[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:55:04+00:00",
  "ms": 133,
  "reply": {
   "slug": "trust-state-engine",
   "title": "Record a policy violation, then watch trust gate a high-risk action",
   "status": "ok",
   "input": null,
   "total_ms": 81,
   "steps": [
    {
     "call": "POST /trust/event",
     "request": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "event_type": "policy_violated",
      "event_data": {
       "detail": "tried to read another tenant's data"
      },
      "risk_level": "high"
     },
     "status": 200,
     "ms": 52,
     "reply": {
      "event_id": "te_9ab0f1fd0dc34d61ad428632",
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "trust_version": 2
     }
    },
    {
     "call": "POST /authorize",
     "request": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "action": "write",
      "resource": "customer-db",
      "risk_level": "high"
     },
     "status": 200,
     "ms": 7,
     "reply": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "risk_level": "high",
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "authorization_decision": "deny",
      "requires_approval": false,
      "denied": true,
      "monitoring_required": false,
      "reason": "HIGH risk action with DEGRADED trust -> DENY",
      "evidence_summary": {
       "trust_version": 2,
       "positive_signals": 0,
       "negative_signals": 1,
       "violations": 1,
       "confidence": 0.0,
       "is_expired": false
      },
      "expires_at": "2026-11-04T22:55:04.178752+00:00",
      "trust_version": 2
     }
    },
    {
     "call": "GET /trust/public-demo/agent-067917e3/explanation",
     "request": null,
     "status": 200,
     "ms": 8,
     "reply": {
      "principal_id": "agent-067917e3",
      "tenant": "public-demo",
      "generated_at": "2026-11-03T22:55:04.196604+00:00",
      "why_trust_changed": "Trust degraded due to: 1 policy violation(s) detected",
      "what_evidence_changed_it": [
       {
        "type": "trust_state_change",
        "previous": "unknown",
        "current": "degraded",
        "changed_at": "2026-11-03T22:55:04.179875+00:00",
        "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8",
        "reason": "Trust transitioned from unknown to degraded"
       },
       {
        "type": "negative_evidence",
        "count": 1,
        "violations": 1,
        "events": [
         {
          "event_id": "te_9ab0f1fd0dc34d61ad428632",
          "event_type": "policy_violated",
          "at": "2026-11-03T22:55:04.142027+00:00"
         }
        ],
        "reason": "Negative evidence recorded in the trust window"
       }
      ],
      "which_events_mattered": [
       {
        "event_type": "policy_violated",
        "significance": "major",
        "timestamp": "2026-11-03T22:55:04.142027+00:00",
        "event_data": {
         "detail": "tried to read another tenant's data"
        }
       }
      ],
      "what_trust_was_before": {
       "trust_state": "unknown",
       "trust_version": 1,
       "until": "2026-11-03T22:55:04.179875+00:00",
       "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8"
      },
      "what_trust_is_now": {
       "trust_state": "degraded",
       "trust_score": 0.48499974641798727,
       "trust_version": 2,
       "violations": 1,
       "negative_signals": 1,
       "positive_signals": 0,
       "effective_at": "2026-11-03T22:55:04.178747+00:00",
       "expires_at": "2026-11-04T22:55:04.178752+00:00",
       "confidence": 0.0,
       "is_expired": false
      },
      "trust_version": 2,
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "evidence_summary": {
       "total_events": 1,
       "positive_signals": 0,
       "negative_signals": 1,
       "violations": 1
      },
      "what_actions_are_affected": {
       "low": {
        "decision": "require_approval",
        "requires_approval": true,
        "denied": false,
        "monitoring_required": false
       },
       "medium": {
        "decision": "require_approval",
        "requires_approval": true,
        "denied": false,
        "monitoring_required": false
       },
       "high": {
        "decision": "deny",
        "requires_approval": false,
        "denied": true,
        "monitoring_required": false
       },
       "critical": {
        "decision": "deny",
        "requires_approval": false,
        "denied": true,
        "monitoring_required": false
       }
      },
      "raw_evidence": {
       "trust_events": [
        {
         "event_id": "te_9ab0f1fd0dc34d61ad428632",
         "tenant": "public-demo",
         "principal_id": "agent-067917e3",
         "event_type": "policy_violated",
         "event_data": "{\"detail\": \"tried to read another tenant's data\"}",
         "evidence_ids": "[]",
         "risk_level": "high",
         "trust_state_before": null,
         "trust_state_after": null,
         "trust_score_before": null,
         "trust_score_after": null,
         "decision_id": null,
         "chain_id": null,
         "created_at": "2026-11-03T22:55:04.142027+00:00"
        }
       ],
       "trust_transitions": [
        {
         "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8",
         "tenant": "public-demo",
         "principal_id": "agent-067917e3",
         "previous_state": "unknown",
         "new_state": "degraded",
         "trigger": "drift_detected",
         "trigger_details": "Trust transitioned from unknown to degraded",
         "evidence_ids": "[\"te_9ab0f1fd0dc34d61ad428632\"]",
         "policy_id": null,
         "authorized_by": null,
         "created_at": "2026-11-03T22:55:04.179875+00:00"
        }
       ],
       "fabric_decisions": [],
       "fabric_decisions_attached": false,
       "evidence_ids": [
        "te_9ab0f1fd0dc34d61ad428632"
       ]
      }
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:55:04+00:00",
  "ms": 0,
  "reply": {
   "slug": "trust-state-engine",
   "title": "Record a policy violation, then watch trust gate a high-risk action",
   "status": "ok",
   "input": null,
   "total_ms": 81,
   "steps": [
    {
     "call": "POST /trust/event",
     "request": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "event_type": "policy_violated",
      "event_data": {
       "detail": "tried to read another tenant's data"
      },
      "risk_level": "high"
     },
     "status": 200,
     "ms": 52,
     "reply": {
      "event_id": "te_9ab0f1fd0dc34d61ad428632",
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "trust_version": 2
     }
    },
    {
     "call": "POST /authorize",
     "request": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "action": "write",
      "resource": "customer-db",
      "risk_level": "high"
     },
     "status": 200,
     "ms": 7,
     "reply": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "risk_level": "high",
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "authorization_decision": "deny",
      "requires_approval": false,
      "denied": true,
      "monitoring_required": false,
      "reason": "HIGH risk action with DEGRADED trust -> DENY",
      "evidence_summary": {
       "trust_version": 2,
       "positive_signals": 0,
       "negative_signals": 1,
       "violations": 1,
       "confidence": 0.0,
       "is_expired": false
      },
      "expires_at": "2026-11-04T22:55:04.178752+00:00",
      "trust_version": 2
     }
    },
    {
     "call": "GET /trust/public-demo/agent-067917e3/explanation",
     "request": null,
     "status": 200,
     "ms": 8,
     "reply": {
      "principal_id": "agent-067917e3",
      "tenant": "public-demo",
      "generated_at": "2026-11-03T22:55:04.196604+00:00",
      "why_trust_changed": "Trust degraded due to: 1 policy violation(s) detected",
      "what_evidence_changed_it": [
       {
        "type": "trust_state_change",
        "previous": "unknown",
        "current": "degraded",
        "changed_at": "2026-11-03T22:55:04.179875+00:00",
        "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8",
        "reason": "Trust transitioned from unknown to degraded"
       },
       {
        "type": "negative_evidence",
        "count": 1,
        "violations": 1,
        "events": [
         {
          "event_id": "te_9ab0f1fd0dc34d61ad428632",
          "event_type": "policy_violated",
          "at": "2026-11-03T22:55:04.142027+00:00"
         }
        ],
        "reason": "Negative evidence recorded in the trust window"
       }
      ],
      "which_events_mattered": [
       {
        "event_type": "policy_violated",
        "significance": "major",
        "timestamp": "2026-11-03T22:55:04.142027+00:00",
        "event_data": {
         "detail": "tried to read another tenant's data"
        }
       }
      ],
      "what_trust_was_before": {
       "trust_state": "unknown",
       "trust_version": 1,
       "until": "2026-11-03T22:55:04.179875+00:00",
       "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8"
      },
      "what_trust_is_now": {
       "trust_state": "degraded",
       "trust_score": 0.48499974641798727,
       "trust_version": 2,
       "violations": 1,
       "negative_signals": 1,
       "positive_signals": 0,
       "effective_at": "2026-11-03T22:55:04.178747+00:00",
       "expires_at": "2026-11-04T22:55:04.178752+00:00",
       "confidence": 0.0,
       "is_expired": false
      },
      "trust_version": 2,
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "evidence_summary": {
       "total_events": 1,
       "positive_signals": 0,
       "negative_signals": 1,
       "violations": 1
      },
      "what_actions_are_affected": {
       "low": {
        "decision": "require_approval",
        "requires_approval": true,
        "denied": false,
        "monitoring_required": false
       },
       "medium": {
        "decision": "require_approval",
        "requires_approval": true,
        "denied": false,
        "monitoring_required": false
       },
       "high": {
        "decision": "deny",
        "requires_approval": false,
        "denied": true,
        "monitoring_required": false
       },
       "critical": {
        "decision": "deny",
        "requires_approval": false,
        "denied": true,
        "monitoring_required": false
       }
      },
      "raw_evidence": {
       "trust_events": [
        {
         "event_id": "te_9ab0f1fd0dc34d61ad428632",
         "tenant": "public-demo",
         "principal_id": "agent-067917e3",
         "event_type": "policy_violated",
         "event_data": "{\"detail\": \"tried to read another tenant's data\"}",
         "evidence_ids": "[]",
         "risk_level": "high",
         "trust_state_before": null,
         "trust_state_after": null,
         "trust_score_before": null,
         "trust_score_after": null,
         "decision_id": null,
         "chain_id": null,
         "created_at": "2026-11-03T22:55:04.142027+00:00"
        }
       ],
       "trust_transitions": [
        {
         "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8",
         "tenant": "public-demo",
         "principal_id": "agent-067917e3",
         "previous_state": "unknown",
         "new_state": "degraded",
         "trigger": "drift_detected",
         "trigger_details": "Trust transitioned from unknown to degraded",
         "evidence_ids": "[\"te_9ab0f1fd0dc34d61ad428632\"]",
         "policy_id": null,
         "authorized_by": null,
         "created_at": "2026-11-03T22:55:04.179875+00:00"
        }
       ],
       "fabric_decisions": [],
       "fabric_decisions_attached": false,
       "evidence_ids": [
        "te_9ab0f1fd0dc34d61ad428632"
       ]
      }
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T22:55:05+00:00",
  "ms": 0,
  "reply": {
   "slug": "trust-state-engine",
   "title": "Record a policy violation, then watch trust gate a high-risk action",
   "status": "ok",
   "input": null,
   "total_ms": 81,
   "steps": [
    {
     "call": "POST /trust/event",
     "request": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "event_type": "policy_violated",
      "event_data": {
       "detail": "tried to read another tenant's data"
      },
      "risk_level": "high"
     },
     "status": 200,
     "ms": 52,
     "reply": {
      "event_id": "te_9ab0f1fd0dc34d61ad428632",
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "trust_version": 2
     }
    },
    {
     "call": "POST /authorize",
     "request": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "action": "write",
      "resource": "customer-db",
      "risk_level": "high"
     },
     "status": 200,
     "ms": 7,
     "reply": {
      "tenant": "public-demo",
      "principal_id": "agent-067917e3",
      "risk_level": "high",
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "authorization_decision": "deny",
      "requires_approval": false,
      "denied": true,
      "monitoring_required": false,
      "reason": "HIGH risk action with DEGRADED trust -> DENY",
      "evidence_summary": {
       "trust_version": 2,
       "positive_signals": 0,
       "negative_signals": 1,
       "violations": 1,
       "confidence": 0.0,
       "is_expired": false
      },
      "expires_at": "2026-11-04T22:55:04.178752+00:00",
      "trust_version": 2
     }
    },
    {
     "call": "GET /trust/public-demo/agent-067917e3/explanation",
     "request": null,
     "status": 200,
     "ms": 8,
     "reply": {
      "principal_id": "agent-067917e3",
      "tenant": "public-demo",
      "generated_at": "2026-11-03T22:55:04.196604+00:00",
      "why_trust_changed": "Trust degraded due to: 1 policy violation(s) detected",
      "what_evidence_changed_it": [
       {
        "type": "trust_state_change",
        "previous": "unknown",
        "current": "degraded",
        "changed_at": "2026-11-03T22:55:04.179875+00:00",
        "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8",
        "reason": "Trust transitioned from unknown to degraded"
       },
       {
        "type": "negative_evidence",
        "count": 1,
        "violations": 1,
        "events": [
         {
          "event_id": "te_9ab0f1fd0dc34d61ad428632",
          "event_type": "policy_violated",
          "at": "2026-11-03T22:55:04.142027+00:00"
         }
        ],
        "reason": "Negative evidence recorded in the trust window"
       }
      ],
      "which_events_mattered": [
       {
        "event_type": "policy_violated",
        "significance": "major",
        "timestamp": "2026-11-03T22:55:04.142027+00:00",
        "event_data": {
         "detail": "tried to read another tenant's data"
        }
       }
      ],
      "what_trust_was_before": {
       "trust_state": "unknown",
       "trust_version": 1,
       "until": "2026-11-03T22:55:04.179875+00:00",
       "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8"
      },
      "what_trust_is_now": {
       "trust_state": "degraded",
       "trust_score": 0.48499974641798727,
       "trust_version": 2,
       "violations": 1,
       "negative_signals": 1,
       "positive_signals": 0,
       "effective_at": "2026-11-03T22:55:04.178747+00:00",
       "expires_at": "2026-11-04T22:55:04.178752+00:00",
       "confidence": 0.0,
       "is_expired": false
      },
      "trust_version": 2,
      "trust_state": "degraded",
      "trust_score": 0.48499974641798727,
      "evidence_summary": {
       "total_events": 1,
       "positive_signals": 0,
       "negative_signals": 1,
       "violations": 1
      },
      "what_actions_are_affected": {
       "low": {
        "decision": "require_approval",
        "requires_approval": true,
        "denied": false,
        "monitoring_required": false
       },
       "medium": {
        "decision": "require_approval",
        "requires_approval": true,
        "denied": false,
        "monitoring_required": false
       },
       "high": {
        "decision": "deny",
        "requires_approval": false,
        "denied": true,
        "monitoring_required": false
       },
       "critical": {
        "decision": "deny",
        "requires_approval": false,
        "denied": true,
        "monitoring_required": false
       }
      },
      "raw_evidence": {
       "trust_events": [
        {
         "event_id": "te_9ab0f1fd0dc34d61ad428632",
         "tenant": "public-demo",
         "principal_id": "agent-067917e3",
         "event_type": "policy_violated",
         "event_data": "{\"detail\": \"tried to read another tenant's data\"}",
         "evidence_ids": "[]",
         "risk_level": "high",
         "trust_state_before": null,
         "trust_state_after": null,
         "trust_score_before": null,
         "trust_score_after": null,
         "decision_id": null,
         "chain_id": null,
         "created_at": "2026-11-03T22:55:04.142027+00:00"
        }
       ],
       "trust_transitions": [
        {
         "transition_id": "tt_52ac54bc0b0e4cc8b2e702a8",
         "tenant": "public-demo",
         "principal_id": "agent-067917e3",
         "previous_state": "unknown",
         "new_state": "degraded",
         "trigger": "drift_detected",
         "trigger_details": "Trust transitioned from unknown to degraded",
         "evidence_ids": "[\"te_9ab0f1fd0dc34d61ad428632\"]",
         "policy_id": null,
         "authorized_by": null,
         "created_at": "2026-11-03T22:55:04.179875+00:00"
        }
       ],
       "fabric_decisions": [],
       "fabric_decisions_attached": false,
       "evidence_ids": [
        "te_9ab0f1fd0dc34d61ad428632"
       ]
      }
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]