[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:39+00:00",
  "ms": 46,
  "reply": {
   "product": "swarm-guard",
   "preset": "allowlisted_read",
   "reply": {
    "tool_ran": true,
    "decision": "ALLOW",
    "reason": "Inside the allowlist and below every risk floor."
   }
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:39+00:00",
  "ms": 37,
  "reply": {
   "product": "swarm-guard",
   "preset": "unknown_tool",
   "reply": {
    "tool_ran": false,
    "decision": "REQUIRE_APPROVAL",
    "reason": "CAIN Trust Fabric requires approval for action 'read_report' on 'db:reports'. Reason: Unknown action 'read_report': not on the allowlist (default-deny). Add it to guard(allow=[...]) or CAIN_ALLOWED_ACTIONS, or approve it."
   }
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:40+00:00",
  "ms": 59,
  "reply": {
   "product": "swarm-guard",
   "preset": "delete_users",
   "reply": {
    "tool_ran": false,
    "decision": "REQUIRE_APPROVAL",
    "reason": "CAIN Trust Fabric requires approval for action 'delete_users' on 'db:prod_users'. Reason: Action with blast radius 'TENANT_WIDE' requires quorum approval under zero-trust floor."
   }
  }
 },
 {
  "id": "C04",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:41+00:00",
  "ms": 73,
  "reply": {
   "product": "swarm-guard",
   "preset": "pipe_to_shell",
   "reply": {
    "tool_ran": false,
    "decision": "REQUIRE_APPROVAL",
    "reason": "CAIN Trust Fabric requires approval for action 'run_shell' on 'shell'. Reason: Action with blast radius 'TENANT_WIDE' requires quorum approval under zero-trust floor."
   }
  }
 },
 {
  "id": "C05",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:41+00:00",
  "ms": 45,
  "reply": {
   "product": "swarm-guard",
   "preset": "high_risk_payment",
   "reply": {
    "tool_ran": false,
    "decision": "REQUIRE_APPROVAL",
    "reason": "CAIN Trust Fabric requires approval for action 'wire' on 'bank'. Reason: HIGH risk operation requires authorization approval."
   }
  }
 },
 {
  "id": "C06",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:42+00:00",
  "ms": 148,
  "reply": {
   "product": "swarm-guard",
   "preset": "handoff_narrower",
   "reply": {
    "handoff_allowed": true,
    "within_parent": true,
    "grants_authority": false
   }
  }
 },
 {
  "id": "C07",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:42+00:00",
  "ms": 117,
  "reply": {
   "product": "swarm-guard",
   "preset": "handoff_wider_scope",
   "reply": {
    "handoff_allowed": false,
    "reason": "CAPABILITY_EXPANSION_REJECTED:SCOPE_ESCALATION"
   }
  }
 },
 {
  "id": "C08",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:34:43+00:00",
  "ms": 36,
  "reply": {
   "product": "swarm-guard",
   "preset": "handoff_longer_life",
   "reply": {
    "handoff_allowed": false,
    "reason": "CAPABILITY_EXPANSION_REJECTED:EXPIRY_EXTENSION"
   }
  }
 }
]