[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:37:25+00:00",
  "ms": 0,
  "reply": {
   "slug": "decision-intelligence",
   "title": "Make a real CAIN decision, then reconstruct its context, evidence and quality",
   "status": "ok",
   "input": null,
   "total_ms": 6895,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "safe-read"
     },
     "status": 200,
     "ms": 6199,
     "reply": {
      "scenario": {
       "id": "safe-read",
       "title": "A reasonable action",
       "explains": "A normal tool call with a declared intent, from a principal with no trust history yet. Policy and risk both pass, but unknown trust never becomes ALLOW on its own: the action is held for human approval."
      },
      "verdict": "REQUIRE_APPROVAL",
      "blocked": false,
      "decision_id": "fd_cc7750cf82e64b82a48d78bd",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no known attack pattern matched"
       },
       {
        "stage": "trust",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_a8af1966a58a4b5692856e51 (expires 2026-11-03T23:37:20.059927+00:00)"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "execution held pending human approval"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: pending"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [],
      "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "97204c2a8037ad45c78ade4ae83ef9f858b4353d3050ecb0cb00c39681a7d86b",
       "pre_verdict": "REQUIRE_APPROVAL",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_cc7750cf82e64b82a48d78bd/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_cc7750cf82e64b82a48d78bd",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "39edef8a7054360fb389aae71252ab7c646867d45a5355d9fe41044569fdea86",
        "recomputed_digest": "39edef8a7054360fb389aae71252ab7c646867d45a5355d9fe41044569fdea86",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "dd634+6uj6DIaFhrS2qR+VPUYDEZWbhrcVxv0led5AJbxgibGsCi1UZ49foSXoAQBuZxso9+22seenSL9LqbDw==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 58
     }
    },
    {
     "call": "POST /api/v1/decision/intelligence  [gateway]",
     "request": {
      "decision_id": "fd_cc7750cf82e64b82a48d78bd",
      "tenant": "cus_demo_50dcf2ae9628"
     },
     "status": 200,
     "ms": 646,
     "reply": {
      "decision": {
       "decision_id": "fd_cc7750cf82e64b82a48d78bd",
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "path": "/demo/safe-read",
       "action": null,
       "created_at": "2026-11-03T22:37:23+00:00",
       "reconstruction_source": "fabric_decisions"
      },
      "context": {
       "principal_id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
       "agent_id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
       "identity": {
        "id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
        "type": "principal",
        "source": "decision_record"
       },
       "authority": {
        "type": "delegated",
        "source": "default",
        "verified": true
       },
       "intent": {
        "inferred": "governed_action",
        "source": "policy",
        "note": "Intent not explicitly recorded - inferred from policy"
       },
       "policy": {
        "name": "cain.authz",
        "version": "default",
        "source": "decision_record"
       },
       "risk": {
        "level": "low",
        "factors": [
         {
          "stage": "risk",
          "verdict": "allow",
          "risk_score": null
         }
        ],
        "source": "stages"
       },
       "verification": {
        "performed": true,
        "stages_checked": [
         "identity",
         "intent",
         "policy",
         "authorization",
         "risk",
         "trust",
         "verification",
         "actionproof",
         "approval",
         "consensus",
         "egress",
         "toolargs",
         "artifacts",
         "enforcement",
         "execution",
         "outcome",
         "evidence"
        ]
       },
       "approval": {
        "required": false,
        "obtained": null
       }
      },
      "evidence": {
       "evidence_id": null,
       "check_id": null,
       "claim": null,
       "status": null,
       "observed": null,
       "digest": null,
       "sources": {
        "fabric_decisions": true,
        "evidence_store": false
       }
      },
      "expected_outcome": {
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "explanation": "CAIN expected to deny this action",
       "confidence": 0.95,
       "factors": {
        "policy_satisfied": true,
        "risk_acceptable": true,
        "authority_valid": true
       }
      },
      "actual_outcome": {
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "explanation": "Actual outcome not yet observable - requires execution feedback",
       "execution_observed": false,
       "deviation_detected": null
      },
      "comparison": {
       "outcome_match": true,
       "deviations": [],
       "evidence_ids": [],
       "note": "Actual outcome unknown - execution feedback not captured"
      },
      "decision_quality": {
       "correct_prediction": null,
       "policy_correct": true,
       "risk_correct": true,
       "authority_correct": true,
       "quality_score": 0.8,
       "assessment": "CORRECT_IF_POLICY_SATISFIED",
       "limitation": "Decision quality cannot be fully assessed without execution feedback"
      },
      "lessons": [
       {
        "type": "OBSERVABILITY_GAP",
        "lesson": "Cannot verify actual outcome - execution feedback not captured",
        "recommendation": "Integrate with execution monitoring to capture actual outcomes"
       }
      ],
      "counterfactual_feedback": {
       "available": true,
       "endpoint": "/api/v1/counterfactual",
       "alternative_decisions": [
        {
         "intervention": "DENY",
         "would_change": "enforcement",
         "risk_delta": "reduced",
         "impact_delta": "eliminated",
         "note": "Counterfactual only - no real execution"
        }
       ]
      },
      "causal_feedback": {
       "available": true,
       "downstream_effects": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ],
       "root_causes": [],
       "note": "Causal analysis requires trajectory data"
      },
      "tenant": "cus_demo_50dcf2ae9628",
      "timestamp": "2026-11-03T22:37:25.865863+00:00",
      "analysis_version": "1.0"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:37:26+00:00",
  "ms": 1,
  "reply": {
   "slug": "decision-intelligence",
   "title": "Make a real CAIN decision, then reconstruct its context, evidence and quality",
   "status": "ok",
   "input": null,
   "total_ms": 6895,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "safe-read"
     },
     "status": 200,
     "ms": 6199,
     "reply": {
      "scenario": {
       "id": "safe-read",
       "title": "A reasonable action",
       "explains": "A normal tool call with a declared intent, from a principal with no trust history yet. Policy and risk both pass, but unknown trust never becomes ALLOW on its own: the action is held for human approval."
      },
      "verdict": "REQUIRE_APPROVAL",
      "blocked": false,
      "decision_id": "fd_cc7750cf82e64b82a48d78bd",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no known attack pattern matched"
       },
       {
        "stage": "trust",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_a8af1966a58a4b5692856e51 (expires 2026-11-03T23:37:20.059927+00:00)"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "execution held pending human approval"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: pending"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [],
      "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "97204c2a8037ad45c78ade4ae83ef9f858b4353d3050ecb0cb00c39681a7d86b",
       "pre_verdict": "REQUIRE_APPROVAL",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_cc7750cf82e64b82a48d78bd/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_cc7750cf82e64b82a48d78bd",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "39edef8a7054360fb389aae71252ab7c646867d45a5355d9fe41044569fdea86",
        "recomputed_digest": "39edef8a7054360fb389aae71252ab7c646867d45a5355d9fe41044569fdea86",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "dd634+6uj6DIaFhrS2qR+VPUYDEZWbhrcVxv0led5AJbxgibGsCi1UZ49foSXoAQBuZxso9+22seenSL9LqbDw==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 58
     }
    },
    {
     "call": "POST /api/v1/decision/intelligence  [gateway]",
     "request": {
      "decision_id": "fd_cc7750cf82e64b82a48d78bd",
      "tenant": "cus_demo_50dcf2ae9628"
     },
     "status": 200,
     "ms": 646,
     "reply": {
      "decision": {
       "decision_id": "fd_cc7750cf82e64b82a48d78bd",
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "path": "/demo/safe-read",
       "action": null,
       "created_at": "2026-11-03T22:37:23+00:00",
       "reconstruction_source": "fabric_decisions"
      },
      "context": {
       "principal_id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
       "agent_id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
       "identity": {
        "id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
        "type": "principal",
        "source": "decision_record"
       },
       "authority": {
        "type": "delegated",
        "source": "default",
        "verified": true
       },
       "intent": {
        "inferred": "governed_action",
        "source": "policy",
        "note": "Intent not explicitly recorded - inferred from policy"
       },
       "policy": {
        "name": "cain.authz",
        "version": "default",
        "source": "decision_record"
       },
       "risk": {
        "level": "low",
        "factors": [
         {
          "stage": "risk",
          "verdict": "allow",
          "risk_score": null
         }
        ],
        "source": "stages"
       },
       "verification": {
        "performed": true,
        "stages_checked": [
         "identity",
         "intent",
         "policy",
         "authorization",
         "risk",
         "trust",
         "verification",
         "actionproof",
         "approval",
         "consensus",
         "egress",
         "toolargs",
         "artifacts",
         "enforcement",
         "execution",
         "outcome",
         "evidence"
        ]
       },
       "approval": {
        "required": false,
        "obtained": null
       }
      },
      "evidence": {
       "evidence_id": null,
       "check_id": null,
       "claim": null,
       "status": null,
       "observed": null,
       "digest": null,
       "sources": {
        "fabric_decisions": true,
        "evidence_store": false
       }
      },
      "expected_outcome": {
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "explanation": "CAIN expected to deny this action",
       "confidence": 0.95,
       "factors": {
        "policy_satisfied": true,
        "risk_acceptable": true,
        "authority_valid": true
       }
      },
      "actual_outcome": {
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "explanation": "Actual outcome not yet observable - requires execution feedback",
       "execution_observed": false,
       "deviation_detected": null
      },
      "comparison": {
       "outcome_match": true,
       "deviations": [],
       "evidence_ids": [],
       "note": "Actual outcome unknown - execution feedback not captured"
      },
      "decision_quality": {
       "correct_prediction": null,
       "policy_correct": true,
       "risk_correct": true,
       "authority_correct": true,
       "quality_score": 0.8,
       "assessment": "CORRECT_IF_POLICY_SATISFIED",
       "limitation": "Decision quality cannot be fully assessed without execution feedback"
      },
      "lessons": [
       {
        "type": "OBSERVABILITY_GAP",
        "lesson": "Cannot verify actual outcome - execution feedback not captured",
        "recommendation": "Integrate with execution monitoring to capture actual outcomes"
       }
      ],
      "counterfactual_feedback": {
       "available": true,
       "endpoint": "/api/v1/counterfactual",
       "alternative_decisions": [
        {
         "intervention": "DENY",
         "would_change": "enforcement",
         "risk_delta": "reduced",
         "impact_delta": "eliminated",
         "note": "Counterfactual only - no real execution"
        }
       ]
      },
      "causal_feedback": {
       "available": true,
       "downstream_effects": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ],
       "root_causes": [],
       "note": "Causal analysis requires trajectory data"
      },
      "tenant": "cus_demo_50dcf2ae9628",
      "timestamp": "2026-11-03T22:37:25.865863+00:00",
      "analysis_version": "1.0"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:37:26+00:00",
  "ms": 0,
  "reply": {
   "slug": "decision-intelligence",
   "title": "Make a real CAIN decision, then reconstruct its context, evidence and quality",
   "status": "ok",
   "input": null,
   "total_ms": 6895,
   "steps": [
    {
     "call": "POST /fabric/try  [gateway]",
     "request": {
      "scenario": "safe-read"
     },
     "status": 200,
     "ms": 6199,
     "reply": {
      "scenario": {
       "id": "safe-read",
       "title": "A reasonable action",
       "explains": "A normal tool call with a declared intent, from a principal with no trust history yet. Policy and risk both pass, but unknown trust never becomes ALLOW on its own: the action is held for human approval."
      },
      "verdict": "REQUIRE_APPROVAL",
      "blocked": false,
      "decision_id": "fd_cc7750cf82e64b82a48d78bd",
      "schema_version": 3,
      "chain": [
       {
        "stage": "identity",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "resolved service principal"
       },
       {
        "stage": "intent",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "intent declared by the caller"
       },
       {
        "stage": "policy",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "OPA allow"
       },
       {
        "stage": "authorization",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "entitlement active"
       },
       {
        "stage": "risk",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no known attack pattern matched"
       },
       {
        "stage": "trust",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human."
       },
       {
        "stage": "verification",
        "verdict": "skipped",
        "enforcing": false,
        "ran": false,
        "detail": "no plan submitted, so there was nothing to verify structurally"
       },
       {
        "stage": "actionproof",
        "verdict": "skipped",
        "enforcing": true,
        "ran": false,
        "detail": "no plan submitted"
       },
       {
        "stage": "approval",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "the trust stage needs a human for this action (trust=unknown, risk=low, decision=require_approval -- 0 of 5 approved actions so far. After 5 more, low-risk actions like this one run without a human.); held for review as ap_a8af1966a58a4b5692856e51 (expires 2026-11-03T23:37:20.059927+00:00)"
       },
       {
        "stage": "consensus",
        "verdict": "deferred",
        "enforcing": false,
        "ran": true,
        "detail": "REQUIRE_APPROVAL permits nothing, so the reply did not wait for the cluster; this exact commitment is being ordered by 2f+1 replicas now"
       },
       {
        "stage": "egress",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "the action names no network destination to screen"
       },
       {
        "stage": "toolargs",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no tool named in the payload to validate"
       },
       {
        "stage": "artifacts",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "no artifacts or skills named to verify"
       },
       {
        "stage": "enforcement",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "decision lands on the hosted gateway in this deployment's call path"
       },
       {
        "stage": "execution",
        "verdict": "require_approval",
        "enforcing": true,
        "ran": true,
        "detail": "execution held pending human approval"
       },
       {
        "stage": "outcome",
        "verdict": "allow",
        "enforcing": true,
        "ran": true,
        "detail": "action lifecycle reached terminal state: pending"
       },
       {
        "stage": "evidence",
        "verdict": "allow",
        "enforcing": false,
        "ran": true,
        "detail": "decision recorded in the evidence store"
       }
      ],
      "enforcing": true,
      "mode": "enforce",
      "blocked_by": [],
      "why": "You are a brand-new principal with no trust history, so the TRUST stage held even this action for human approval: unknown trust never becomes an automatic allow. A principal with an established record is evaluated on that record.",
      "consensus": {
       "mode": "deferred",
       "commitment_sha256": "97204c2a8037ad45c78ade4ae83ef9f858b4353d3050ecb0cb00c39681a7d86b",
       "pre_verdict": "REQUIRE_APPROVAL",
       "commitment_covers": "sha256(canonical JSON of decision_id, tenant, principal_id, agent_id, service, path, the stages before this one, pre_verdict)",
       "verify": "/fabric/decisions/fd_cc7750cf82e64b82a48d78bd/integrity"
      },
      "evidence": {
       "integrity": {
        "found": true,
        "decision_id": "fd_cc7750cf82e64b82a48d78bd",
        "verifiable": true,
        "intact": true,
        "digest_matches": true,
        "schema_version": 3,
        "stored_digest": "39edef8a7054360fb389aae71252ab7c646867d45a5355d9fe41044569fdea86",
        "recomputed_digest": "39edef8a7054360fb389aae71252ab7c646867d45a5355d9fe41044569fdea86",
        "record_signature": {
         "signed": true,
         "signature_valid": true,
         "key_id": "8fcdf85b4a675f0e",
         "signature_b64": "dd634+6uj6DIaFhrS2qR+VPUYDEZWbhrcVxv0led5AJbxgibGsCi1UZ49foSXoAQBuZxso9+22seenSL9LqbDw==",
         "detail": null
        },
        "scitt_statement_id": null,
        "guarantee_level": "signed: an edit is detectable even if the digest was recomputed, unless the editor also holds the gateway's signing key",
        "consensus_anchor": {
         "anchored": false,
         "applicable": true,
         "mode": "deferred",
         "status": "pending",
         "detail": "ordering by the cluster is still pending (attempt 1)"
        }
       },
       "note": "this record's digest was recomputed just now and compared"
      },
      "next": {
       "other_scenarios": "GET /fabric/try",
       "the_evidence_standard": "https://cainstudio.online/fabric/proof",
       "protect_your_own_agent": "get a free API key at https://cainstudio.online/signup, then follow https://cainstudio.online/quickstart (HTTP API, or the Python SDK: pip install https://cainstudio.online/cainstudio-0.6.2-py3-none-any.whl)"
      },
      "honest_note": "A real decision on a throwaway tenant, with enforcement forced on for the demonstration. This deployment's own default for verification is FABRIC_VERIFY_ENFORCE=true. ActionProof is not exercised here: it authenticates against your own API key, which a no-signup demo does not have.",
      "rate_limit_remaining": 58
     }
    },
    {
     "call": "POST /api/v1/decision/intelligence  [gateway]",
     "request": {
      "decision_id": "fd_cc7750cf82e64b82a48d78bd",
      "tenant": "cus_demo_50dcf2ae9628"
     },
     "status": 200,
     "ms": 646,
     "reply": {
      "decision": {
       "decision_id": "fd_cc7750cf82e64b82a48d78bd",
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "path": "/demo/safe-read",
       "action": null,
       "created_at": "2026-11-03T22:37:23+00:00",
       "reconstruction_source": "fabric_decisions"
      },
      "context": {
       "principal_id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
       "agent_id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
       "identity": {
        "id": "urn:cain:principal:service:391094f167224b0dbf20ab29",
        "type": "principal",
        "source": "decision_record"
       },
       "authority": {
        "type": "delegated",
        "source": "default",
        "verified": true
       },
       "intent": {
        "inferred": "governed_action",
        "source": "policy",
        "note": "Intent not explicitly recorded - inferred from policy"
       },
       "policy": {
        "name": "cain.authz",
        "version": "default",
        "source": "decision_record"
       },
       "risk": {
        "level": "low",
        "factors": [
         {
          "stage": "risk",
          "verdict": "allow",
          "risk_score": null
         }
        ],
        "source": "stages"
       },
       "verification": {
        "performed": true,
        "stages_checked": [
         "identity",
         "intent",
         "policy",
         "authorization",
         "risk",
         "trust",
         "verification",
         "actionproof",
         "approval",
         "consensus",
         "egress",
         "toolargs",
         "artifacts",
         "enforcement",
         "execution",
         "outcome",
         "evidence"
        ]
       },
       "approval": {
        "required": false,
        "obtained": null
       }
      },
      "evidence": {
       "evidence_id": null,
       "check_id": null,
       "claim": null,
       "status": null,
       "observed": null,
       "digest": null,
       "sources": {
        "fabric_decisions": true,
        "evidence_store": false
       }
      },
      "expected_outcome": {
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "explanation": "CAIN expected to deny this action",
       "confidence": 0.95,
       "factors": {
        "policy_satisfied": true,
        "risk_acceptable": true,
        "authority_valid": true
       }
      },
      "actual_outcome": {
       "verdict": "REQUIRE_APPROVAL",
       "enforcement": "BLOCK",
       "explanation": "Actual outcome not yet observable - requires execution feedback",
       "execution_observed": false,
       "deviation_detected": null
      },
      "comparison": {
       "outcome_match": true,
       "deviations": [],
       "evidence_ids": [],
       "note": "Actual outcome unknown - execution feedback not captured"
      },
      "decision_quality": {
       "correct_prediction": null,
       "policy_correct": true,
       "risk_correct": true,
       "authority_correct": true,
       "quality_score": 0.8,
       "assessment": "CORRECT_IF_POLICY_SATISFIED",
       "limitation": "Decision quality cannot be fully assessed without execution feedback"
      },
      "lessons": [
       {
        "type": "OBSERVABILITY_GAP",
        "lesson": "Cannot verify actual outcome - execution feedback not captured",
        "recommendation": "Integrate with execution monitoring to capture actual outcomes"
       }
      ],
      "counterfactual_feedback": {
       "available": true,
       "endpoint": "/api/v1/counterfactual",
       "alternative_decisions": [
        {
         "intervention": "DENY",
         "would_change": "enforcement",
         "risk_delta": "reduced",
         "impact_delta": "eliminated",
         "note": "Counterfactual only - no real execution"
        }
       ]
      },
      "causal_feedback": {
       "available": true,
       "downstream_effects": [
        "ENFORCEMENT",
        "EXECUTION",
        "EFFECT",
        "IMPACT"
       ],
       "root_causes": [],
       "note": "Causal analysis requires trajectory data"
      },
      "tenant": "cus_demo_50dcf2ae9628",
      "timestamp": "2026-11-03T22:37:25.865863+00:00",
      "analysis_version": "1.0"
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]