{
  "passports": [
    {
      "schema": "cain42.e14.capability-passport.v1",
      "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
      "manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
      "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
      "publisher_principal": "publisher:acme",
      "version": "1.0.0",
      "provenance": {
        "publisher_principal": "publisher:acme",
        "name": "kv.get",
        "version": "1.0.0",
        "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "source_uri": "https://git.example/acme/kv.get",
        "repository": "acme/kv.get",
        "source_commit": "cccccccccccccccccccccccccccccccccccccccc",
        "build_id": "build-1.0.0",
        "builder": "ci:acme",
        "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7",
        "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20",
        "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=",
        "publisher_signature_b64": "alJ3PK0FB0MG8X96adpkqJDEWdG1NR/dSAaPetTyQfcHeXvcOtuH2vpwCWcQE/xPetZ1IMvikyZrP4xDuDIsBA=="
      },
      "dependency_provenance": [],
      "permissions": [
        "CALL_MCP_TOOL",
        "READ_DATA"
      ],
      "trust_state": "ADMITTED",
      "policy_bindings": [
        "5d60072ec26728cac2c3e35408084809cd82a2e93c4e84e964a75801cd5a9ed7"
      ],
      "authority_requirements": [],
      "execution_conditions": {
        "max_lease_ttl": 120.0,
        "sandbox_profile_digest": "f752b06616d144e77bda07756bc6c1afb276aa8ee4374b116c0640b293ae876b",
        "tenants": [
          "tenant-a"
        ]
      },
      "attestation_digest": "001b756cd7f7746a21c8a8b14b297d23816febc0aa8fb5c91c7deb1d5e4b05f3",
      "version_history": [],
      "mutations": [],
      "revocations": [],
      "evidence": [],
      "security_metadata": {
        "attestation_level": "SOFTWARE_CONFIGURATION",
        "hardware_attestation": "UNKNOWN",
        "vulnerability_intelligence": "UNKNOWN"
      },
      "issued_at": 1000.0,
      "issuer": "cain:e14-fabric",
      "digest": "55e5702098e0a93dd14823e5c1e28120538f54f2c5e2f1c46f8130e2a0d77702",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "+nz7jIkWx1fb2TGfAT+S7WNCywBDmilV5YKiyUWS37XLh1AuzCMdHr4IJHWRj0lHqdSfTLX45ttWkffinrImDA==",
      "authority": "NONE"
    },
    {
      "schema": "cain42.e14.capability-passport.v1",
      "capability_id": "cap:3795533e24704a1c5bde96e8c685b24ce3f9e04c5dd102811d6ee0d2d763fd3b",
      "manifest_digest": "6f98ef1834a67979045109653afccab962cec6a7b9ffa3967269c791e6037594",
      "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
      "publisher_principal": "publisher:acme",
      "version": "1.0.0",
      "provenance": {
        "publisher_principal": "publisher:acme",
        "name": "vault.read",
        "version": "1.0.0",
        "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "source_uri": "https://git.example/acme/vault.read",
        "repository": "acme/vault.read",
        "source_commit": "cccccccccccccccccccccccccccccccccccccccc",
        "build_id": "build-1.0.0",
        "builder": "ci:acme",
        "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7",
        "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20",
        "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=",
        "publisher_signature_b64": "anuRj71f1XiCnVxzk0kgJ3SmmjqoBIHzl3+6rbbir2IDMguK6Eg2LrNeWJ9+SP54prKKuoAPO6zqNv/K3Y2LBg=="
      },
      "dependency_provenance": [],
      "permissions": [
        "CALL_MCP_TOOL",
        "READ_SECRET"
      ],
      "trust_state": "ADMITTED",
      "policy_bindings": [
        "5d60072ec26728cac2c3e35408084809cd82a2e93c4e84e964a75801cd5a9ed7"
      ],
      "authority_requirements": [],
      "execution_conditions": {
        "max_lease_ttl": 120.0,
        "sandbox_profile_digest": "b8950708d6072b3f808c1a7f4681051ee4aacf22ec08001b17476c24f3939d3d",
        "tenants": [
          "tenant-a"
        ]
      },
      "attestation_digest": "2524ea389719b5768c08998ab7d5cf6372769bd26a3f45dbabd3b8e5dc7753bc",
      "version_history": [],
      "mutations": [],
      "revocations": [],
      "evidence": [],
      "security_metadata": {
        "attestation_level": "SOFTWARE_CONFIGURATION",
        "hardware_attestation": "UNKNOWN",
        "vulnerability_intelligence": "UNKNOWN"
      },
      "issued_at": 1000.0,
      "issuer": "cain:e14-fabric",
      "digest": "db6c0c46a4dce5074ff8fffc4ea4bc9a0cac1570588903e25245b416d06a1e1c",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "gXt202agpgmGOTLMn4EyojjoDGqophO/wdUF/o51QgwTYbtH4URtfoIsLqUjce3uQofgViefsptGxNstNG49CA==",
      "authority": "NONE"
    },
    {
      "schema": "cain42.e14.capability-passport.v1",
      "capability_id": "cap:be016deede3cf106ea3cbc9622c941893d7c1d536d99572407af6c461c5ab872",
      "manifest_digest": "70b52d6da1b96505709532cacc66e5bb78416eed68471f10e4509d7035165126",
      "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
      "publisher_principal": "publisher:acme",
      "version": "1.0.0",
      "provenance": {
        "publisher_principal": "publisher:acme",
        "name": "http.post",
        "version": "1.0.0",
        "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "source_uri": "https://git.example/acme/http.post",
        "repository": "acme/http.post",
        "source_commit": "cccccccccccccccccccccccccccccccccccccccc",
        "build_id": "build-1.0.0",
        "builder": "ci:acme",
        "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7",
        "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20",
        "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=",
        "publisher_signature_b64": "LS+XEEPbbeEHTFwvQkcok2UYM/PQ3Hr/zNeabcTgu9BFueoA1zrmJM8GnVq718cJ/BRrH23fmM597gSQrYsVDg=="
      },
      "dependency_provenance": [],
      "permissions": [
        "CALL_MCP_TOOL",
        "NETWORK_ACCESS"
      ],
      "trust_state": "ADMITTED",
      "policy_bindings": [
        "5d60072ec26728cac2c3e35408084809cd82a2e93c4e84e964a75801cd5a9ed7"
      ],
      "authority_requirements": [],
      "execution_conditions": {
        "max_lease_ttl": 120.0,
        "sandbox_profile_digest": "39acdf49e562c753feb84430aa1123002003b36474a97b0b6cdf93648a386f02",
        "tenants": [
          "tenant-a"
        ]
      },
      "attestation_digest": "9f4f3ccaf12358eba1cf1bcfb1717bc6d9135481a733523efed4d5bc68fb283f",
      "version_history": [],
      "mutations": [],
      "revocations": [],
      "evidence": [],
      "security_metadata": {
        "attestation_level": "SOFTWARE_CONFIGURATION",
        "hardware_attestation": "UNKNOWN",
        "vulnerability_intelligence": "UNKNOWN"
      },
      "issued_at": 1000.0,
      "issuer": "cain:e14-fabric",
      "digest": "8ced08c0e1e732583664db79b6f4596f4c0d88aa4cbbb9e7f1aa44cd11b3be8c",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "qOJmbSJl8gVmtaBE12uRMorLaQll+DRV4ojxjBCbGK/ANA4gcS3rFnLA+fMPh0BOD0qU145qlxjowJ1ejVvUAw==",
      "authority": "NONE"
    },
    {
      "schema": "cain42.e14.capability-passport.v1",
      "capability_id": "cap:f3269b84c6e29a9245d6f0b8f072495325fbfe0a84f4b41f9161bf28eeaae1b7",
      "manifest_digest": "73c72e4ece2f405bb19cda4fde2208c5d576ca6921ef15ed6dedd9c9fbdc0178",
      "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "dependency_digest": "48719f06e462db7e0c35b9d7586bf948a5af177baf1d6feebd23b8aabb2cb5da",
      "publisher_principal": "publisher:acme",
      "version": "1.0.0",
      "provenance": {
        "publisher_principal": "publisher:acme",
        "name": "fmt",
        "version": "1.0.0",
        "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "source_uri": "https://git.example/acme/fmt",
        "repository": "acme/fmt",
        "source_commit": "cccccccccccccccccccccccccccccccccccccccc",
        "build_id": "build-1.0.0",
        "builder": "ci:acme",
        "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7",
        "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20",
        "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=",
        "publisher_signature_b64": "cM2d7wX6hX3qoyg28i70zQouBd6Jis9xnxTLO53cGCUgBu5ANA8AH0wLY6ad+7I/QyiFiMumP1IxDwFXtL0sAA=="
      },
      "dependency_provenance": [
        {
          "name": "parser",
          "version": "2.0.0",
          "digest": "1111111111111111111111111111111111111111111111111111111111111111",
          "publisher": "publisher:acme",
          "required_permissions": []
        }
      ],
      "permissions": [
        "CALL_MCP_TOOL",
        "READ_DATA"
      ],
      "trust_state": "ADMITTED",
      "policy_bindings": [
        "5d60072ec26728cac2c3e35408084809cd82a2e93c4e84e964a75801cd5a9ed7"
      ],
      "authority_requirements": [],
      "execution_conditions": {
        "max_lease_ttl": 120.0,
        "sandbox_profile_digest": "37f8695ba651adcc1f57016e65a68fde26b62993c4e680c3f090806e1bd6b8d0",
        "tenants": [
          "tenant-a"
        ]
      },
      "attestation_digest": "46dcbf5d9fe6e9bbc4cea6f35a0cbbbfbf66268fbeec1359ac80d5463009daa2",
      "version_history": [],
      "mutations": [],
      "revocations": [],
      "evidence": [],
      "security_metadata": {
        "attestation_level": "SOFTWARE_CONFIGURATION",
        "hardware_attestation": "UNKNOWN",
        "vulnerability_intelligence": "UNKNOWN"
      },
      "issued_at": 1000.0,
      "issuer": "cain:e14-fabric",
      "digest": "daeb8def02fa5879d5e065ad5c095c3751cc7160f69cae80334765748a7bf43b",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "aHOXjDQtd8ftZfzGaIbYlzoMAULoaI6mphcHrHlNhkWehWti71pHjIqN4tmLoprz2ACSYJ60u7Wgwc78dR6xCg==",
      "authority": "NONE"
    },
    {
      "schema": "cain42.e14.capability-passport.v1",
      "capability_id": "cap:03e8823d7a3c135cab092900b69cc82a396d050c0c7e5409b989c753ecf881f3",
      "manifest_digest": "b5757db838630ecb385eeef506e705f244a049a76100bbd2ba27958062a5400c",
      "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
      "publisher_principal": "publisher:acme",
      "version": "1.0.0",
      "provenance": {
        "publisher_principal": "publisher:acme",
        "name": "summarize",
        "version": "1.0.0",
        "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "source_uri": "https://git.example/acme/summarize",
        "repository": "acme/summarize",
        "source_commit": "cccccccccccccccccccccccccccccccccccccccc",
        "build_id": "build-1.0.0",
        "builder": "ci:acme",
        "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7",
        "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20",
        "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=",
        "publisher_signature_b64": "dYXfAhsdJVkIVKBkv17Kdz+IZRL22kK7Kz834fV5JfkOi3a14zoatimY+pmppYuGBZceh11KUbt9xJUeYGs6AQ=="
      },
      "dependency_provenance": [],
      "permissions": [
        "READ_DATA"
      ],
      "trust_state": "ADMITTED",
      "policy_bindings": [
        "5d60072ec26728cac2c3e35408084809cd82a2e93c4e84e964a75801cd5a9ed7"
      ],
      "authority_requirements": [],
      "execution_conditions": {
        "max_lease_ttl": 120.0,
        "sandbox_profile_digest": "e6b17c4f968a06baa78915f2f120f179a80e22ec03b67b8f35e0cb8f1568d077",
        "tenants": [
          "tenant-a"
        ]
      },
      "attestation_digest": "8b884da323537836aadb7808802038861f860563d9eb14231ae49d2ad5c752fe",
      "version_history": [],
      "mutations": [],
      "revocations": [],
      "evidence": [],
      "security_metadata": {
        "attestation_level": "SOFTWARE_CONFIGURATION",
        "hardware_attestation": "UNKNOWN",
        "vulnerability_intelligence": "UNKNOWN"
      },
      "issued_at": 1000.0,
      "issuer": "cain:e14-fabric",
      "digest": "467eeb983cfe1cc86aa8666ba237f7b2b159c62dd5ac6e66127f9124792016a0",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "zaE1n3YcsiI2P+73xlwUmhuYOKXp9dH8W8bnej0pJ/+0VjTiZkwsO4H0khTjhLDlXmv9ASmW/a2y4LtIZ/R9DA==",
      "authority": "NONE"
    },
    {
      "schema": "cain42.e14.capability-passport.v1",
      "capability_id": "cap:30ef03f7fecd9a3dd5404deaab358360f837eb701b7db6147e1a8b4ec505927f",
      "manifest_digest": "dc1db1b9ed9e93959e262656bd789a49fa4e700a0e491a10ee15efedd3a17790",
      "artifact_digest": "c7e35e9713d62620b5ccff8ac1501764c9ee8187617835720dce931f7bfe72b2",
      "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
      "publisher_principal": "publisher:acme",
      "version": "1.0.0",
      "provenance": {
        "publisher_principal": "publisher:acme",
        "name": "local-llm",
        "version": "1.0.0",
        "artifact_digest": "c7e35e9713d62620b5ccff8ac1501764c9ee8187617835720dce931f7bfe72b2",
        "source_uri": "https://git.example/m",
        "repository": "acme/m",
        "source_commit": "cccccccccccccccccccccccccccccccccccccccc",
        "build_id": "b-1",
        "builder": "ci",
        "build_metadata_digest": "eb8ed3ccb5023093b56f490a46501e88d09736687e609fdbc1c71b3df8b9ccd3",
        "package_digest": "4835f96cb95414c1b3dd5816bcabc7ae1405283accdbdf990de0f35f07075abb",
        "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=",
        "publisher_signature_b64": "DfZxTms3Ab12ByobfmWstiEIB5RTz05fWGGVilzo5BZ5FhL7kT8Xczb+J+NSWUPirImlUZWbqVlgzqG2EYi7AA=="
      },
      "dependency_provenance": [],
      "permissions": [
        "MODEL_INFERENCE"
      ],
      "trust_state": "ADMITTED",
      "policy_bindings": [
        "5d60072ec26728cac2c3e35408084809cd82a2e93c4e84e964a75801cd5a9ed7"
      ],
      "authority_requirements": [],
      "execution_conditions": {
        "max_lease_ttl": 120.0,
        "sandbox_profile_digest": "62deb5812a2bdb3183523978eb9e541d59c5768c17295468e24fd517629f3559",
        "tenants": [
          "tenant-a"
        ]
      },
      "attestation_digest": "d4b18caefb6c50bcc16b46a3b33be6d798f8892a98e3725f5bf4243d26881bdc",
      "version_history": [],
      "mutations": [],
      "revocations": [],
      "evidence": [],
      "security_metadata": {
        "attestation_level": "SOFTWARE_CONFIGURATION",
        "hardware_attestation": "UNKNOWN",
        "vulnerability_intelligence": "UNKNOWN"
      },
      "issued_at": 1000.0,
      "issuer": "cain:e14-fabric",
      "digest": "9cf7c1a7aa76912a7cbdbb0bed4753f5fcd5f255a1a9ab6308a6d089d962f026",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "I0UsXWg0NvEuHaTjhSe+roWbxikKLiuwj5Iw6fhlV0ZwJevAemov0Au4EoW6qNJZdzztxDfahZfvoooLUiJVAw==",
      "authority": "NONE"
    }
  ]
}