behalf · action receipt export

run_c71e

One run, receipt by receipt, with the delegation chain that authorised each step.

Rendered
2026-08-29T09:02:39Z
Log origin
behalf.sh/demo/run_9f2a
Tree size
94 leaves
Chain head
a952a9b0b83da6f8c1cb0f7e15521f8feebeb3cbc3e87715b2bf4801be7acadb
This page is a rendering of the bytes in the log. It is not the evidence; the receipts are.

What this rendering could not show

The payload store at /tmp/behalf-demo/demo/blobs held none of the blobs these receipts commit to, so every slot renders as its typed placeholder. That is still evidence — the digests are in the signed receipts either way — but it is not the same finding as content that contradicts its commitment, and the page distinguishes them.

What this document proves — and what it does not

This section is first on purpose. Anyone security-literate will find these limits in ten seconds; stating them up front is cheaper than being corrected.

What the verifier proves

Record integrity.

No receipt was modified, dropped, reordered or back-dated after it was written. The log is a tiled transparency log; checkpoints are signed every second; verification is fully offline against the exported bytes — no call to behalf, no call to your identity provider.

Chain authorisation.

That hop N of a delegation chain was authorised by hop N−1, cryptographically, per hop. Where that signature was checked at capture, this page says so on the hop itself.

The identity root.

That a specific human authenticated with a specific identity provider at a specific time, and controls the device key the chain descends from. This is the one genuinely third-party-checkable fact in the stack: the OIDC nonce is the thumbprint of a freshly generated device key, so the provider's own signature binds that human to that key.

What it does not prove, and cannot

That the agent did what the receipt says.

behalf records what the capture surface observed. A compromised or prompt-injected agent can emit a receipt describing something it did not do. Such content is recorded as asserted, and this page says so.

The agent's own integrity.

Local capture cannot attest the process it runs inside. This is a structural limit, not a v1 shortcut.

Anything before capture.

Custody begins when the capture surface signs. Suppression upstream of that point is out of scope; what the record does show is silence.

That a workstation user cannot bypass capture.

They can — by removing the proxy from their config. v1 makes capture coverage visible rather than pretending it is enforced.

Names shown for keys — “alice@acme.com”, “billing-agent” — come from the local alias map. They are asserted labels, never cryptographic claims: the canonical actor identity is the key thumbprint printed beside each one.

Run run_c71e

Run
run_c71e
Started
2026-08-26T02:17:00Z
Last receipt
2026-08-26T02:20:50Z
Status
ok
Actions
47 of 47 receipts
On behalf of
alice@acme.com
Attribution
asserted (weakest receipt)
Payloads
94 missing

“alice@acme.com” is a local alias for key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo. The key is the evidence; the name is not.

Attribution across 47 action receipts

statereceiptsshare
asserted47100%

Numerator: action-family receipts (action, tool_call, resource_read, message) at each stored verification state. Denominator: all action-family receipts in this run. Both are read off the stored per-receipt rollup, which is the weakest hop of that receipt's chain.

Timeline

Log-index order filtered to this run — the authoritative reconstruction order. Run completeness is not claimed: it would be marked by a session-end receipt, and the frozen record-kind enum has no such kind yet.

stepelapsedoperationtargetoutcomeattributionpayload
0 t+0ms tickets.claim tk_4437 ok asserted input: missing output: missing
1 t+5s tickets.read tk_4437 ok asserted input: missing output: missing
2 t+10s customers.lookup cus_2291 ok asserted input: missing output: missing
3 t+15s crm.notes.read cus_2291 ok asserted input: missing output: missing
4 t+20s kb.search refund policy ok asserted input: missing output: missing
5 t+25s kb.read kb_310 ok asserted input: missing output: missing
6 t+30s policies.read pol_refunds_v3 ok asserted input: missing output: missing
7 t+35s orders.list cus_2291 ok asserted input: missing output: missing
8 t+40s orders.read ord_4437 ok asserted input: missing output: missing
9 t+45s shipping.track shp_8814 ok asserted input: missing output: missing
10 t+50s payments.history cus_2291 ok asserted input: missing output: missing
11 t+55s tickets.comment tk_4437 ok asserted input: missing output: missing
12 t+60s orders.search cus_2291 ok asserted input: missing output: missing
13 t+65s orders.read ord_5518 ok asserted input: missing output: missing
14 t+70s payments.method.read pm_5518 ok asserted input: missing output: missing
15 t+75s payments.history cus_2291 ok asserted input: missing output: missing
16 t+80s shipping.track shp_5518 ok asserted input: missing output: missing
17 t+85s inventory.check sku_5518 ok asserted input: missing output: missing
18 t+1m30s kb.search refund limits ok asserted input: missing output: missing
19 t+1m35s policies.read pol_refunds_v3 ok asserted input: missing output: missing
20 t+1m40s customers.verify cus_2291 ok asserted input: missing output: missing
21 t+1m45s orders.read ord_5518 ok asserted input: missing output: missing
22 t+1m50s refund.precheck ord_5518 ok asserted input: missing output: missing
23 t+1m55s tickets.comment tk_4437 ok asserted input: missing output: missing
24 t+2m00s crm.notes.append cus_2291 ok asserted input: missing output: missing
25 t+2m05s kb.read kb_311 ok asserted input: missing output: missing
26 t+2m10s approvals.request apr_5518_01 ok asserted input: missing output: missing
27 t+2m15s approvals.poll apr_5518_01 ok asserted input: missing output: missing
28 t+2m20s policies.read pol_refunds_v3 ok asserted input: missing output: missing
29 t+2m25s orders.read ord_5518 ok asserted input: missing output: missing
30 t+2m30s refund.precheck ord_5518 ok asserted input: missing output: missing
31 t+2m35s refund.issue ord_5518 ok asserted input: missing output: missing
32 t+2m40s payments.history cus_2291 ok asserted input: missing output: missing
33 t+2m45s orders.read ord_5518 ok asserted input: missing output: missing
34 t+2m50s tickets.comment tk_4437 ok asserted input: missing output: missing
35 t+2m55s crm.notes.append cus_2291 ok asserted input: missing output: missing
36 t+3m00s notifications.email.send cus_2291 ok asserted input: missing output: missing
37 t+3m05s tickets.status.set tk_4437 ok asserted input: missing output: missing
38 t+3m10s metrics.emit refund.issued ok asserted input: missing output: missing
39 t+3m15s kb.search closing template ok asserted input: missing output: missing
40 t+3m20s tickets.read tk_4437 ok asserted input: missing output: missing
41 t+3m25s crm.notes.read cus_2291 ok asserted input: missing output: missing
42 t+3m30s tickets.comment tk_4437 ok asserted input: missing output: missing
43 t+3m35s surveys.send cus_2291 ok asserted input: missing output: missing
44 t+3m40s tickets.status.set tk_4437 ok asserted input: missing output: missing
45 t+3m45s session.summary sess_desk_1 ok asserted input: missing output: missing
46 t+3m50s tickets.close tk_4437 ok asserted input: missing output: missing

Receipts

One card per receipt: what happened, the delegation chain that authorised it with each hop's verification state, and the payload slots joined against the local store.

step 0 tickets.claim tk_4437 t+0ms ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:00Z
Receipt id
01M0XXPGB0FG5KAWDVT6W13XWE
Log index
47
Attribution class
delegated
Acting key
billing-agent

Leaf hash 51718c03ed30ccb5eb12c3a7b2952d223217676c363c64db76fca3ba758c98b4 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 6dc5eb57fcc0f0a01f7eea988b0f98b70889fe21b0e5d17427a5d1271ace48ee 1 field digests
[missing: sha256:6dc5eb57fcc0… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 1 tickets.read tk_4437 t+5s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:05Z
Receipt id
01M0XXPN78ZDT63EHZ0K3AX7JT
Log index
48
Attribution class
delegated
Acting key
billing-agent

Leaf hash 35b7683dc1404f8de582562b5ac9cc84c40cf6d8e44d1d8932486a5ca06dfdab — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 6dc5eb57fcc0f0a01f7eea988b0f98b70889fe21b0e5d17427a5d1271ace48ee 1 field digests
[missing: sha256:6dc5eb57fcc0… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 2 customers.lookup cus_2291 t+10s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:10Z
Receipt id
01M0XXPT3GVMBSZVSSDWVB5VCX
Log index
49
Attribution class
delegated
Acting key
billing-agent

Leaf hash dbf336b0bb6ef098d6872d800462fde29fc35eeb69820eea5b180fa3d468b840 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 1e8a1bffd828f68e07581ed589c4ebf242881f9046670eff925f839573dec7df 1 field digests
[missing: sha256:1e8a1bffd828… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 3 crm.notes.read cus_2291 t+15s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:15Z
Receipt id
01M0XXPYZRWDVNZM9M2TDENF6M
Log index
50
Attribution class
delegated
Acting key
billing-agent

Leaf hash ec6e88feb4804824a3252c989184da37f79533aa0954d1d40199387fb1b60692 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 1e8a1bffd828f68e07581ed589c4ebf242881f9046670eff925f839573dec7df 1 field digests
[missing: sha256:1e8a1bffd828… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 4 kb.search refund policy t+20s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:20Z
Receipt id
01M0XXQ3W0YK46BMFZRNR1G6EA
Log index
51
Attribution class
delegated
Acting key
billing-agent

Leaf hash a8f8e17095e35db7eb2db1cc1aa8a0e134ef5b3043d79f7b6d5b1d4889cad314 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 25 B (25 bytes committed) digest cfb7b9e24993e2079be817f26458fbfe854c97ecca332a83bf03bc33912064a0 1 field digests
[missing: sha256:cfb7b9e24993… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 5 kb.read kb_310 t+25s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:25Z
Receipt id
01M0XXQ8R8J15X0E5ZNPK8GQ55
Log index
52
Attribution class
delegated
Acting key
billing-agent

Leaf hash 3450c3fa086883ffa6b375bfbe4e02734fea6d3e9726395dbbbfae098a0ee0f4 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 544e4859c7f1d979c11719b78c917ca597b1d7cd6fd4d29fffa46c4f4ff0acca 1 field digests
[missing: sha256:544e4859c7f1… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 6 policies.read pol_refunds_v3 t+30s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:30Z
Receipt id
01M0XXQDMGJTB4S20AXKNEKSVF
Log index
53
Attribution class
delegated
Acting key
billing-agent

Leaf hash 1cc3cd9213bac6b5480034e1a635d3984382f394c18f09fc874a7b9ca05ce79f — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 30 B (30 bytes committed) digest bd4e800fd2c20407e5ec8278da8ee500fe68933a66ba7e4e1ac20fead41f8c12 1 field digests
[missing: sha256:bd4e800fd2c2… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 7 orders.list cus_2291 t+35s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:35Z
Receipt id
01M0XXQJGR72K2Y18A0FG85ZGF
Log index
54
Attribution class
delegated
Acting key
billing-agent

Leaf hash c3facdd9810ac4563cc02265ede9668e18613035f1b1fc84b504f8b28e981513 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 1e8a1bffd828f68e07581ed589c4ebf242881f9046670eff925f839573dec7df 1 field digests
[missing: sha256:1e8a1bffd828… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 8 orders.read ord_4437 t+40s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:40Z
Receipt id
01M0XXQQD06EDZM8NFRF1F1XB3
Log index
55
Attribution class
delegated
Acting key
billing-agent

Leaf hash 4080214d1a7743b8414df01970ebe550d10ae309969f5417151dd2cbab9e66d9 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 9c5f587cecfbc539c26485827cb8e7c4156ae2eb9973ed7d9d088269eaed6163 1 field digests
[missing: sha256:9c5f587cecfb… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 9 shipping.track shp_8814 t+45s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:45Z
Receipt id
01M0XXQW9861QKKPW2PZQMZH7G
Log index
56
Attribution class
delegated
Acting key
billing-agent

Leaf hash d5657a3d46000270cca757773cc82e52af9df2d803cdb98fa005b83122552912 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 26 B (26 bytes committed) digest 85cc2eaa4e78c313d4c2504ce438bd9ffbf81f57df93f408aa08bcf52663ff13 1 field digests
[missing: sha256:85cc2eaa4e78… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 10 payments.history cus_2291 t+50s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:50Z
Receipt id
01M0XXR15G403GKTJQE3PMWCMA
Log index
57
Attribution class
delegated
Acting key
billing-agent

Leaf hash 0ead91597ad8a7bfd33e8c09cde350e38e6b1cd418688b24e4bf70690916d1f8 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 1e8a1bffd828f68e07581ed589c4ebf242881f9046670eff925f839573dec7df 1 field digests
[missing: sha256:1e8a1bffd828… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 11 tickets.comment tk_4437 t+55s ok asserted
Kind
tool_call
Captured
2026-08-26T02:17:55Z
Receipt id
01M0XXR61R0JZVBKKR4VM18R2B
Log index
58
Attribution class
delegated
Acting key
billing-agent

Leaf hash 9e6e566ae7ece44e8c29f531db9be16247d9c4f14d297f695faf004bafe304c9 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 61 B (61 bytes committed) digest f31756a1cf96c1f9e7ca759547f4f7c63f4b77a2a575ff2933990368f5436af9 2 field digests
[missing: sha256:f31756a1cf96… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 12 orders.search cus_2291 t+60s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:00Z
Receipt id
01M0XXRAY087D1XQ74D67EEY89
Log index
59
Attribution class
delegated
Acting key
billing-agent

Leaf hash a0361d9c1871cda3c510a4792a2a292b1b09a6fa8e00acf422805083eae8d1c3 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 45 B (45 bytes committed) digest f575140e236960507eac2abde04185e547d785bda8dc1f53e45732a6617a586c 2 field digests
[missing: sha256:f575140e2369… (customer-held)]
output missing committed as present
customer-held application/json 192 B (192 bytes committed) digest aaae699800d4257cbbbc961379c272a2492eee561403f9fe06903aed12407254 whole-blob digest only
[missing: sha256:aaae699800d4… (customer-held)]
step 13 orders.read ord_5518 t+65s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:05Z
Receipt id
01M0XXRFT85TM7X3A660TWHWT9
Log index
60
Attribution class
delegated
Acting key
billing-agent

Leaf hash 793d3f4a22b3959e93a02e567af6cc182973a4d582120f769de6655556e4662b — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 32e6748dc3dbc5ae796558f34d76397a70db6b3fdf9c7856cbd3b4bdcbc03e74 1 field digests
[missing: sha256:32e6748dc3db… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 14 payments.method.read pm_5518 t+70s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:10Z
Receipt id
01M0XXRMPG77314X8M7E4GQB0K
Log index
61
Attribution class
delegated
Acting key
billing-agent

Leaf hash 68f52b152d586bc1e68593b9c20d4e72e14126f28b04a74737d45f6826f4dd09 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 50 B (50 bytes committed) digest 421e3f29640dc4699364eb5fa51b24c6d8b22047ddebc1457c3e4ff629703eb5 2 field digests
[missing: sha256:421e3f29640d… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 15 payments.history cus_2291 t+75s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:15Z
Receipt id
01M0XXRSJRAADDT3B0PGQ7G0TW
Log index
62
Attribution class
delegated
Acting key
billing-agent

Leaf hash b15c39de5413ed91f5f8d65bd31a97833f51c31f21cbbbeb0b78cbbf3f287186 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 45 B (45 bytes committed) digest 391604c74d0c33df8fe6d931f36995c7bbe5f2ce586f5ae76b388a3e95c7280d 2 field digests
[missing: sha256:391604c74d0c… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 16 shipping.track shp_5518 t+80s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:20Z
Receipt id
01M0XXRYF0XDCBVTW870Z8NY8V
Log index
63
Attribution class
delegated
Acting key
billing-agent

Leaf hash a260f5897c7086b7fd2440cfca2725221a0f368939ad849c9b279da58037fd77 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 48 B (48 bytes committed) digest 968097d5eb7d5fb5712da4f0420edf48897f5ea6bbab4aac48b5ec3a79f4d655 2 field digests
[missing: sha256:968097d5eb7d… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 17 inventory.check sku_5518 t+85s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:25Z
Receipt id
01M0XXS3B8VF1HFS4R0S6F3NF3
Log index
64
Attribution class
delegated
Acting key
billing-agent

Leaf hash d36292e8b031b2a11628e786538f080b26732c6bc8468eace3f838b7274ac261 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 40 B (40 bytes committed) digest cb72a9fa1a16954908788b8d0be3ed677d8d53a7c916610fb16418d7290a3194 2 field digests
[missing: sha256:cb72a9fa1a16… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 18 kb.search refund limits t+1m30s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:30Z
Receipt id
01M0XXS87GNHREFYVNXK28X0Y6
Log index
65
Attribution class
delegated
Acting key
billing-agent

Leaf hash 55e7229145891c9c9d40bccb130048b9160ab519b7cdde945c7475b4a0318c9c — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 25 B (25 bytes committed) digest 5dd3ffd2f2af66c73e8f4bf89343c5408ad85bff8a1030309254a79ce8971d93 1 field digests
[missing: sha256:5dd3ffd2f2af… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 19 policies.read pol_refunds_v3 t+1m35s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:35Z
Receipt id
01M0XXSD3R2C3MTPRE587D943Q
Log index
66
Attribution class
delegated
Acting key
billing-agent

Leaf hash c5b156ac72874de95a2d7b085cf559ea4a7197bea60ff3f167ad18ae0246af9d — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 30 B (30 bytes committed) digest bd4e800fd2c20407e5ec8278da8ee500fe68933a66ba7e4e1ac20fead41f8c12 1 field digests
[missing: sha256:bd4e800fd2c2… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 20 customers.verify cus_2291 t+1m40s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:40Z
Receipt id
01M0XXSJ00AEZDFYPBWRNH9YGF
Log index
67
Attribution class
delegated
Acting key
billing-agent

Leaf hash f858fa0ff169fe48896727991bf7d504b4abeabe087b8796f0ea207723c702a6 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 1e8a1bffd828f68e07581ed589c4ebf242881f9046670eff925f839573dec7df 1 field digests
[missing: sha256:1e8a1bffd828… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 21 orders.read ord_5518 t+1m45s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:45Z
Receipt id
01M0XXSPW8N9ASC9DGA5T79YZ5
Log index
68
Attribution class
delegated
Acting key
billing-agent

Leaf hash aa715df2e03e1edb38ceb8f2cebb8beea2c3dc35ffe9b1efd9b2b5fb478dc4e6 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 32e6748dc3dbc5ae796558f34d76397a70db6b3fdf9c7856cbd3b4bdcbc03e74 1 field digests
[missing: sha256:32e6748dc3db… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 22 refund.precheck ord_5518 amount 1200.00 USD t+1m50s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:50Z
Receipt id
01M0XXSVRGPJESJJV9AFXQWWQN
Log index
69
Attribution class
delegated
Acting key
billing-agent

Leaf hash c055f12088ce4bd9250be57f1c02b590026863aeb586e1f684c05e34ae3f5370 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 45 B (45 bytes committed) digest 4716c962cfe9b001ebeeacd44fd4e6692e2df8f478ae55ed76f582f3e1d01d66 2 field digests
[missing: sha256:4716c962cfe9… (customer-held)]
output missing committed as present
customer-held application/json 92 B (92 bytes committed) digest 239b3f414c08ebb3f381e8377a5ef5150edc89db2ec851b4d348ba2e1b7532f0 whole-blob digest only
[missing: sha256:239b3f414c08… (customer-held)]
step 23 tickets.comment tk_4437 t+1m55s ok asserted
Kind
tool_call
Captured
2026-08-26T02:18:55Z
Receipt id
01M0XXT0MRRF7JPK5QV5P9QHT4
Log index
70
Attribution class
delegated
Acting key
billing-agent

Leaf hash f25fbadd17e9be67cdae95d783993df6c985868a3eafc50d6e5304ec0136c383 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 121 B (121 bytes committed) digest f361ceb9f50c9ed34dedfcb843e3e557f4777f3dc6312f6b6383384b411494f3 4 field digests
[missing: sha256:f361ceb9f50c… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 24 crm.notes.append cus_2291 t+2m00s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:00Z
Receipt id
01M0XXT5H0ZXAVZV9C5R6HQV4G
Log index
71
Attribution class
delegated
Acting key
billing-agent

Leaf hash 7ed469890ffffbeb5b8f1f344a9a7ac1facd4778183c3e54f6cd1912329f515a — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 117 B (117 bytes committed) digest f4f04f991f146d396433d017e4907efbed190715339a2dcd6694f8d6348a2534 4 field digests
[missing: sha256:f4f04f991f14… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 25 kb.read kb_311 t+2m05s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:05Z
Receipt id
01M0XXTAD88SNV4M0J9DRXNZKH
Log index
72
Attribution class
delegated
Acting key
billing-agent

Leaf hash a7c2e58629f1d7aea9aba471551ec14abc7895f0f8475ef75da69f34d17d60f6 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 38aa7f27126da0ae967e48b2d822ba0d49001640ef3a4fa6778194557647d4d2 1 field digests
[missing: sha256:38aa7f27126d… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 26 approvals.request apr_5518_01 t+2m10s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:10Z
Receipt id
01M0XXTF9GC0HEQADKSC58M8WK
Log index
73
Attribution class
delegated
Acting key
billing-agent

Leaf hash 7ba9e20147b5c53bc07a5e7240668864f31916388eb29c4d368d701568535432 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 73 B (73 bytes committed) digest fdc49cc7c0d0fda5bb3d988816959fec969a5d78e059f5cf68b37604acb381f8 3 field digests
[missing: sha256:fdc49cc7c0d0… (customer-held)]
output missing committed as present
customer-held application/json 61 B (61 bytes committed) digest 49b652848f667d94da39b491d4156436bfed9066af5cefb319f5f5840bf0da67 whole-blob digest only
[missing: sha256:49b652848f66… (customer-held)]
step 27 approvals.poll apr_5518_01 t+2m15s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:15Z
Receipt id
01M0XXTM5RX63Y4EJRCCQT29SM
Log index
74
Attribution class
delegated
Acting key
billing-agent

Leaf hash 2aa4071e732da7e2debce4af7ebfc8217732822c1c29e48a233916d43eb9c89d — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 29 B (29 bytes committed) digest 73e591fbfd54d5a253e5d562b5c8236ab32a077c338a7e53f4c7d05a79eef463 1 field digests
[missing: sha256:73e591fbfd54… (customer-held)]
output missing committed as present
customer-held application/json 61 B (61 bytes committed) digest 52510826a04cbc922a0b95f078fb5e112ea8c385492f21afa666229d6afdb5c9 whole-blob digest only
[missing: sha256:52510826a04c… (customer-held)]
step 28 policies.read pol_refunds_v3 t+2m20s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:20Z
Receipt id
01M0XXTS208GNSHW4RM1V4J5MQ
Log index
75
Attribution class
delegated
Acting key
billing-agent

Leaf hash 46c312c3353c0dc97fb855f9dc132fe2928b6773ceda5730ba9b54ae695bdb6b — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 30 B (30 bytes committed) digest bd4e800fd2c20407e5ec8278da8ee500fe68933a66ba7e4e1ac20fead41f8c12 1 field digests
[missing: sha256:bd4e800fd2c2… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 29 orders.read ord_5518 t+2m25s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:25Z
Receipt id
01M0XXTXY8HXQJWXG2C04ABR78
Log index
76
Attribution class
delegated
Acting key
billing-agent

Leaf hash cc0807c29a492dd26ff2336d4f83ba1544129892cba517d3763734bdf84fb7fc — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 32e6748dc3dbc5ae796558f34d76397a70db6b3fdf9c7856cbd3b4bdcbc03e74 1 field digests
[missing: sha256:32e6748dc3db… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 30 refund.precheck ord_5518 amount 1200.00 USD t+2m30s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:30Z
Receipt id
01M0XXV2TG830TSF18C6B97ABK
Log index
77
Attribution class
delegated
Acting key
billing-agent

Leaf hash 3713bb2b1acea64f78168b60cee5a03c0ca9de1a047c354dc148b7f58114b004 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 45 B (45 bytes committed) digest 4716c962cfe9b001ebeeacd44fd4e6692e2df8f478ae55ed76f582f3e1d01d66 2 field digests
[missing: sha256:4716c962cfe9… (customer-held)]
output missing committed as present
customer-held application/json 92 B (92 bytes committed) digest 239b3f414c08ebb3f381e8377a5ef5150edc89db2ec851b4d348ba2e1b7532f0 whole-blob digest only
[missing: sha256:239b3f414c08… (customer-held)]
step 31 refund.issue ord_5518 amount 1200.00 USD t+2m35s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:35Z
Receipt id
01M0XXV7PRZW690EHWXCCC3W4T
Log index
78
Attribution class
delegated
Acting key
billing-agent

Leaf hash d920ebcb2c52de4b2a439baff827beb33b39836078d69314db5a7b1c787e7f4a — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Scope excess — recorded, not enforced

The chain delegated refund.issue ≤ 100.00 USD and this operation issued 1200.00. behalf records scope excess and displays it; it does not block. The comparison is recomputed on every read from the raw stored grants (behalf.sh/attenuation/v1) and is never written back into the record.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 59 B (59 bytes committed) digest fd4e2053aea4d91e37afc0eccc0c622e631e64b5b27c8deb275b5e77d5dfc043 3 field digests
[missing: sha256:fd4e2053aea4… (customer-held)]
output missing committed as present
customer-held application/json 76 B (76 bytes committed) digest 1480aa6a25e34546aa6f80e38f8545d745350b23fd679bf69eb5106584c31d57 whole-blob digest only
[missing: sha256:1480aa6a25e3… (customer-held)]
step 32 payments.history cus_2291 t+2m40s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:40Z
Receipt id
01M0XXVCK06FDMJ6CJVQJP05KP
Log index
79
Attribution class
delegated
Acting key
billing-agent

Leaf hash 9e5f5e2bd1f901016066c2b565cfe9c295902a504afbaa52347e1b906c3c3402 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 45 B (45 bytes committed) digest 391604c74d0c33df8fe6d931f36995c7bbe5f2ce586f5ae76b388a3e95c7280d 2 field digests
[missing: sha256:391604c74d0c… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 33 orders.read ord_5518 t+2m45s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:45Z
Receipt id
01M0XXVHF8D47DYP4XZ949969J
Log index
80
Attribution class
delegated
Acting key
billing-agent

Leaf hash 5cb0df640e6d3c4779420e33fdf9394af490b8bfd426d8fadf342d0c29df0dd9 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 32e6748dc3dbc5ae796558f34d76397a70db6b3fdf9c7856cbd3b4bdcbc03e74 1 field digests
[missing: sha256:32e6748dc3db… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 34 tickets.comment tk_4437 t+2m50s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:50Z
Receipt id
01M0XXVPBGEC7MG1YZ6CVJ2FS6
Log index
81
Attribution class
delegated
Acting key
billing-agent

Leaf hash 929fa4aba760b36fa5c19be2fde0f2ab9d412437c4d3d4e6c66f11e70f54c48f — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 94 B (94 bytes committed) digest a3bee189225f314aaefea0bd30a5e6205ae3a9da45bc441f7807d17d10a27d50 4 field digests
[missing: sha256:a3bee189225f… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 35 crm.notes.append cus_2291 t+2m55s ok asserted
Kind
tool_call
Captured
2026-08-26T02:19:55Z
Receipt id
01M0XXVV7RH35YD887ZQPD41Q3
Log index
82
Attribution class
delegated
Acting key
billing-agent

Leaf hash 3255c79b03ac18bdeaa3c3a643cd29a15b2ec237c261c6db0b097d840f3fd2fc — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 97 B (97 bytes committed) digest 02fedd45cf4c0d368ef8e88d785dc4a69ded45116bb1301fb692485cea940f27 4 field digests
[missing: sha256:02fedd45cf4c… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 36 notifications.email.send cus_2291 t+3m00s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:00Z
Receipt id
01M0XXW0404ANJ93DF5Y94XC40
Log index
83
Attribution class
delegated
Acting key
billing-agent

Leaf hash fa854301ede8d4e05424889f21c0c73ffd861e960e27180d2984ae9f78362b5a — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 103 B (103 bytes committed) digest 7a678386625d1b1eeb41ce953a2ec2b07867cd817cabef0ad7155b4ca3c2875e 4 field digests
[missing: sha256:7a678386625d… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 37 tickets.status.set tk_4437 t+3m05s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:05Z
Receipt id
01M0XXW5089DAKZJEWPM7JKF5Z
Log index
84
Attribution class
delegated
Acting key
billing-agent

Leaf hash 910773b91ebb78cb6c96af3ef5feb1c782332264728a3e2c0f6488f31e971764 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 51 B (51 bytes committed) digest c1240260e26a489b7b7d9295ac36a2b24dce3aa2f9376b3ca635940a4653aaf0 2 field digests
[missing: sha256:c1240260e26a… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 38 metrics.emit refund.issued t+3m10s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:10Z
Receipt id
01M0XXW9WGYEQYDCMES39C7RQE
Log index
85
Attribution class
delegated
Acting key
billing-agent

Leaf hash 77e4d22a90c59fec4e017f4edb874067dbc89a1bfc4c94c09a1489c439f7a5fe — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 48 B (48 bytes committed) digest eeeaa5c193d5e6e6a8179d06ec6f4788652925375b91106e354cb1e1d727a064 2 field digests
[missing: sha256:eeeaa5c193d5… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 39 kb.search closing template t+3m15s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:15Z
Receipt id
01M0XXWERR6EJXGKTYFNWFKN8G
Log index
86
Attribution class
delegated
Acting key
billing-agent

Leaf hash 183dd9cee021761ac952f94675ee93125b3800a0943fcbd703d633b75d1a1314 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 28 B (28 bytes committed) digest 11741de4de4870c465d9a84efb893fafc8b7624668043ac09f039b1576abcfc1 1 field digests
[missing: sha256:11741de4de48… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 40 tickets.read tk_4437 t+3m20s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:20Z
Receipt id
01M0XXWKN0KNQ1F945R76B9PTX
Log index
87
Attribution class
delegated
Acting key
billing-agent

Leaf hash 5bb4e3fb47228329743dffa6b50ab0df346b210f456c383f055ec0a2c9e1e03d — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 6dc5eb57fcc0f0a01f7eea988b0f98b70889fe21b0e5d17427a5d1271ace48ee 1 field digests
[missing: sha256:6dc5eb57fcc0… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 41 crm.notes.read cus_2291 t+3m25s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:25Z
Receipt id
01M0XXWRH83ABB0Q6VXHNZYR1M
Log index
88
Attribution class
delegated
Acting key
billing-agent

Leaf hash 0208b84e9f504cc507c9d80bcddc9edbda3af6d340b2e647d2f46c08c0457a2a — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 1e8a1bffd828f68e07581ed589c4ebf242881f9046670eff925f839573dec7df 1 field digests
[missing: sha256:1e8a1bffd828… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 42 tickets.comment tk_4437 t+3m30s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:30Z
Receipt id
01M0XXWXDGYPYQA5HSABRBQHE8
Log index
89
Attribution class
delegated
Acting key
billing-agent

Leaf hash c97fea9b400a4aad87aae0997daa089ca51b209f3fad32138a231f34b93edc3f — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 64 B (64 bytes committed) digest 4eb99610bef103e94aaa7d9e5daf83e073b6b3edfd63d69e89c8e34a567e0bbc 2 field digests
[missing: sha256:4eb99610bef1… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 43 surveys.send cus_2291 t+3m35s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:35Z
Receipt id
01M0XXX29R9XQM4J72AAFJNKBN
Log index
90
Attribution class
delegated
Acting key
billing-agent

Leaf hash d3480ec317b9b07cd409c1a52692d45d01fd45cf56b571a51a09f16dd7f5da13 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 42 B (42 bytes committed) digest e90664a4d4fd5a48d07200998f640e3dd325b7e958cb5fbe0bc14a97a5a86be5 2 field digests
[missing: sha256:e90664a4d4fd… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 44 tickets.status.set tk_4437 t+3m40s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:40Z
Receipt id
01M0XXX760D9Z62F8QSC0RTNTP
Log index
91
Attribution class
delegated
Acting key
billing-agent

Leaf hash 92289495d07c643ab3fd4bfbcfc49813cfc94a109075c6a48d165cebfd02ac7b — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 43 B (43 bytes committed) digest 8c88143e40dbd060b7736ea89bb57632b08f3387fb2795e8f5ce08c1c810f582 2 field digests
[missing: sha256:8c88143e40db… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 45 session.summary sess_desk_1 t+3m45s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:45Z
Receipt id
01M0XXXC280ZV97XK3NHT22M0C
Log index
92
Attribution class
delegated
Acting key
billing-agent

Leaf hash 2660772d424d435f7c32ff2ff502a3aa9a4ece2b5a8306d30628528e97e716c2 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 72 B (72 bytes committed) digest 097f6bd3fb81206063b06b86ec3e4846ca351b8e9870f610decfe7f0abc2d4c0 3 field digests
[missing: sha256:097f6bd3fb81… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]
step 46 tickets.close tk_4437 t+3m50s ok asserted
Kind
tool_call
Captured
2026-08-26T02:20:50Z
Receipt id
01M0XXXGYGKR3ZBRYKNFDDS2PQ
Log index
93
Attribution class
delegated
Acting key
billing-agent

Leaf hash 1a443b044ca37f9c8fcb07b67d47e599bc9f9ab2d0ba1927ba87833d6e66e998 — the log's Merkle leaf over the stored envelope bytes. This card was rendered from those bytes after re-hashing them and checking them against this value.

Delegation chain — 2 of 3 hops verified

  1. alice@acme.com verified OIDC / google, authenticated 2026-08-26T02:16:58Z depth 0 of max 3
    key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · jti aat-run_c71e-hop0 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Delegated: “resolve ticket 4417”
    Scope: tickets.*, orders.read, refund.issue ≤ 100.00 USD
    credential oidc-id-token from https://accounts.google.com, id oidc-sub-digest:b657f6a082ce6b918a5ce510bfaeb76a864e40e38028fd776e70e85a726ae919 · amr pwd, mfa
    root binding: nonce ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · device key ylqWV0BrRjs8_ahvDOuiFZL5jg8oSOstLa_aK8rn0yo · ID token blob a317d8e96858e8a1d139f315f77f648caded372783bb8acea2a91cd895f6fd37 (customer-held)
    Checked
    • the identity provider's signature over the ID token
    • that the OIDC nonce equals the RFC 7638 thumbprint of this device key
    • that the root delegation is signed by that same key
    Not checked
    • who was at the keyboard — the binding proves control of a key, not presence
    • that this human intended this particular action; approval, where it exists, is a separate receipt and never reclassifies attribution
  2. support-orchestrator @1.4.2 verified aat-jws-ed25519 depth 1 of max 3
    key _nfvb_9UgnHxOXyU8hjTQWEbTudPuXcpj-rK5whCQN8 · jti aat-run_c71e-hop1 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried in-band
    Scope: orders.read, refund.issue ≤ 100.00 USD
    credential aat-jws from https://desk.demo.internal, id aat-jws:aat-run_c71e-hop1
    Checked
    • this hop's AAT signature, against the parent hop's confirmation key
    • the AAT draft's attenuation invariants over the raw RFC 9396 grants
    Not checked
    • what the holder of this key actually did — the operation below is the capture surface's observation, not a proof
  3. billing-agent asserted depth 2 of max 3
    key PVo-wJjF4RQ052WuuUFtz-e3oKgN6P0rDHDO3652H7M · jti aat-run_c71e-hop2 · expires 2026-08-27T00:00:00Z (exp 1787788800) · carried out-of-band
    Scope: refund.issue ≤ 100.00 USD
    credential caller-asserted from https://desk.demo.internal, id caller-asserted:aat-run_c71e-hop2
    Checked
    • the record carries this hop's claimed key, grants and expiry exactly as the capture surface saw them
    Not checked
    • no signature over this hop was verified at capture
    • the identity this hop acts under (alice@acme.com) is the chain's root principal, carried here by assertion rather than by signature
    • nothing binds this hop to its parent beyond the record itself

Payload slots

input missing committed as present
customer-held application/json 23 B (23 bytes committed) digest 6dc5eb57fcc0f0a01f7eea988b0f98b70889fe21b0e5d17427a5d1271ace48ee 1 field digests
[missing: sha256:6dc5eb57fcc0… (customer-held)]
output missing committed as present
customer-held application/json 15 B (15 bytes committed) digest a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288 whole-blob digest only
[missing: sha256:a29ee2b15c49… (customer-held)]

Verify it yourself

This page is a rendering. The evidence is the bytes in the log, and the point of those bytes is that nobody has to take this document's word for anything in it — including behalf's.

Log origin
behalf.sh/demo/run_9f2a
Tree size
94 leaves
Directory
/tmp/behalf-demo/demo/log

Chain head — Merkle root of the signed checkpoint

a952a9b0b83da6f8c1cb0f7e15521f8feebeb3cbc3e87715b2bf4801be7acadb

The signed checkpoint, verbatim 
behalf.sh/demo/run_9f2a
94
qVKpsLg9pvjByw9+FVIfj+6+s8vD6HcVsr9IAb56yts=

— behalf.sh/demo/run_9f2a +fp82zRolQ0OF8hX88Z64lfgS1rEESldppuCPMIRLdxZ+m8o+80iPDAkDToiYlvEJl7htbS1UHh130YQHY6i3yZ9Ogc=
A signed note: the origin line, the tree size, the root hash, and the signature lines. Checkpoints are signed every second; unknown extra lines are legal and are skipped by verifiers, because production logs grease them.

The commands

These run offline. They make no network call, no call to behalf and no call to your identity provider; everything they need is in the directory and in the files they read.

behalf-verify log /tmp/behalf-demo/demo/log

Verifies the log directory this page was rendered from: the checkpoint note signature, bundle coverage, every entry's content, and the recomputed Merkle root against the signed one. Offline — it makes no network call and no call to behalf.

behalf-log export --dir /tmp/behalf-demo/demo/log --run run_c71e --out run_c71e.jsonl

Writes the self-contained export file for this run: the signed receipt bytes verbatim, the keys they were signed with, and the chain head.

behalf-verify run_c71e.jsonl

Checks that export on its own. Exit 0 means every receipt is intact and the chain and head verify; exit 1 names the tamper class and the receipt index it broke at.

behalf-log rehydrate --dir /tmp/behalf-demo/demo/log --run run_c71e

Joins the receipts against your own payload store and reports any blob whose bytes no longer hash to the digest committed in its signed receipt — the payload finding this page shows in full.

Exit codes are stable and load-bearing: 0 verified — every receipt intact, chain and head verify; 1 tampering detected, with the class (content, drop, reorder, chain, truncation, head) and the receipt index it broke at; 2 unverifiable — not a readable export. A payload whose bytes no longer match its commitment is reported as its own class, payload, precisely because the log around it is still intact.