{
  "leases": [
    {
      "schema": "cain42.e14.capability-lease.v1",
      "lease_id": "lease_78294b8f32093da56a04a962",
      "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
      "capability_manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
      "grant_id": "grant_159c4310dff01a0cddaf2fc9",
      "agent_id": "agent-fin",
      "tenant": "tenant-a",
      "trajectory_id": "traj-1",
      "decision_id": "dec_0a0159a3f0d3fa6dfacd563d",
      "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
      "policy_digest": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
      "risk_digest": "risk-low",
      "evidence_digest": "ev-1",
      "sandbox_profile_digest": "f752b06616d144e77bda07756bc6c1afb276aa8ee4374b116c0640b293ae876b",
      "credential_binding_digest": "26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d",
      "scope": [
        [
          "CALL_MCP_TOOL",
          "tool:kv.get"
        ]
      ],
      "issued_at": 1000.0,
      "expiration": 1030.0,
      "nonce": "lnonce_78294b8f32093da56a04a962",
      "sequence": 1,
      "renewal_of": "",
      "digest": "ec58b4d7da11f20f4f74e52d7c1c2fa62e1fa4ab32bff51add99d54ca05ffc89",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "w2uc/oJS82cJrT5VRqymzsc0rIehzgR9vNtlvj6X7YwWKFWfrrjvKPlnm6mWhr85PsD7I8/+nIeuKcgvkop7Ag==",
      "authority": "NONE"
    },
    {
      "schema": "cain42.e14.capability-lease.v1",
      "lease_id": "lease_9c0828fb2a00c6c52d7a2a9b",
      "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
      "capability_manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
      "grant_id": "grant_159c4310dff01a0cddaf2fc9",
      "agent_id": "agent-fin",
      "tenant": "tenant-a",
      "trajectory_id": "traj-1",
      "decision_id": "dec-next",
      "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
      "policy_digest": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
      "risk_digest": "risk-low",
      "evidence_digest": "ev-1",
      "sandbox_profile_digest": "f752b06616d144e77bda07756bc6c1afb276aa8ee4374b116c0640b293ae876b",
      "credential_binding_digest": "264d32debd73ab8c51848289edf2001800388803c4d7bd529aa86f055b005753",
      "scope": [
        [
          "CALL_MCP_TOOL",
          "tool:kv.get"
        ]
      ],
      "issued_at": 1001.0,
      "expiration": 1031.0,
      "nonce": "lnonce_9c0828fb2a00c6c52d7a2a9b",
      "sequence": 2,
      "renewal_of": "",
      "digest": "7d6493124a8f30c8db2eff659c617a1f66280e1355bc835ae330e01a7701311a",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "ND/5XaMlRBlqBETLcqpUtKiH/mgC6CKDbjVSdJHmg6cKtWy/tP22bnWTq35RTUdixmr4GMCMnVGybOM8sYqRAg==",
      "authority": "NONE"
    }
  ],
  "committed_lease_id": "lease_78294b8f32093da56a04a962",
  "credential_binding": {
    "schema": "cain42.e14.credential-binding.v1",
    "binding_id": "cred_a5f08e8d2f4946fa3145",
    "credential_ref": "credref:vault/kv-read",
    "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
    "agent_id": "agent-fin",
    "trajectory_id": "traj-1",
    "tenant": "tenant-a",
    "purpose": "read",
    "scope": [
      "kv:read"
    ],
    "issued_at": 1000.0,
    "expires_at": 1020.0,
    "digest": "26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d",
    "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
    "signature_b64": "9jVlgnU2Rw9s9VcjtTJDxh/Ut+gToQh+o1Ujod5iEM6H0Getv3MgY0m/949K9aIJxoXd9Cv0qJl856jlfi87AQ==",
    "authority": "NONE",
    "grants_authority": false
  },
  "credential_bindings": [
    {
      "schema": "cain42.e14.credential-binding.v1",
      "binding_id": "cred_a5f08e8d2f4946fa3145",
      "credential_ref": "credref:vault/kv-read",
      "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
      "agent_id": "agent-fin",
      "trajectory_id": "traj-1",
      "tenant": "tenant-a",
      "purpose": "read",
      "scope": [
        "kv:read"
      ],
      "issued_at": 1000.0,
      "expires_at": 1020.0,
      "digest": "26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "9jVlgnU2Rw9s9VcjtTJDxh/Ut+gToQh+o1Ujod5iEM6H0Getv3MgY0m/949K9aIJxoXd9Cv0qJl856jlfi87AQ==",
      "authority": "NONE",
      "grants_authority": false
    },
    {
      "schema": "cain42.e14.credential-binding.v1",
      "binding_id": "cred_be294e3d6f7c8fe53a50",
      "credential_ref": "credref:vault/kv-read",
      "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
      "agent_id": "agent-fin",
      "trajectory_id": "traj-1",
      "tenant": "tenant-a",
      "purpose": "read",
      "scope": [
        "kv:read"
      ],
      "issued_at": 1001.0,
      "expires_at": 1021.0,
      "digest": "264d32debd73ab8c51848289edf2001800388803c4d7bd529aa86f055b005753",
      "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
      "signature_b64": "eJuzK5uKtMEU4CQaGw4vfC9kcNpMpYTzRyhYcaxYuhtDW/SAQtyvF5u7ysr4gj0idmWn5wLwN4/DSka2RTzvBQ==",
      "authority": "NONE",
      "grants_authority": false
    }
  ],
  "decision": {
    "schema": "cain42.e13.governed-decision.v1",
    "decision_id": "dec_0a0159a3f0d3fa6dfacd563d",
    "decision_version": 1,
    "agent_id": "agent-fin",
    "collective_id": "",
    "principal_id": "",
    "trajectory_id": "traj-1",
    "intent_id": "",
    "objective": "read one key",
    "context_digest": "",
    "evidence_set_digest": "ev-1",
    "policy_set_digest": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
    "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
    "consequence_digest": "cq-1",
    "risk_digest": "risk-low",
    "candidate_action_digest": "pending",
    "decision_type": "CONSEQUENTIAL",
    "decision_state": "ALLOWED",
    "decision_reason_codes": [],
    "constraints": [],
    "required_conditions": [],
    "review_requirement": "NONE",
    "human_escalation_requirement": "NONE",
    "created_at": 1000.0,
    "valid_until": 0.0,
    "supersedes": "",
    "superseded_by": "",
    "nonce": "decn_3ee9874b3206b6e5",
    "trajectory_sequence": 0,
    "digest": "ec11faa7bb08b3d0c9c8111e47af2ddadb807b4b41e638c24c1a6b00ca0aab85",
    "issuer": "cain:decision-fabric",
    "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
    "signature_b64": "XmP2NCU89D+g0m0R7ujuj3TUoXpCjOo79wxRrveRHqbfmy6Ws9kX0J2QkS2BL0rA2f2ARZVC06OnsFrA5ErZBA==",
    "authority": "NONE"
  },
  "binding": {
    "schema": "cain42.e14.capability-decision-binding.v1",
    "decision_digest": "ec11faa7bb08b3d0c9c8111e47af2ddadb807b4b41e638c24c1a6b00ca0aab85",
    "capability_digest": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
    "capability_manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
    "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
    "policy_digest": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
    "risk_digest": "risk-low",
    "intent_digest": "intent-1",
    "evidence_digest": "ev-1",
    "lease_digest": "ec58b4d7da11f20f4f74e52d7c1c2fa62e1fa4ab32bff51add99d54ca05ffc89",
    "action_hash": "0987fb3f8b20a39e2694723797ab75b4abce15966432c622e25e79cb40d5f0d5",
    "digest": "76cc758c23184afa57f2a0fdacdb65cd9d8b3d4073eb213b2e3dae230039dbb7",
    "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
    "signature_b64": "HWYJtoS8/s/otNYhmeiBVMD8kdp2aVh9Y8G2Ifi7J40Y6OHE0amz0i3c4YmOhmBfZ6Gf5impgevq99abGDnUAQ==",
    "authority": "NONE"
  },
  "action": {
    "principal": "tenant-a",
    "agent_id": "agent-fin",
    "intent_hash": "",
    "trajectory_hash": "",
    "capability_commitment": "",
    "authority_commitment": "",
    "policy_root": "",
    "world_state_root": "",
    "consequence_hash": "",
    "risk_snapshot": 0.1,
    "target": "tool:kv.get",
    "operation": "CALL_MCP_TOOL",
    "parameters": {
      "key": "a"
    },
    "parameters_digest": "15abefcb685c2b5ec143fa432c0cddabe659b1160ab1a0c8a0460e3e64987212",
    "execution_context": "",
    "enforcement_depth": "APPLICATION",
    "action_hash": "0987fb3f8b20a39e2694723797ab75b4abce15966432c622e25e79cb40d5f0d5",
    "authorization_id": "",
    "authorization_expiry": 0.0,
    "nonce": "",
    "authority": "NONE"
  },
  "gat": {
    "authorization_id": "gat_3564294c620f348c0340cec2",
    "agent_identity": "agent-fin",
    "action_hash": "0987fb3f8b20a39e2694723797ab75b4abce15966432c622e25e79cb40d5f0d5",
    "capability_commitment": "",
    "authority_commitment": "",
    "trajectory_hash": "",
    "policy_root": "",
    "world_state_root": "",
    "consequence_hash": "",
    "risk_ceiling": 1.0,
    "resource_scope": [
      "tool:kv.get"
    ],
    "capability": "CALL_MCP_TOOL",
    "resource": "tool:kv.get",
    "issued_at": 1000.0,
    "expires_at": 1020.0,
    "nonce": "61c8e4201d320a9d33d3484fd4db480f",
    "sequence_number": 0,
    "single_use": true,
    "passport_digest": "",
    "bom_digest": "",
    "capability_set_digest": "",
    "runtime_composition_digest": "",
    "delegation_chain_digest": "",
    "evidence_set_digest": "ev-1",
    "consequence_digest": "",
    "decision_digest": "ec11faa7bb08b3d0c9c8111e47af2ddadb807b4b41e638c24c1a6b00ca0aab85",
    "intent_digest": "intent-1",
    "policy_digest": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
    "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
    "risk_digest": "risk-low",
    "capability_digest": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
    "capability_manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
    "capability_lease_digest": "ec58b4d7da11f20f4f74e52d7c1c2fa62e1fa4ab32bff51add99d54ca05ffc89",
    "sandbox_profile_digest": "f752b06616d144e77bda07756bc6c1afb276aa8ee4374b116c0640b293ae876b",
    "credential_binding_digest": "26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d",
    "capability_binding_digest": "76cc758c23184afa57f2a0fdacdb65cd9d8b3d4073eb213b2e3dae230039dbb7",
    "issuer": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
    "signature_b64": "sBLW3Md/bK1gye5ATjmurBs6GjJcmrfj1vuE8Cd7+1sllJlgL7iPwar7Ro27CdGnP0alQsJe7bmO3llrnvnVCw=="
  },
  "commit_record": {
    "action_hash": "0987fb3f8b20a39e2694723797ab75b4abce15966432c622e25e79cb40d5f0d5",
    "lease_digest": "ec58b4d7da11f20f4f74e52d7c1c2fa62e1fa4ab32bff51add99d54ca05ffc89",
    "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
    "outcome": "EXECUTED",
    "reasons": {},
    "at": 1000.0,
    "prev": "",
    "record_digest": "8d55a45eeca4d7491ef1ecedcdaad6f8dbf7c094a3abb887c0bb8138463eb91a",
    "authority": "NONE"
  },
  "authorization_record": {
    "inputs": {
      "artifact": {
        "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "implementation_digest": "68c7dd93608a8222993b87e77432e1601101dea3f4fa0a63c67da1a8eca40c41"
      },
      "manifest": {
        "schema": "cain42.e14.capability-manifest.v1",
        "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
        "capability_type": "TOOL",
        "name": "kv.get",
        "version": "1.0.0",
        "publisher_principal": "publisher:acme",
        "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "implementation_digest": "68c7dd93608a8222993b87e77432e1601101dea3f4fa0a63c67da1a8eca40c41",
        "semantic_version": "1.0.0",
        "owner_principal": "org:acme",
        "provenance": {
          "publisher_principal": "publisher:acme",
          "name": "kv.get",
          "version": "1.0.0",
          "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
          "source_uri": "https://git.example/acme/kv.get",
          "repository": "acme/kv.get",
          "source_commit": "cccccccccccccccccccccccccccccccccccccccc",
          "build_id": "build-1.0.0",
          "builder": "ci:acme",
          "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7",
          "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20",
          "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=",
          "publisher_signature_b64": "alJ3PK0FB0MG8X96adpkqJDEWdG1NR/dSAaPetTyQfcHeXvcOtuH2vpwCWcQE/xPetZ1IMvikyZrP4xDuDIsBA=="
        },
        "dependency_set": [],
        "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
        "capability_scope": {
          "resources": [
            "tool:kv.get"
          ],
          "tenants": [
            "tenant-a"
          ]
        },
        "input_schema": {
          "type": "object"
        },
        "output_schema": {
          "type": "object"
        },
        "required_permissions": [
          "CALL_MCP_TOOL",
          "READ_DATA"
        ],
        "data_access_scope": [],
        "network_scope": [],
        "filesystem_scope": [],
        "credential_requirements": [
          "kv:read"
        ],
        "execution_environment": "cain45-zod",
        "side_effect_class": "READ_ONLY",
        "reversibility": "REVERSIBLE",
        "consequence_class": "LOW",
        "risk_class": "LOW",
        "trust_requirements": [],
        "authority_requirements": [],
        "policy_requirements": [],
        "supported_protocols": [
          "MCP"
        ],
        "supported_agent_types": [
          "L5"
        ],
        "expiration": 0.0,
        "extensions": {
          "tool": {
            "data_classes": [],
            "endpoint": "mcp://acme/kv.get",
            "protocol": "MCP",
            "provider": "acme",
            "rate_limit_per_minute": 0,
            "resource_limits": []
          }
        },
        "manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
        "lifecycle_state": "OBSERVED",
        "revocation_state": "ACTIVE",
        "attestation": {
          "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
          "manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
          "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
          "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7",
          "configuration_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
          "runtime_identity": "runtime:unspecified",
          "provider": "SOFTWARE_CONFIGURATION",
          "level": "SOFTWARE_CONFIGURATION",
          "hardware_attestation": "UNKNOWN",
          "issuer": "cain:e14-software-attestor",
          "at": 1000.0,
          "status": "ATTESTED",
          "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
          "signature_b64": "JW8OeD6tKzvzzBLK8BoxDe3xbXmbzCL8ycbRnyfOSt0fNaXOToqN5ChCOuNPAUS8AjnFAkgDwd520LNR4ad6Aw=="
        },
        "evidence_refs": [],
        "created_at": 1000.0,
        "updated_at": 1000.0,
        "authority": "NONE"
      },
      "dependency": [],
      "authority": [
        [
          "CALL_MCP_TOOL",
          "tool:kv.get"
        ],
        [
          "READ_DATA",
          "db"
        ]
      ],
      "policy": {
        "max_calls": 3,
        "tool": "kv.get"
      },
      "evidence": {
        "evidence_digest": "ev-1"
      },
      "trajectory": {
        "trajectory_id": "traj-1"
      },
      "grant": {
        "schema": "cain42.e14.capability-grant.v1",
        "grant_id": "grant_159c4310dff01a0cddaf2fc9",
        "issuer": "principal:org-acme",
        "subject_agent": "agent-fin",
        "tenant": "tenant-a",
        "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
        "capability_manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
        "scope": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "trajectory_id": "traj-1",
        "task_id": "",
        "policy_digest": "pol-1",
        "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
        "provenance_digest": "55e5702098e0a93dd14823e5c1e28120538f54f2c5e2f1c46f8130e2a0d77702",
        "issued_at": 1000.0,
        "expires_at": 1600.0,
        "max_invocations": 3,
        "max_financial": 0.0,
        "risk_ceiling": 0.5,
        "parent_grant_id": "",
        "delegation_depth": 0,
        "digest": "d7fa3f8fcf9763263b31ec267b2174d441473181e944ffe9337ece76302ef7b6",
        "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
        "signature_b64": "6Aa19NGuygbwRJZyTB3Y9kLFB1Pl3Uuucbh0XogGJo4ioeugFZ8H8XHl1dPi0acMuLt+cn2ycEC4PDvgmjkwDg==",
        "authority": "NONE"
      },
      "lease": {
        "schema": "cain42.e14.capability-lease.v1",
        "lease_id": "lease_78294b8f32093da56a04a962",
        "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
        "capability_manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
        "grant_id": "grant_159c4310dff01a0cddaf2fc9",
        "agent_id": "agent-fin",
        "tenant": "tenant-a",
        "trajectory_id": "traj-1",
        "decision_id": "dec_0a0159a3f0d3fa6dfacd563d",
        "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
        "policy_digest": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
        "risk_digest": "risk-low",
        "evidence_digest": "ev-1",
        "sandbox_profile_digest": "f752b06616d144e77bda07756bc6c1afb276aa8ee4374b116c0640b293ae876b",
        "credential_binding_digest": "26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d",
        "scope": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "issued_at": 1000.0,
        "expiration": 1030.0,
        "nonce": "lnonce_78294b8f32093da56a04a962",
        "sequence": 1,
        "renewal_of": "",
        "digest": "ec58b4d7da11f20f4f74e52d7c1c2fa62e1fa4ab32bff51add99d54ca05ffc89",
        "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
        "signature_b64": "w2uc/oJS82cJrT5VRqymzsc0rIehzgR9vNtlvj6X7YwWKFWfrrjvKPlnm6mWhr85PsD7I8/+nIeuKcgvkop7Ag==",
        "authority": "NONE"
      },
      "decision": {
        "schema": "cain42.e13.governed-decision.v1",
        "decision_id": "dec_0a0159a3f0d3fa6dfacd563d",
        "decision_version": 1,
        "agent_id": "agent-fin",
        "collective_id": "",
        "principal_id": "",
        "trajectory_id": "traj-1",
        "intent_id": "",
        "objective": "read one key",
        "context_digest": "",
        "evidence_set_digest": "ev-1",
        "policy_set_digest": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
        "authority_digest": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
        "consequence_digest": "cq-1",
        "risk_digest": "risk-low",
        "candidate_action_digest": "pending",
        "decision_type": "CONSEQUENTIAL",
        "decision_state": "ALLOWED",
        "decision_reason_codes": [],
        "constraints": [],
        "required_conditions": [],
        "review_requirement": "NONE",
        "human_escalation_requirement": "NONE",
        "created_at": 1000.0,
        "valid_until": 0.0,
        "supersedes": "",
        "superseded_by": "",
        "nonce": "decn_3ee9874b3206b6e5",
        "trajectory_sequence": 0,
        "digest": "ec11faa7bb08b3d0c9c8111e47af2ddadb807b4b41e638c24c1a6b00ca0aab85",
        "issuer": "cain:decision-fabric",
        "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
        "signature_b64": "XmP2NCU89D+g0m0R7ujuj3TUoXpCjOo79wxRrveRHqbfmy6Ws9kX0J2QkS2BL0rA2f2ARZVC06OnsFrA5ErZBA==",
        "authority": "NONE"
      },
      "action": {
        "principal": "tenant-a",
        "agent_id": "agent-fin",
        "intent_hash": "",
        "trajectory_hash": "",
        "capability_commitment": "",
        "authority_commitment": "",
        "policy_root": "",
        "world_state_root": "",
        "consequence_hash": "",
        "risk_snapshot": 0.1,
        "target": "tool:kv.get",
        "operation": "CALL_MCP_TOOL",
        "parameters": {
          "key": "a"
        },
        "parameters_digest": "15abefcb685c2b5ec143fa432c0cddabe659b1160ab1a0c8a0460e3e64987212",
        "execution_context": "",
        "enforcement_depth": "APPLICATION",
        "action_hash": "0987fb3f8b20a39e2694723797ab75b4abce15966432c622e25e79cb40d5f0d5",
        "authorization_id": "",
        "authorization_expiry": 0.0,
        "nonce": "",
        "authority": "NONE"
      },
      "envelopes": {
        "identity": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "delegated": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "policy": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "trust": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "trajectory": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "environment": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "risk": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ],
        "budget": [
          [
            "CALL_MCP_TOOL",
            "tool:kv.get"
          ]
        ]
      }
    },
    "schema": "cain42.e14.authorization-record.v1",
    "input_digests": {
      "artifact": "2144a156601c1df9b62f2118c2ba532adf534ba90d4eacb35b9886acebedc4ca",
      "manifest": "9f69c572a98310667312340df66aa793e035a7080597e8d6ceadd4425829532f",
      "dependency": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
      "authority": "bc988ea736a799e789014dc68caa5e19ea9eb6707244e8f7b8c4d9144bd25de3",
      "policy": "7fdf0d81a5e251e5d13f5e4689c6cdc46e95f768c428094868683069dd8e4d5d",
      "evidence": "295f546f106beb2b3d928445a4e9769568ebcd3eed0de98f2db766530373c61e",
      "trajectory": "5747e486ba3cef76e3a2045fdbfdf4f73ab70beea57d1ccbf764764cf09b8344",
      "grant": "21be8588ee9e1598ead0cb5d931850f68b1fdb0b1e9971d87dd78a0a1a9b2334",
      "lease": "6c380e47b05d0199a62777d96e1eeda335924baef6fd272c6d1aa2b57103e341",
      "decision": "5cd7ce65f953676cf34e0052dde7d8d81b39fa5ef483c3b21588341dc0407741",
      "action": "b761519fc1123994ccea86a69b661f4c8fb975b3b4897afc371de958d05ec9d6"
    },
    "outputs": {
      "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
      "manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
      "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
      "effective_capability": [
        [
          "CALL_MCP_TOOL",
          "tool:kv.get"
        ]
      ],
      "grant_within_authority": true,
      "composition_effect": "ALLOW",
      "consequence_effect": "ALLOW",
      "bindings_consistent": true,
      "decision_digest": "ec11faa7bb08b3d0c9c8111e47af2ddadb807b4b41e638c24c1a6b00ca0aab85",
      "action_hash": "0987fb3f8b20a39e2694723797ab75b4abce15966432c622e25e79cb40d5f0d5",
      "disposition": "AUTHORIZED"
    },
    "record_digest": "a0ed90e924ad08318d0ad973f02253dfe2aef36bba424cecb6dd98556171eaa0",
    "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=",
    "signature_b64": "ks0irgdjI5jXFuBXCVz/YiN/vD+BH0tq0Y16VkZW7BHP0DMPI+p81lvWdxKIBW2pX+CC5W16x52adiqxc1M2DQ=="
  },
  "replay": {
    "schema": "cain42.e14.replay.v1",
    "matches": true,
    "mismatches": [],
    "reconstructed": {
      "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
      "manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24",
      "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e",
      "effective_capability": [
        [
          "CALL_MCP_TOOL",
          "tool:kv.get"
        ]
      ],
      "grant_within_authority": true,
      "composition_effect": "ALLOW",
      "consequence_effect": "ALLOW",
      "bindings_consistent": true,
      "decision_digest": "ec11faa7bb08b3d0c9c8111e47af2ddadb807b4b41e638c24c1a6b00ca0aab85",
      "action_hash": "0987fb3f8b20a39e2694723797ab75b4abce15966432c622e25e79cb40d5f0d5",
      "disposition": "AUTHORIZED"
    },
    "signature_ok": true,
    "authority": "NONE"
  },
  "revocation": {
    "subject": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
    "reason": "HUMAN_EMERGENCY",
    "propagated": {
      "grant": [
        "grant_159c4310dff01a0cddaf2fc9",
        "grant_c42a2a1848de143b94b504e6"
      ],
      "lease": [
        "lease_78294b8f32093da56a04a962",
        "lease_9c0828fb2a00c6c52d7a2a9b"
      ],
      "credential": [
        "26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d",
        "264d32debd73ab8c51848289edf2001800388803c4d7bd529aa86f055b005753"
      ],
      "token": [
        "gat_3564294c620f348c0340cec2"
      ]
    },
    "registry": {
      "revoked": {
        "capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286": {
          "reason": "HUMAN_EMERGENCY",
          "at": 1001.0
        },
        "credential:264d32debd73ab8c51848289edf2001800388803c4d7bd529aa86f055b005753": {
          "reason": "CASCADE(HUMAN_EMERGENCY) from capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "at": 1001.0
        },
        "credential:26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d": {
          "reason": "CASCADE(HUMAN_EMERGENCY) from capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "at": 1001.0
        },
        "grant:grant_159c4310dff01a0cddaf2fc9": {
          "reason": "CASCADE(HUMAN_EMERGENCY) from capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "at": 1001.0
        },
        "grant:grant_c42a2a1848de143b94b504e6": {
          "reason": "CASCADE(HUMAN_EMERGENCY) from capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "at": 1001.0
        },
        "lease:lease_78294b8f32093da56a04a962": {
          "reason": "CASCADE(HUMAN_EMERGENCY) from capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "at": 1001.0
        },
        "lease:lease_9c0828fb2a00c6c52d7a2a9b": {
          "reason": "CASCADE(HUMAN_EMERGENCY) from capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "at": 1001.0
        },
        "token:gat_3564294c620f348c0340cec2": {
          "reason": "CASCADE(HUMAN_EMERGENCY) from capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "at": 1001.0
        }
      },
      "log": [
        {
          "subject": "capability:cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286",
          "reason": "HUMAN_EMERGENCY",
          "at": 1001.0,
          "propagated": {
            "grant": [
              "grant_159c4310dff01a0cddaf2fc9",
              "grant_c42a2a1848de143b94b504e6"
            ],
            "lease": [
              "lease_78294b8f32093da56a04a962",
              "lease_9c0828fb2a00c6c52d7a2a9b"
            ],
            "credential": [
              "26747cda34dc3f7d71466d4af229660d56b965880e28c6f2374695f4047e2b1d",
              "264d32debd73ab8c51848289edf2001800388803c4d7bd529aa86f055b005753"
            ],
            "token": [
              "gat_3564294c620f348c0340cec2"
            ]
          },
          "authority": "NONE"
        }
      ],
      "authority": "NONE"
    },
    "lease_validation_after": [
      "CAPABILITY_NOT_INVOKABLE:REVOKED",
      "CAPABILITY_REVOKED",
      "CREDENTIAL_REVOKED",
      "GRANT_REVOKED",
      "LEASE_REVOKED"
    ]
  }
}
