Live sandboxResolved by the sandbox gateway just now.· resolution: requires_escalation· Interactive product demonstration using simulated Acme data

Bundle Explorer

Inspect the evidence state before the action.

Change identity, valid time, known-at time, and policy. Then inspect each evidence disposition, verify the sample signature, and replay the result.

Safe public sample · simulated Acme data · schema 0.1 draft

Interactive product demonstration using simulated Acme data

Input

Context Request

Agent: agent:vendor-ops
Workload: spiffe://acme/agents/vendor-ops/prod
Purpose: verify_vendor_payment_change
Decision: vendor_payment_change
Subject: vendor:atlas-industrial

Human principalFull payment-change review scopeValid atAt decision timeKnown atDecision-time knowledgePolicyIndependent verification required

Resolution

Evidence relationships

✓ Includedsha256:80bc…7e12

ERP vendor master

Authoritative bank account ends in 8842. The requested account does not match.

Authority: Authoritative for payment instructions
ACL decision: Admitted by source ACL + purpose policy
Time: valid 2025-11-02 → current
Freshness: Observed 8 seconds ago

Output

Evidence Manifest

Included4

Excluded2

Redacted1

Contradictions1

Missing requirements1

Replay fidelityexact

SignatureECDSA P-256

ResolutionREQUIRES_ESCALATION

Bank details conflict with the authoritative ERP record, and independent verification is missing.

Schema 0.1 · draft

em_01K_VENDOR_9381

{
  "manifest_id": "em_01K_VENDOR_9381",
  "request_id": "cr_01K_VENDOR_9381",
  "policy_bundle": {
    "id": "vendor_payment_policy",
    "version": "7.3"
  },
  "evidence": [
    "erp-master",
    "contract",
    "payment-history",
    "change-event"
  ],
  "excluded_evidence": [
    "email",
    "finance-note"
  ],
  "redacted_evidence": [
    "requester"
  ],
  "contradictions": [
    "bank_details_conflict"
  ],
  "missing_requirements": [
    "independent-verification"
  ],
  "resolution": "requires_escalation",
  "replay": {
    "fidelity": "exact"
  },
  "integrity": {
    "algorithm": "ECDSA_P256_SHA256",
    "signature": "verified_by_public_key"
  }
}

What this proves

The interaction changes evidence, not decoration.

Each control produces a different permitted or knowable evidence state. The demonstration is deterministic, browser-local, and sends no evidence content to analytics.

Open the public verifier Read manifest semantics