{
  "version": "2.308.0",
  "commit": "4d02156a",
  "built": "2026-09-28T00:06:53.934Z",
  "size": 18959658,
  "recorded": "2026-09-28T00:11:27.657Z",
  "runs": [
    {
      "id": "read-src",
      "label": "Read a source file",
      "request": {
        "tool": "read_file",
        "args": {
          "path": "src/app.ts"
        },
        "profile": "hardened",
        "unclaimed": false
      },
      "result": {
        "tool": "read_file",
        "verdict": "ALLOW",
        "forwarded": {
          "path": "src/app.ts"
        },
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 2,
          "ts": "2026-09-28T00:11:17.281891Z",
          "session": "20260928T001117Z-39eeac6b52fe",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "read_file",
          "id": "s:web-1",
          "decision": "forward",
          "grant_id": "g_753cc177e28100e4",
          "decision_id": "d_09e2a8fe7f704999bb43a493",
          "purpose": "demo",
          "bytes": 116,
          "payload_sha256": "b7fdfb9e211763d3e78d9565f5ee9fdd9866c0da66049101a182be04e6d73108",
          "payload": {
            "jsonrpc": "2.0",
            "id": "web-1",
            "method": "tools/call",
            "params": {
              "name": "read_file",
              "arguments": {
                "path": "src/app.ts"
              }
            }
          },
          "latency_ms": 46,
          "prev_hash": "e9d1f157a0f6bf97f1539e36d37007f9988352e35dfdaa3079bbf99c4106e584",
          "hash": "0753b7776798444fbf843ab9e8ae3c21c74dadd184161d1d1dbc3871a6d1dd21"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001117Z-39eeac6b52fe",
          "seq": 2,
          "time": "2026-09-28T00:11:17.281891Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "read_file",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_753cc177e28100e4",
          "decision_id": "d_09e2a8fe7f704999bb43a493",
          "decision": "forward",
          "record_hash": "0753b7776798444fbf843ab9e8ae3c21c74dadd184161d1d1dbc3871a6d1dd21",
          "prev_hash": "e9d1f157a0f6bf97f1539e36d37007f9988352e35dfdaa3079bbf99c4106e584",
          "payload_sha256": "b7fdfb9e211763d3e78d9565f5ee9fdd9866c0da66049101a182be04e6d73108",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001117Z-39eeac6b52fe#s:web-1",
          "sig": "8yJ21js4c74k00n7InT2Ed-5DIpKj_C3vf6BmoAdKReezPsqWxty6lhO7ZcIx2fkq5yIEL6VxC5XjfD3uU3sDg"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"forward\" → \"block\"",
        "ok": false,
        "error": "signature does not verify"
      }
    },
    {
      "id": "read-ssh",
      "label": "Read the developer's SSH key",
      "request": {
        "tool": "read_file",
        "args": {
          "path": "/home/dev/.ssh/id_rsa"
        },
        "profile": "hardened",
        "unclaimed": false
      },
      "result": {
        "tool": "read_file",
        "verdict": "DENY",
        "code": -32026,
        "message": "PyxGrant: refused by policy",
        "reasons": [
          "read-guard"
        ],
        "findings": [
          "read-guard:read:/home/dev/.ssh/id_rsa"
        ],
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 2,
          "ts": "2026-09-28T00:11:18.550176Z",
          "session": "20260928T001118Z-24da038c5eb4",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "read_file",
          "id": "s:web-1",
          "decision": "block",
          "grant_id": "g_b2f41c02ee3d434c",
          "decision_id": "d_c228db43ffdf050e2686013d",
          "purpose": "demo",
          "reasons": [
            "read-guard"
          ],
          "findings": [
            "read-guard:read:/home/dev/.ssh/id_rsa"
          ],
          "latency_ms": 8,
          "prev_hash": "5eaeba765e99394be85840653a2d91cf965edddbe4b0db7413b54c7deaf65990",
          "hash": "73bab6bdd412c13aaba5469c86f17622f5779b1673086a27a6888b3241a17cb8"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001118Z-24da038c5eb4",
          "seq": 2,
          "time": "2026-09-28T00:11:18.550176Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "read_file",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_b2f41c02ee3d434c",
          "decision_id": "d_c228db43ffdf050e2686013d",
          "decision": "block",
          "record_hash": "73bab6bdd412c13aaba5469c86f17622f5779b1673086a27a6888b3241a17cb8",
          "prev_hash": "5eaeba765e99394be85840653a2d91cf965edddbe4b0db7413b54c7deaf65990",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001118Z-24da038c5eb4#s:web-1",
          "sig": "Mh_3VIJTojJ7RO9qTMXreFGW7hYtGmOug-IqjEzA6qfdVhXRbvtL8iS_gQjUAgdebDrIfXF15nQh6M1BK0QEAw"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"block\" → \"forward\"",
        "ok": false,
        "error": "signature does not verify"
      }
    },
    {
      "id": "wipe",
      "label": "Wipe the disk",
      "request": {
        "tool": "run_command",
        "args": {
          "command": "rm -rf / --no-preserve-root"
        },
        "profile": "hardened",
        "unclaimed": false
      },
      "result": {
        "tool": "run_command",
        "verdict": "HOLD",
        "code": -32005,
        "message": "PyxGrant: refused: the required human approval was not granted for this exact action",
        "reasons": [
          "approval-timeout",
          "held: blast radius high (score 60 ≥ 50): destructive/irreversible operation; recursive/force destructive operation"
        ],
        "findings": [
          "blast:high:60"
        ],
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 3,
          "ts": "2026-09-28T00:11:19.954719Z",
          "session": "20260928T001119Z-d2aeade2b362",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "run_command",
          "id": "s:web-1",
          "decision": "block",
          "grant_id": "g_e5a42ff91b98e33f",
          "decision_id": "d_3570aa7339a2705965779128",
          "purpose": "demo",
          "reasons": [
            "approval-timeout",
            "held: blast radius high (score 60 ≥ 50): destructive/irreversible operation; recursive/force destructive operation"
          ],
          "findings": [
            "blast:high:60"
          ],
          "latency_ms": 321,
          "prev_hash": "7dacd00ccbe5ff05140a46cc12f51505ea3c3399629de7ee5f474e5c7d60c145",
          "hash": "5605ab17f66aca2ef2d38fb4fe294693c36c1355e02c79d1314a7eccedd8dcbe"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001119Z-d2aeade2b362",
          "seq": 3,
          "time": "2026-09-28T00:11:19.954719Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "run_command",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_e5a42ff91b98e33f",
          "decision_id": "d_3570aa7339a2705965779128",
          "decision": "block",
          "record_hash": "5605ab17f66aca2ef2d38fb4fe294693c36c1355e02c79d1314a7eccedd8dcbe",
          "prev_hash": "7dacd00ccbe5ff05140a46cc12f51505ea3c3399629de7ee5f474e5c7d60c145",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001119Z-d2aeade2b362#s:web-1",
          "sig": "4CSS9o7sr6UpzEsBcJzWabEBCt0AfFYgvmhIJxFtg9XQllKpa2rY4gREWk0Kp79VrMR1tORmNDltQlVDlhCcCA"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"block\" → \"forward\"",
        "ok": false,
        "error": "signature does not verify"
      }
    },
    {
      "id": "delete-all",
      "label": "Delete every customer row",
      "request": {
        "tool": "db_query",
        "args": {
          "sql": "DELETE FROM customers"
        },
        "profile": "hardened",
        "unclaimed": false
      },
      "result": {
        "tool": "db_query",
        "verdict": "HOLD",
        "code": -32005,
        "message": "PyxGrant: refused: the required human approval was not granted for this exact action",
        "reasons": [
          "approval-timeout",
          "held: blast radius high (score 60 ≥ 50): destructive/irreversible operation; DELETE/UPDATE with no WHERE clause"
        ],
        "findings": [
          "blast:high:60"
        ],
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 3,
          "ts": "2026-09-28T00:11:21.359282Z",
          "session": "20260928T001120Z-3f44a488b134",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "db_query",
          "id": "s:web-1",
          "decision": "block",
          "grant_id": "g_9e6ff859573b4410",
          "decision_id": "d_87275bb66af85918b2356d74",
          "purpose": "demo",
          "reasons": [
            "approval-timeout",
            "held: blast radius high (score 60 ≥ 50): destructive/irreversible operation; DELETE/UPDATE with no WHERE clause"
          ],
          "findings": [
            "blast:high:60"
          ],
          "latency_ms": 319,
          "prev_hash": "6374b4d316f501adf7bc8f53f2ac0e6c5da3c2a76cdcabc365af6b7287586ba8",
          "hash": "6bbb445eaee4a36af50b651e6313dd72ddbd29dd5bae9376ab6834d41d81ed70"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001120Z-3f44a488b134",
          "seq": 3,
          "time": "2026-09-28T00:11:21.359282Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "db_query",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_9e6ff859573b4410",
          "decision_id": "d_87275bb66af85918b2356d74",
          "decision": "block",
          "record_hash": "6bbb445eaee4a36af50b651e6313dd72ddbd29dd5bae9376ab6834d41d81ed70",
          "prev_hash": "6374b4d316f501adf7bc8f53f2ac0e6c5da3c2a76cdcabc365af6b7287586ba8",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001120Z-3f44a488b134#s:web-1",
          "sig": "A_MkWzR68RT0GeF6YZBdYxchcQgylixWGYFf7t6S-qnIpjaxkxc-76jXzAwNIMmJzlYtsowWIWO0YprkSLzCAA"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"block\" → \"forward\"",
        "ok": false,
        "error": "signature does not verify"
      }
    },
    {
      "id": "mcp-config",
      "label": "Rewrite its own MCP config",
      "request": {
        "tool": "write_file",
        "args": {
          "path": "/home/dev/.cursor/mcp.json",
          "content": "{\"mcpServers\":{}}"
        },
        "profile": "hardened",
        "unclaimed": false
      },
      "result": {
        "tool": "write_file",
        "verdict": "DENY",
        "code": -32017,
        "message": "PyxGrant: refused by policy",
        "reasons": [
          "config-integrity"
        ],
        "findings": [
          "config-integrity:write:/home/dev/.cursor/mcp.json"
        ],
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 2,
          "ts": "2026-09-28T00:11:22.584067Z",
          "session": "20260928T001122Z-b3879bc75edc",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "write_file",
          "id": "s:web-1",
          "decision": "block",
          "grant_id": "g_de028a82bf66cf71",
          "decision_id": "d_aca512780e1ef19da0c2aa54",
          "purpose": "demo",
          "reasons": [
            "config-integrity"
          ],
          "findings": [
            "config-integrity:write:/home/dev/.cursor/mcp.json"
          ],
          "latency_ms": 3,
          "prev_hash": "8bbbf3fea8a444581b64c5e05e3213045d5c901fc8c3a16e157c6a114680e78b",
          "hash": "09027830080b87b12d279f16546eb1b993df5b6cdd36746dcf949af161903de4"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001122Z-b3879bc75edc",
          "seq": 2,
          "time": "2026-09-28T00:11:22.584067Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "write_file",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_de028a82bf66cf71",
          "decision_id": "d_aca512780e1ef19da0c2aa54",
          "decision": "block",
          "record_hash": "09027830080b87b12d279f16546eb1b993df5b6cdd36746dcf949af161903de4",
          "prev_hash": "8bbbf3fea8a444581b64c5e05e3213045d5c901fc8c3a16e157c6a114680e78b",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001122Z-b3879bc75edc#s:web-1",
          "sig": "fCDN8imVvGM9romcLax1MbFiv60XnLgYNGsazAA_BVgEF3oJKliP9az5O8e51aj-WnxcdCEIEjE1wn4kJD_eCw"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"block\" → \"forward\"",
        "ok": false,
        "error": "signature does not verify"
      }
    },
    {
      "id": "aws-key",
      "label": "Post a comment with an AWS key in it",
      "request": {
        "tool": "post_public_comment",
        "args": {
          "text": "deploy key AKIAIOSFODNN7EXAMPLE works now"
        },
        "profile": "hardened",
        "unclaimed": false
      },
      "result": {
        "tool": "post_public_comment",
        "verdict": "ALLOW_MODIFIED",
        "findings": [
          "redact:secret:aws-access-key-id",
          "blast:medium:45"
        ],
        "redactions": 1,
        "forwarded": {
          "text": "deploy key [REDACTED:aws-access-key-id:1a5d44a2] works now"
        },
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 2,
          "ts": "2026-09-28T00:11:23.888136Z",
          "session": "20260928T001123Z-ed6e2aec15b6",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "post_public_comment",
          "id": "s:web-1",
          "decision": "modify",
          "grant_id": "g_774691ac43bef2f2",
          "decision_id": "d_bce116d434189238ad349be9",
          "purpose": "demo",
          "redactions": 1,
          "findings": [
            "redact:secret:aws-access-key-id",
            "blast:medium:45"
          ],
          "fingerprints": [
            "1a5d44a2dca19669"
          ],
          "bytes": 174,
          "payload_sha256": "e1645516d4fdac0f73e4fb6a81e8f82c0e8e560896d70e73899e9efab562b4a9",
          "payload": {
            "jsonrpc": "2.0",
            "id": "web-1",
            "method": "tools/call",
            "params": {
              "name": "post_public_comment",
              "arguments": {
                "text": "deploy key [REDACTED:aws-access-key-id:1a5d44a2] works now"
              }
            }
          },
          "latency_ms": 30,
          "prev_hash": "24cc6f31e72c2f0bdda67b7953ce068c7ea66a0505f13f7cd0ba3e2f662355ca",
          "hash": "9dae70952896400c2f1e1272655a4f3237ec85ad8e79b24aeb7ee0ae8f07f776"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001123Z-ed6e2aec15b6",
          "seq": 2,
          "time": "2026-09-28T00:11:23.888136Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "post_public_comment",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_774691ac43bef2f2",
          "decision_id": "d_bce116d434189238ad349be9",
          "decision": "modify",
          "record_hash": "9dae70952896400c2f1e1272655a4f3237ec85ad8e79b24aeb7ee0ae8f07f776",
          "prev_hash": "24cc6f31e72c2f0bdda67b7953ce068c7ea66a0505f13f7cd0ba3e2f662355ca",
          "payload_sha256": "e1645516d4fdac0f73e4fb6a81e8f82c0e8e560896d70e73899e9efab562b4a9",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001123Z-ed6e2aec15b6#s:web-1",
          "sig": "4zcKi65Z5grA0jCKWzv5y37rU51n0pQtJyGL6n7z_PplIECIDlGuW9ISoYFwzBy7FxPLBF-I3HOXYdEcHZwNCg"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"modify\" → \"block\"",
        "ok": false,
        "error": "signature does not verify"
      }
    },
    {
      "id": "ssn-email",
      "label": "Email a member's SSN and card number",
      "request": {
        "tool": "send_email",
        "args": {
          "to": "partner@example.com",
          "body": "Member SSN 123-45-6789, card 4111 1111 1111 1111"
        },
        "profile": "hardened",
        "unclaimed": false
      },
      "result": {
        "tool": "send_email",
        "verdict": "HOLD",
        "code": -32005,
        "message": "PyxGrant: refused: the required human approval was not granted for this exact action",
        "reasons": [
          "approval-timeout"
        ],
        "findings": [
          "redact:pii:email-address",
          "redact:pii:us-ssn",
          "redact:pii:payment-card",
          "blast:low:15"
        ],
        "redactions": 3,
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 3,
          "ts": "2026-09-28T00:11:25.297144Z",
          "session": "20260928T001124Z-89b65ee78598",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "send_email",
          "id": "s:web-1",
          "decision": "block",
          "grant_id": "g_d6a2ba568472c029",
          "decision_id": "d_34aad784469cb205c669569c",
          "purpose": "demo",
          "reasons": [
            "approval-timeout"
          ],
          "redactions": 3,
          "findings": [
            "redact:pii:email-address",
            "redact:pii:us-ssn",
            "redact:pii:payment-card",
            "blast:low:15"
          ],
          "fingerprints": [
            "594c99fe9fa5b19d",
            "01a54629efb95228",
            "6a7e0e79b018d08c"
          ],
          "latency_ms": 297,
          "prev_hash": "1cf8ce0ae26c94a57f494616f0b7f4259efe20b1aaebf3daa71b7e4b93abd179",
          "hash": "346e6fcd8fbd85f5a803b9e0bd465c8e1fca1f910b41c7118ef8158073ba154c"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001124Z-89b65ee78598",
          "seq": 3,
          "time": "2026-09-28T00:11:25.297144Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "send_email",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_d6a2ba568472c029",
          "decision_id": "d_34aad784469cb205c669569c",
          "decision": "block",
          "record_hash": "346e6fcd8fbd85f5a803b9e0bd465c8e1fca1f910b41c7118ef8158073ba154c",
          "prev_hash": "1cf8ce0ae26c94a57f494616f0b7f4259efe20b1aaebf3daa71b7e4b93abd179",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001124Z-89b65ee78598#s:web-1",
          "sig": "aKCF92EV8QFCGeCxEsBCg7moLaHWpGSG4Ww8B5_1sizadBI3CrHLod2rKgNz8fC8OyU1ZQ6kMnPXAQKwx8BABQ"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"block\" → \"forward\"",
        "ok": false,
        "error": "signature does not verify"
      }
    },
    {
      "id": "unclaimed",
      "label": "An agent nobody has claimed sends email",
      "request": {
        "tool": "send_email",
        "args": {
          "to": "partner@example.com",
          "body": "Weekly summary attached."
        },
        "profile": "hardened",
        "unclaimed": true
      },
      "result": {
        "tool": "send_email",
        "verdict": "DENY",
        "code": -32008,
        "message": "PyxGrant: refused: this action is outside what the agent is permitted to do",
        "reasons": [
          "cage",
          "cage:unclaimed"
        ],
        "record": {
          "schema": "pyxgrant-audit/v1",
          "seq": 2,
          "ts": "2026-09-28T00:11:26.544759Z",
          "session": "20260928T001126Z-5196011a08a3",
          "server": "sim",
          "principal": "demo-agent",
          "run": "run-web-1",
          "depth": 0,
          "direction": "client->server",
          "kind": "request",
          "method": "tools/call",
          "tool": "send_email",
          "id": "s:web-1",
          "decision": "block",
          "grant_id": "g_6950a608218f608a",
          "decision_id": "d_4bb9c6ffc852b5f2f8f3e36d",
          "purpose": "demo",
          "reasons": [
            "cage",
            "cage:unclaimed"
          ],
          "latency_ms": 4,
          "prev_hash": "6d82caa825485dd1a8f911ba11baf6863e5d554b99565e7b71bf6283e4d8c8cc",
          "hash": "86be5886531f089497cf50f09d84c39202b177a96a6665d01ff7175adda24fbf"
        },
        "receipt": {
          "version": "pg-receipt-v6",
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "session": "20260928T001126Z-5196011a08a3",
          "seq": 2,
          "time": "2026-09-28T00:11:26.544759Z",
          "principal": "demo-agent",
          "server": "sim",
          "tool": "send_email",
          "method": "tools/call",
          "run": "run-web-1",
          "grant": "g_6950a608218f608a",
          "decision_id": "d_4bb9c6ffc852b5f2f8f3e36d",
          "decision": "block",
          "record_hash": "86be5886531f089497cf50f09d84c39202b177a96a6665d01ff7175adda24fbf",
          "prev_hash": "6d82caa825485dd1a8f911ba11baf6863e5d554b99565e7b71bf6283e4d8c8cc",
          "phase": "authorized",
          "phase_class": "observed",
          "correlation_id": "20260928T001126Z-5196011a08a3#s:web-1",
          "sig": "cfPzBnV189C9baXHDudotjE5jMTHdmp0IXN9fDDUwUUJxuA9qVeSRFY8dqzrBfHud05LEECZQFH8UXOGsHNTCg"
        },
        "bundle": {
          "issuer": "pyxgrant-web-demo",
          "key_id": "2Dm-Y-tgnUU-",
          "public_key": "gt0Kr7rqaPHy6osasT_RmLGTpXIbfEKUdYVAoPlA7ks",
          "alg": "Ed25519"
        }
      },
      "verify": {
        "ok": true
      },
      "tamper": {
        "changed": "decision \"block\" → \"forward\"",
        "ok": false,
        "error": "signature does not verify"
      }
    }
  ]
}