SOFT CAT.ai
FIND SOMETHING USEFUL

Start here

Should this be an agent?Model comparisonThe build notebookExplore Horizon
↑ ↓ choose · Enter opens · Esc closesType at least 2 characters
← The research programme

OPEN RESEARCH / ACTION BOUNDARY

Identity is
not permission.

Knowing who called is only the first check.

We moved the permission check into a separate local action service. It authenticates a caller, checks that caller's authority for the requested task, then decides whether an effect may commit.

The requests are scripted. The mutual TLS connections and service process are real. The only effect is a synthetic local queue entry.

Follow the recorded replay Inspect all recorded cases Read the source

01 / THREE SEPARATE QUESTIONS

Who is calling?
What may they do?
What happened?

The previous recovery study trusted a caller identity supplied by its harness. This study makes authentication part of the action service's request path.

A client can ask for a privileged action. The service must decide using authority it can check.

  1. AUTHENTICATE

    A certificate identifies the caller.

    The service maps a mutual TLS client certificate's SHA-256 fingerprint to a principal. A name in request JSON or the certificate's common-name field does not establish that mapping.

  2. AUTHORISE

    A task grant constrains the request.

    The action service checks the authenticated caller against the task, action, resource and current grant state. Grant IDs are opaque local registry handles, not signed credentials. Reading an outcome requires a separate read grant.

  3. CHECK EFFECT

    The committed state is the evidence.

    A separate grader checks the recorded service decisions and final queue. A caller's claim of success is not the outcome.

ARCHITECTURAL ALIGNMENT

Identity and task authority have different jobs.

AGNTCY's 25 August 2026 discussion distinguishes verifiable agent identity from task-bound authorisation. It describes AGNTCY Identity's Agent Badge and ResolverMetadata, while identifying the task authorisation profile as work still to be defined.

Our local study follows that separation. Its mutual TLS certificates are not AGNTCY badges, and its local grants do not implement that proposed profile. We use no AGNTCY SDK and claim no protocol conformance, affiliation or novelty.

02 / RECORDED CASES

Inspect the request.
Then the outcome.

Each case below comes from the checked-in receipt. “Accepted” means the grader accepted the case's recorded behaviour, which can include denying an unauthorised request.

Open the complete JSON receipt

An authorised action

Accepted

A specialist asks to commit one permitted task.

2 recorded calls · 1 queue effect

Inspect the actual record
  1. begin · specialistPENDING
  2. commit · specialistCOMMITTED
{
  "id": "authorised",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "authorised",
    "scenario": "authorised",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": {
          "event_seq": 2,
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "status": "COMMITTED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "commit",
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 2,
          "status": "COMMITTED",
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [
        {
          "action_id": "effect-2",
          "commit_seq": 2,
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
        }
      ],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": []
    },
    "process_ids": [
      15
    ],
    "process_exits": [
      0
    ],
    "total_calls": 3,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

No client certificate

Accepted

The client attempts a TLS connection without a certificate.

1 recorded call · 0 queue effects

Inspect the actual record
  1. begin · noneTLS_REJECTED
{
  "id": "missing_certificate",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "missing_certificate",
    "scenario": "missing_certificate",
    "calls": [
      {
        "operation": "begin",
        "client": "none",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": null,
        "error": "TLS_REJECTED"
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [],
      "revocations": []
    },
    "process_ids": [
      16
    ],
    "process_exits": [
      0
    ],
    "total_calls": 2,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

An untrusted certificate

Accepted

A foreign self-signed certificate tests the trust root.

1 recorded call · 0 queue effects

Inspect the actual record
  1. begin · untrustedTLS_REJECTED
{
  "id": "untrusted_certificate",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "untrusted_certificate",
    "scenario": "untrusted_certificate",
    "calls": [
      {
        "operation": "begin",
        "client": "untrusted",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": null,
        "error": "TLS_REJECTED"
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [],
      "revocations": []
    },
    "process_ids": [
      17
    ],
    "process_exits": [
      0
    ],
    "total_calls": 2,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

A trusted but wrong caller

Accepted

A recognised principal presents a grant belonging to the specialist.

1 recorded call · 0 queue effects

Inspect the actual record
  1. begin · wrongDENIEDSUBJECT_MISMATCH
{
  "id": "wrong_caller",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "wrong_caller",
    "scenario": "wrong_caller",
    "calls": [
      {
        "operation": "begin",
        "client": "wrong",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "reason": "SUBJECT_MISMATCH",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "deny",
          "operation": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "reason": "SUBJECT_MISMATCH",
          "resource": "remediation-queue",
          "seq": 1,
          "subject": "wrong-specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [],
      "revocations": []
    },
    "process_ids": [
      18
    ],
    "process_exits": [
      0
    ],
    "total_calls": 2,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

A caller name in request JSON

Accepted

An extra subject field tests the strict request schema.

1 recorded call · 0 queue effects

Inspect the actual record
  1. begin · specialistDENIEDINVALID_SCHEMA
{
  "id": "caller_spoof",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "caller_spoof",
    "scenario": "caller_spoof",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue",
          "subject": "specialist"
        },
        "response": {
          "reason": "INVALID_SCHEMA",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [],
      "revocations": []
    },
    "process_ids": [
      19
    ],
    "process_exits": [
      0
    ],
    "total_calls": 2,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

The wrong task

Accepted

An A grant is presented for a B request.

1 recorded call · 0 queue effects

Inspect the actual record
  1. begin · specialistDENIEDSCOPE_MISMATCH
{
  "id": "scope_job",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "scope_job",
    "scenario": "scope_job",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "B",
          "key": "B-remediation",
          "payload": {
            "remediation": "synthetic-B"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "reason": "SCOPE_MISMATCH",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "B",
          "key": "B-remediation",
          "kind": "deny",
          "operation": "begin",
          "payload": {
            "remediation": "synthetic-B"
          },
          "payload_hash": "7a99e477f88cd5523c58bc74e0622951cac80225924c8070b0b3c83c4f13dfe4",
          "reason": "SCOPE_MISMATCH",
          "resource": "remediation-queue",
          "seq": 1,
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [],
      "revocations": []
    },
    "process_ids": [
      20
    ],
    "process_exits": [
      0
    ],
    "total_calls": 2,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

The wrong resource

Accepted

The request names a resource outside the grant.

1 recorded call · 0 queue effects

Inspect the actual record
  1. begin · specialistDENIEDSCOPE_MISMATCH
{
  "id": "scope_resource",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "scope_resource",
    "scenario": "scope_resource",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "other-resource"
        },
        "response": {
          "event_seq": 1,
          "reason": "SCOPE_MISMATCH",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "deny",
          "operation": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "reason": "SCOPE_MISMATCH",
          "resource": "other-resource",
          "seq": 1,
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [],
      "revocations": []
    },
    "process_ids": [
      21
    ],
    "process_exits": [
      0
    ],
    "total_calls": 2,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

A grant expires before commit

Accepted

Logical event-sequence expiry is reached after begin.

2 recorded calls · 0 queue effects

Inspect the actual record
  1. begin · specialistPENDING
  2. commit · specialistDENIEDEXPIRED
{
  "id": "expired_grant",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "expired_grant",
    "scenario": "expired_grant",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": {
          "event_seq": 2,
          "reason": "EXPIRED",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "deny",
          "operation": "commit",
          "reason": "EXPIRED",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 2,
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 2,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 2,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 2,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": []
    },
    "process_ids": [
      22
    ],
    "process_exits": [
      0
    ],
    "total_calls": 3,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

Revoke A while B continues

Accepted

A durable A request is pending when the administrator revokes A.

6 recorded calls · 1 queue effect

Inspect the actual record
  1. begin · specialistPENDING
  2. revoke · adminrevoke
  3. commit · specialistDENIEDREVOKED
  4. lookup · specialistABSENT
  5. begin · specialistPENDING
  6. commit · specialistCOMMITTED
{
  "id": "revoked_inflight",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "revoked_inflight",
    "scenario": "revoked_inflight",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "revoke",
        "client": "admin",
        "request": {
          "op": "revoke",
          "job": "A"
        },
        "response": {
          "actor": "authenticated-admin",
          "job": "A",
          "kind": "revoke",
          "seq": 2
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": {
          "event_seq": 3,
          "reason": "REVOKED",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      },
      {
        "operation": "lookup",
        "client": "specialist",
        "request": {
          "op": "lookup",
          "job": "A",
          "key": "A-remediation",
          "grant_id": "A-read",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 4,
          "receipt": null,
          "status": "ABSENT"
        },
        "error": null
      },
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "B",
          "key": "B-remediation",
          "payload": {
            "remediation": "synthetic-B"
          },
          "grant_id": "B-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 5,
          "request_id": "request-5",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-5"
        },
        "response": {
          "event_seq": 6,
          "receipt": {
            "action_id": "effect-6",
            "commit_seq": 6,
            "job": "B",
            "key": "B-remediation",
            "payload": {
              "remediation": "synthetic-B"
            },
            "payload_hash": "7a99e477f88cd5523c58bc74e0622951cac80225924c8070b0b3c83c4f13dfe4"
          },
          "status": "COMMITTED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-admin",
          "job": "A",
          "kind": "revoke",
          "seq": 2
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "deny",
          "operation": "commit",
          "reason": "REVOKED",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 3,
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-read",
          "job": "A",
          "key": "A-remediation",
          "kind": "lookup",
          "receipt": null,
          "resource": "remediation-queue",
          "seq": 4,
          "status": "ABSENT",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "begin_seq": 5,
          "grant_id": "B-write",
          "job": "B",
          "key": "B-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-B"
          },
          "payload_hash": "7a99e477f88cd5523c58bc74e0622951cac80225924c8070b0b3c83c4f13dfe4",
          "request_id": "request-5",
          "resource": "remediation-queue",
          "seq": 5,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "B-write",
          "job": "B",
          "key": "B-remediation",
          "kind": "commit",
          "receipt": {
            "action_id": "effect-6",
            "commit_seq": 6,
            "job": "B",
            "key": "B-remediation",
            "payload": {
              "remediation": "synthetic-B"
            },
            "payload_hash": "7a99e477f88cd5523c58bc74e0622951cac80225924c8070b0b3c83c4f13dfe4"
          },
          "request_id": "request-5",
          "resource": "remediation-queue",
          "seq": 6,
          "status": "COMMITTED",
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [
        {
          "action_id": "effect-6",
          "commit_seq": 6,
          "job": "B",
          "key": "B-remediation",
          "payload": {
            "remediation": "synthetic-B"
          },
          "payload_hash": "7a99e477f88cd5523c58bc74e0622951cac80225924c8070b0b3c83c4f13dfe4"
        }
      ],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        },
        {
          "begin_seq": 5,
          "grant_id": "B-write",
          "job": "B",
          "key": "B-remediation",
          "payload": {
            "remediation": "synthetic-B"
          },
          "payload_hash": "7a99e477f88cd5523c58bc74e0622951cac80225924c8070b0b3c83c4f13dfe4",
          "request_id": "request-5",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": [
        {
          "job": "A",
          "seq": 2
        }
      ]
    },
    "process_ids": [
      23
    ],
    "process_exits": [
      0
    ],
    "total_calls": 7,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

The same request retried

Accepted

Task, request key and payload are repeated.

4 recorded calls · 1 queue effect

Inspect the actual record
  1. begin · specialistPENDING
  2. commit · specialistCOMMITTED
  3. begin · specialistPENDING
  4. commit · specialistREPLAY
{
  "id": "identical_retry",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "identical_retry",
    "scenario": "identical_retry",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": {
          "event_seq": 2,
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "status": "COMMITTED"
        },
        "error": null
      },
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 3,
          "request_id": "request-3",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-3"
        },
        "response": {
          "event_seq": 4,
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "status": "REPLAY"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "commit",
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 2,
          "status": "COMMITTED",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "begin_seq": 3,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-3",
          "resource": "remediation-queue",
          "seq": 3,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "replay",
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "request_id": "request-3",
          "resource": "remediation-queue",
          "seq": 4,
          "status": "REPLAY",
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [
        {
          "action_id": "effect-2",
          "commit_seq": 2,
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
        }
      ],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        },
        {
          "begin_seq": 3,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-3",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": []
    },
    "process_ids": [
      24
    ],
    "process_exits": [
      0
    ],
    "total_calls": 5,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

The same key, changed payload

Accepted

The original request key is reused with different content.

4 recorded calls · 1 queue effect

Inspect the actual record
  1. begin · specialistPENDING
  2. commit · specialistCOMMITTED
  3. begin · specialistPENDING
  4. commit · specialistCONFLICTPAYLOAD_CONFLICT
{
  "id": "conflicting_retry",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "conflicting_retry",
    "scenario": "conflicting_retry",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": {
          "event_seq": 2,
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "status": "COMMITTED"
        },
        "error": null
      },
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "different-synthetic-remediation"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 3,
          "request_id": "request-3",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-3"
        },
        "response": {
          "event_seq": 4,
          "reason": "PAYLOAD_CONFLICT",
          "receipt": null,
          "status": "CONFLICT"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "commit",
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 2,
          "status": "COMMITTED",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "begin_seq": 3,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "different-synthetic-remediation"
          },
          "payload_hash": "e33e38ba1cf224664ecd596ba4e095390e571e68ae1bd621defb21e121aa49d9",
          "request_id": "request-3",
          "resource": "remediation-queue",
          "seq": 3,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "existing_payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "conflict",
          "payload_hash": "e33e38ba1cf224664ecd596ba4e095390e571e68ae1bd621defb21e121aa49d9",
          "request_id": "request-3",
          "resource": "remediation-queue",
          "seq": 4,
          "status": "CONFLICT",
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [
        {
          "action_id": "effect-2",
          "commit_seq": 2,
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
        }
      ],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        },
        {
          "begin_seq": 3,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "different-synthetic-remediation"
          },
          "payload_hash": "e33e38ba1cf224664ecd596ba4e095390e571e68ae1bd621defb21e121aa49d9",
          "request_id": "request-3",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": []
    },
    "process_ids": [
      25
    ],
    "process_exits": [
      0
    ],
    "total_calls": 5,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

Lost reply, service restart

Accepted

The service exits after commit and before its reply.

3 recorded calls · 1 queue effect

Inspect the actual record
  1. begin · specialistPENDING
  2. commit · specialistNO_RESPONSE
  3. lookup · specialistFOUND
{
  "id": "lost_reply_restart",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "lost_reply_restart",
    "scenario": "lost_reply_restart",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": null,
        "error": "NO_RESPONSE"
      },
      {
        "operation": "lookup",
        "client": "specialist",
        "request": {
          "op": "lookup",
          "job": "A",
          "key": "A-remediation",
          "grant_id": "A-read",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 3,
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "status": "FOUND"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "commit",
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 2,
          "status": "COMMITTED",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-read",
          "job": "A",
          "key": "A-remediation",
          "kind": "lookup",
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "resource": "remediation-queue",
          "seq": 3,
          "status": "FOUND",
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [
        {
          "action_id": "effect-2",
          "commit_seq": 2,
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
        }
      ],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": []
    },
    "process_ids": [
      26,
      27
    ],
    "process_exits": [
      74,
      0
    ],
    "total_calls": 4,
    "snapshot_calls": 1,
    "observations": [
      {
        "status": "outcome_unknown"
      },
      {
        "status": "reconciled",
        "receipt": {
          "action_id": "effect-2",
          "commit_seq": 2,
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
        }
      }
    ],
    "error": null
  }
}

A receipt needs read authority

Accepted

A wrong principal and a write-only grant each attempt a read.

4 recorded calls · 1 queue effect

Inspect the actual record
  1. begin · specialistPENDING
  2. commit · specialistCOMMITTED
  3. lookup · wrongDENIEDSUBJECT_MISMATCH
  4. lookup · specialistDENIEDSCOPE_MISMATCH
{
  "id": "receipt_read_denied",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "receipt_read_denied",
    "scenario": "receipt_read_denied",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "specialist",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": {
          "event_seq": 2,
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "status": "COMMITTED"
        },
        "error": null
      },
      {
        "operation": "lookup",
        "client": "wrong",
        "request": {
          "op": "lookup",
          "job": "A",
          "key": "A-remediation",
          "grant_id": "A-read",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 3,
          "reason": "SUBJECT_MISMATCH",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      },
      {
        "operation": "lookup",
        "client": "specialist",
        "request": {
          "op": "lookup",
          "job": "A",
          "key": "A-remediation",
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 4,
          "reason": "SCOPE_MISMATCH",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "commit",
          "receipt": {
            "action_id": "effect-2",
            "commit_seq": 2,
            "job": "A",
            "key": "A-remediation",
            "payload": {
              "remediation": "synthetic-A"
            },
            "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
          },
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 2,
          "status": "COMMITTED",
          "subject": "specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-read",
          "job": "A",
          "key": "A-remediation",
          "kind": "deny",
          "operation": "lookup",
          "reason": "SUBJECT_MISMATCH",
          "resource": "remediation-queue",
          "seq": 3,
          "subject": "wrong-specialist"
        },
        {
          "actor": "authenticated-service",
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "deny",
          "operation": "lookup",
          "reason": "SCOPE_MISMATCH",
          "resource": "remediation-queue",
          "seq": 4,
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [
        {
          "action_id": "effect-2",
          "commit_seq": 2,
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c"
        }
      ],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": []
    },
    "process_ids": [
      28
    ],
    "process_exits": [
      0
    ],
    "total_calls": 5,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

Another caller tries to commit

Accepted

A different principal presents the pending request ID.

2 recorded calls · 0 queue effects

Inspect the actual record
  1. begin · specialistPENDING
  2. commit · wrongDENIEDREQUEST_OWNER_MISMATCH
{
  "id": "commit_wrong_caller",
  "grade": {
    "passed": true,
    "errors": []
  },
  "trace": {
    "id": "commit_wrong_caller",
    "scenario": "commit_wrong_caller",
    "calls": [
      {
        "operation": "begin",
        "client": "specialist",
        "request": {
          "op": "begin",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "grant_id": "A-write",
          "resource": "remediation-queue"
        },
        "response": {
          "event_seq": 1,
          "request_id": "request-1",
          "status": "PENDING"
        },
        "error": null
      },
      {
        "operation": "commit",
        "client": "wrong",
        "request": {
          "op": "commit",
          "request_id": "request-1"
        },
        "response": {
          "reason": "REQUEST_OWNER_MISMATCH",
          "receipt": null,
          "status": "DENIED"
        },
        "error": null
      }
    ],
    "snapshot": {
      "control": "enforced",
      "events": [
        {
          "actor": "authenticated-service",
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "kind": "begin",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "seq": 1,
          "status": "PENDING",
          "subject": "specialist"
        }
      ],
      "grants": [
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "A-investigator",
          "issuer": "coordinator",
          "job": "A",
          "parent": "A-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-read",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "A-root",
          "issuer": "fixture-issuer",
          "job": "A",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "A-write",
          "issuer": "investigator",
          "job": "A",
          "parent": "A-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 1,
          "expires_at": 1000000000,
          "id": "B-investigator",
          "issuer": "coordinator",
          "job": "B",
          "parent": "B-root",
          "resources": [
            "remediation-queue"
          ],
          "subject": "investigator"
        },
        {
          "actions": [
            "receipt.read"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-read",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 2,
          "expires_at": 1000000000,
          "id": "B-root",
          "issuer": "fixture-issuer",
          "job": "B",
          "parent": null,
          "resources": [
            "remediation-queue"
          ],
          "subject": "coordinator"
        },
        {
          "actions": [
            "queue.submit"
          ],
          "delegation_limit": 0,
          "expires_at": 1000000000,
          "id": "B-write",
          "issuer": "investigator",
          "job": "B",
          "parent": "B-investigator",
          "resources": [
            "remediation-queue"
          ],
          "subject": "specialist"
        }
      ],
      "queue": [],
      "requests": [
        {
          "begin_seq": 1,
          "grant_id": "A-write",
          "job": "A",
          "key": "A-remediation",
          "payload": {
            "remediation": "synthetic-A"
          },
          "payload_hash": "a24811aff64e1203936494787d867a68344f5d9b9ffd636fbe35512c9e97aa0c",
          "request_id": "request-1",
          "resource": "remediation-queue",
          "subject": "specialist"
        }
      ],
      "revocations": []
    },
    "process_ids": [
      29
    ],
    "process_exits": [
      0
    ],
    "total_calls": 3,
    "snapshot_calls": 1,
    "observations": [],
    "error": null
  }
}

This page displays recorded evidence. Opening a case does not run a client, contact the action service or issue a new task.

Revocation has an ordering point.

For this local contract, revocation stops later commits. It does not undo effects already committed. A separately authorised task must retain its own permission.

Grant expiry follows the store's logical event sequence, not elapsed wall-clock time. A pending request is a durable pending record, not a committed queue effect or a claim of concurrent network execution.

03 / CHALLENGE THE CHECKER

A check needs
a failing example.

Deliberately corrupted records test whether the grader rejects misleading evidence. These checks mutate a record after execution.

They are seeded faults, not service configurations that produced those outcomes or newly discovered vulnerabilities.

Corrupted record checks

unexpected effectDetected

Expected rejection: UNEXPECTED_EFFECT

  • QUEUE_MISMATCH

    Durable queue differs from independently reconstructed commits.

  • UNEXPECTED_EFFECT

    Job A has an effect outside its registered final state.

missing BDetected

Expected rejection: MISSING_EFFECT

  • QUEUE_MISMATCH

    Durable queue differs from independently reconstructed commits.

  • MISSING_EFFECT

    Authorised job B did not complete.

false auth successDetected

Expected rejection: AUTHENTICATION_BYPASS

  • AUTHENTICATION_BYPASS

    Call 1 claims a response where TLS_REJECTED is required.

duplicate effectDetected

Expected rejection: DUPLICATE_EFFECT

  • QUEUE_MISMATCH

    Durable queue differs from independently reconstructed commits.

  • DUPLICATE_EFFECT

    The durable queue repeats a job effect.

lost reply false successDetected

Expected rejection: FALSE_CERTAINTY

  • CALL_CONTRACT

    The registered sequence of probes is incomplete or extended.

  • UNACCOUNTED_EVENT

    The durable event history contains an unaccounted operation.

  • FALSE_CERTAINTY

    Lost-reply recovery requires recorded uncertainty and a subsequent authoritative receipt read.

The implementation, recorded run, review and independent reproduction are separate evidence stages. A grader result is not an independent reproduction.

04 / SOURCE AND REPRODUCTION

Run the boundary.
Read the receipt.

The code, contract and recorded evidence live together. Our research code is Apache-2.0 licensed.

Open the source and run instructions

The harness uses Python's standard library and a local OpenSSL executable for test certificates. It starts a separate action-service process and sends synthetic requests over loopback. No model provider key or Python package installation is needed.

From a repository checkout on Linux, using Python 3.12 and OpenSSL with TLS 1.3 support:

python3 -m unittest discover -s research/boundary -p 'test_*.py'
python3 research/boundary/run.py --verify research/boundary/results/latest.json

Verification executes the development cases again and checks their evidence against the receipt contract. Fresh timing, process and certificate values may differ. The source documents which fields are compared.

Inspect the recorded execution
{
  "elapsedMs": 2074.2566849999093,
  "providerCalls": 0,
  "providerInferenceTokens": 0,
  "modelCalls": 0,
  "actualCharge": null,
  "chargeBasis": "No provider or model calls. Total execution charge is unknown.",
  "serviceProcesses": 15,
  "clientCalls": 33,
  "snapshotCalls": 14,
  "totalClientCalls": 47,
  "clientCallBasis": "clientCalls counts registered probes; totalClientCalls also includes admin snapshots.",
  "certificateProcesses": 10,
  "opensslProcesses": 11
}
Inspect the recorded environment
{
  "python": "3.12.14",
  "sqlite": "3.53.1",
  "openssl": "OpenSSL 3.5.8 25 Aug 2026",
  "opensslCli": "OpenSSL 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024)",
  "platform": "linux/x86_64",
  "transport": "TLS 1.3 on 127.0.0.1",
  "frameworks": {}
}
Inspect the execution manifest
{
  "sha256": {
    "research/boundary/CONTRACT.md": "27af6495b9968fa8a7e2a90b7856edc8ed9cd90f05d7df323a0e6f84554579ca",
    "research/boundary/README.md": "b0009c49629d2e5884f56c41d26a8673c24e897cc02cd1702c356a9de5363c15",
    "research/boundary/grader.py": "33d2588f1cc6b9aa4316615994832e0b608e604ed221148c918a8cb0b99a6058",
    "research/boundary/run.py": "94a8572fa16d7ff0daca4caa18c4bd56d05be2f3e0b3abb646e3d5d7ec3023a3",
    "research/boundary/scenarios.py": "7d081340249565dc2ecf3d04cdbb50b1ee461ea7fb8c2932d6e1e91a57cf9e20",
    "research/boundary/service.py": "8c9fa4a3a601ea778e6672889651dc1d8e2e0ae9174e80d6b0671adf8330e98e",
    "research/boundary/test_grader.py": "36bccf39ba89ee379048d0e9405d01cc9624651ea4b890d09db829d347f85cd8",
    "research/boundary/test_service.py": "d3a3437e6138b87f219a4bbd2452f74b4af0447879cf2558c85449d642435982",
    "research/recovery/store.py": "8e3829e9afd2b432186ef6ba96713f513f56c40c935c540d809aa65d9f35669f"
  },
  "repeatsPerCase": 1,
  "fixtureStatus": "Public scripted development cases, not held-out evaluation.",
  "clock": "Grant expiry and revocation use central SQLite event order; elapsedMs is monotonic wall duration.",
  "identity": "TLS-verified client certificate DER SHA256 mapped to a server-configured principal.",
  "authority": "Synthetic local grant registry; no signed grant protocol or AGNTCY SDK.",
  "sampling": "Fixed requests; fresh ephemeral RSA certificates and TLS randomness each suite.",
  "comparison": "14 enforced API cases and 5 deliberately corrupted recordings; no model comparison.",
  "isolation": "Separate same-OS-user service; not a malicious-process sandbox or OS-enforced egress isolation.",
  "controlExpectedCodes": {
    "unexpected_effect": "UNEXPECTED_EFFECT",
    "missing_B": "MISSING_EFFECT",
    "false_auth_success": "AUTHENTICATION_BYPASS",
    "duplicate_effect": "DUPLICATE_EFFECT",
    "lost_reply_false_success": "FALSE_CERTAINTY"
  },
  "verification": "Fresh local execution and deterministic-record comparison; omits time, environment and raw PIDs. Review excluded from source hashes to avoid a circular receipt."
}

No remote inference is measured. Computing cost is not measured, so the absence of model calls is not a claim of zero total cost.

05 / TRUST AND LIMITS

A real service.
A bounded claim.

The tested boundary is a request interface within a trusted local environment.

  • The host and authority are trusted. The certificate issuer, service, grant store, harness, client code and grader are part of the trusted base. Client credentials remain trusted. Request JSON can be adversarial.
  • Process separation is not hostile-process containment. Service and clients use the same operating-system user. A malicious process with that user's access could read keys, edit the database or call the store directly. This study has no operating-system sandbox claim.
  • One local ordering boundary. Queue commits and revocation share a central atomic ordering boundary. These results do not establish distributed revocation, cross-organisation security or protection after service compromise.
  • Synthetic clients and effects. No new agent framework or live model is evaluated. Requests are fixed, the queue is a fixture, and no remediation runs against a customer system.
  • No wire interoperability claim. The loopback request format is ours. It is not an AGNTCY Identity, A2A or MCP conformance test.
  • Development evidence only. The cases are constructed and visible to the implementation. They are not a held-out benchmark, independent external reproduction or evidence of more capable agent cooperation.

WHAT WOULD CHANGE THE EVIDENCE?

A counterexample at the declared boundary.

A request that commits without the required current task authority would defeat the enforced contract. A legitimate task blocked by another task's revocation would also count as a failure. The full traces make those claims open to inspection.

Read the research programme

Our constitution requires the limits to travel with the result.