e276a9fb184dd964d54", "ok": true, "problems": [], "public_key_b64": "TDih23j9YaqUXaqJivtnpbjhO0ZAAEvIgcsjrVZ+h/o=", "signing_key_persistent": true } } }, { "id": "C07", "http_status": 200, "recorded_at": "2026-11-03T22:51:31+00:00", "ms": 2701, "reply": { "preset": "lift_by_its_own_subject", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "quarantine billing-agent-7", "ok": true, "result": { "quarantine_id": "quar-agent-099db505417e", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "ACTIVE", "reason": "goal drift", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:30.562940+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "c4b4207fda119b4b1c0ba0aab52e768ce5128668b92f150a1aa0f05b93eaee1e", "signature_b64": "RzPVi+l27SGqpQfM/ocm150ROIoiQM7uwU8LRTkbV2bkrp3Q9u9PnflU9l9gjHED6EUfE6xyhcQiG1ILS9TOCg==", "lift_reason": null, "lifted_by": null, "lifted_at": null } }, { "step": "lift approved by the quarantined agent itself", "ok": false, "refused": "ValueError: a quarantine cannot be lifted by its own subject or by an unnamed approver" } ], "check": { "agent": "billing-agent-7", "allowed": false, "reason": "AGENT_QUARANTINED: Agent 'billing-agent-7' has been isolated for security policy containment.", "check_ms": 0.051 }, "ledger": { "events": 1, "head": "f9aa80e7bfe188fb4e4b74449fc09435babdfc2e49dc0409b946aefa00335c99", "ok": true, "problems": [], "public_key_b64": "zjTJljETz7ekwFHu35EcYnt6j4LpIrxAv8AzCiq/0mY=", "signing_key_persistent": true } } }, { "id": "C08", "http_status": 200, "recorded_at": "2026-11-03T22:51:34+00:00", "ms": 2582, "reply": { "preset": "lift_two_approvers", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "quarantine billing-agent-7", "ok": true, "result": { "quarantine_id": "quar-agent-360a74b105de", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "ACTIVE", "reason": "goal drift", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:33.579896+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "4d58abda2990611adb6de27340cdeea52c512461dbddf10fa0c11ef1abd2c8f9", "signature_b64": "GdUjKAJha+VziKfZyAs0NFZE25OcT9dgI8HXhrPWB1BBx0G6li+wAPewKE1jVlRmU+Pe5aZo85ss9D0ivJV+Dg==", "lift_reason": null, "lifted_by": null, "lifted_at": null } }, { "step": "lift by alice and bob", "ok": true, "result": { "quarantine_id": "quar-agent-360a74b105de", "target_id": "billing-agent-7", "target_type": "AGENT", "level": "AGENT_ISOLATION", "status": "LIFTED", "reason": "goal drift", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:33.579896+00:00", "revoked_svids": [ "spiffe://cain.local/agent/billing-agent-7" ], "record_hash": "4d58abda2990611adb6de27340cdeea52c512461dbddf10fa0c11ef1abd2c8f9", "signature_b64": "GdUjKAJha+VziKfZyAs0NFZE25OcT9dgI8HXhrPWB1BBx0G6li+wAPewKE1jVlRmU+Pe5aZo85ss9D0ivJV+Dg==", "lift_reason": "Credentials rotated; replayed the session in staging; no further exports.", "lifted_by": "alice+bob", "lifted_at": "2026-11-03T22:51:33.586316+00:00" } } ], "check": { "agent": "billing-agent-7", "allowed": true, "reason": "EXECUTION_PERMITTED", "check_ms": 0.07 }, "ledger": { "events": 4, "head": "29dc222e95c16df40cd6d6e09ba73bd2049d32524e1d314710e4f2c28aebf214", "ok": true, "problems": [], "public_key_b64": "2JuIO9p8uBnFwePGcoMwV4QJVT3IsRbm27IqmjZnmWY=", "signing_key_persistent": true } } }, { "id": "C09", "http_status": 200, "recorded_at": "2026-11-03T22:51:37+00:00", "ms": 2892, "reply": { "preset": "halt", "engine": "cain.quarantine.SwarmFleetQuarantine", "steps": [ { "step": "emergency halt of every agent", "ok": true, "result": { "quarantine_id": "quar-cluster-halt-75f858143a89", "target_id": "CLUSTER_GLOBAL", "target_type": "CLUSTER", "level": "CLUSTER_EMERGENCY_HALT", "status": "ACTIVE", "reason": "drill: suspected fleet compromise", "operator_id": "drill-operator", "timestamp_iso": "2026-11-03T22:51:37.032267+00:00", "revoked_svids": [ "spiffe://cain.local/*" ], "record_hash": "16e90c87f2cd18022b8eb3720bb590cd1c0ab6e4c68a425547388242a791f633", "signature_b64": "/Xx4Idkd7rgse/IqjOj9Cv7WyUtZBYnghuyMVT4/HR+IBeoChdoMdM2/Rvv0+OppSYDJAzTvQLtbDsQLnX02Cw==", "lift_reason": null, "lifted_by": null, "lifted_at": null } } ], "check": { "agent": "support-agent-2", "allowed": false, "reason": "CLUSTER_EMERGENCY_HALT: All autonomous agent actions are suspended by kill-switch.", "check_ms": 0.292 }, "check_2": { "agent": "billing-agent-7", "allowed": false, "reason": "CLUSTER_EMERGENCY_HALT: All autonomous agent actions are suspended by kill-switch.", "check_ms": 0.059 }, "ledger": { "events": 1, "head": "e490f8069cdf1196fe4268d5e8698d0f445377f20bde82d0bbd214fa28fd0ee1", "ok": true, "problems": [], "public_key_b64": "wynQh3KTMcAqeOqv6J/nsJt/VUwY37nJddTE6y4Hz38=", "signing_key_persistent": true } } } ]