{
  "schemaVersion": "imladri.auditor-proof-packet.v1",
  "packetId": "imladri-auditor-proof-sample-20260601",
  "packetKind": "redacted-public-sample",
  "generatedAt": "2026-06-01T18:10:00.000Z",
  "statement": "Redacted public sample showing how one Imladri constitution produces one auditor-readable proof chain across action, data, and protected compute boundaries.",
  "subject": {
    "agentId": "agent_redacted_release_control",
    "constitutionVersion": "policy-2026-06-redacted",
    "surfaces": [
      "action",
      "data",
      "compute"
    ]
  },
  "claims": {
    "blockedBeforeBody": true,
    "unsafeBodyCalls": 0,
    "sourceUntouched": true,
    "sourceMutationCount": 0,
    "protectedComputeAttested": true,
    "zeroizedCleanup": true,
    "sdkCertification": "71/71 lanes passed",
    "hostedAdopters": "5/5 hosted proof paths passed",
    "mcpAuthority": "5/5 MCP authority lanes passed",
    "ciScanner": "GitLab and Vercel proof lanes passed"
  },
  "chain": {
    "algorithm": "SHA-256",
    "canonicalization": "json-stable-v1",
    "chainRoot": "b5046d2bab59397f4a4bece1a28c85280f94c60fbd96aaf9e1df224b9f412bce",
    "eventCount": 7,
    "entries": [
      {
        "index": 0,
        "eventType": "constitution.published",
        "boundary": "policy",
        "decision": "recorded",
        "occurredAt": "2026-06-01T18:00:00.000Z",
        "previousHash": "0000000000000000000000000000000000000000000000000000000000000000",
        "canonicalPayloadHash": "6dc96189b5cc91e385141d9c5991da7a204b927dbb55429eb075853a925d269c",
        "entryHash": "cd0c9c3d4c593664bb4a01582057a01764733c5aa5987a62ff1c7c7afd91a524",
        "payload": {
          "constitutionVersion": "policy-2026-06-redacted",
          "policyDigest": "sha256:dfaf5b8b5b40e4e575f5fd11fd682f22c78537cce97d5a352c5d821fcdf404c4",
          "allowedActions": [
            "release.deploy",
            "db.branch.create",
            "protected_compute.run"
          ],
          "blockedActions": [
            "payment.transfer",
            "prod.secret.read",
            "compliance.evidence.delete"
          ]
        }
      },
      {
        "index": 1,
        "eventType": "agent.action.allowed",
        "boundary": "action",
        "decision": "allowed",
        "occurredAt": "2026-06-01T18:01:09.000Z",
        "previousHash": "cd0c9c3d4c593664bb4a01582057a01764733c5aa5987a62ff1c7c7afd91a524",
        "canonicalPayloadHash": "0c8d42ee35e98b554f99c1bc2d1bc910962e4516fbdf1dfc900987712cb7edc2",
        "entryHash": "d3fec2e5a3e524472e103e24df66bc402123c14fad7c2b1ad90e4e9ac423fada",
        "payload": {
          "agentId": "agent_redacted_release_control",
          "action": "release.deploy",
          "bodyEntered": true,
          "policyVersion": "policy-2026-06-redacted",
          "evidence": "allowed action completed under policy"
        }
      },
      {
        "index": 2,
        "eventType": "agent.action.blocked",
        "boundary": "action",
        "decision": "blocked",
        "occurredAt": "2026-06-01T18:02:18.000Z",
        "previousHash": "d3fec2e5a3e524472e103e24df66bc402123c14fad7c2b1ad90e4e9ac423fada",
        "canonicalPayloadHash": "0df4b063ba248ab092dbdf715488fba0630ff8cf86e8e1fe481281aec3ec151d",
        "entryHash": "d26b7edc30005b70a4c2762f9a10bb95b429c161012ed32056a7be76ee29616d",
        "payload": {
          "agentId": "agent_redacted_release_control",
          "action": "payment.transfer",
          "bodyEntered": false,
          "unsafeBodyCalls": 0,
          "policyVersion": "policy-2026-06-redacted",
          "evidence": "blocked before function body"
        }
      },
      {
        "index": 3,
        "eventType": "database.branch.created",
        "boundary": "data",
        "decision": "allowed",
        "occurredAt": "2026-06-01T18:03:02.000Z",
        "previousHash": "d26b7edc30005b70a4c2762f9a10bb95b429c161012ed32056a7be76ee29616d",
        "canonicalPayloadHash": "57afdfebe3d931ec5c01605bec00d472ff89148ee7262d7ef555917c14be9cb2",
        "entryHash": "423e55e90bb69abd29b1639371a413ac4b7f2c1ce82216aa4965a9919caa3129",
        "payload": {
          "sourceRelation": "prod_ledger_redacted",
          "sourceRows": "5B-row benchmark family",
          "branchId": "branch_redacted_review",
          "branchMode": "governed-copy-on-write",
          "sourceMutationCount": 0,
          "sourceUntouched": true,
          "isolationChecks": [
            "relation_fingerprint",
            "branch_local_write",
            "source_mutation_check"
          ]
        }
      },
      {
        "index": 4,
        "eventType": "database.branch.destroyed",
        "boundary": "data",
        "decision": "recorded",
        "occurredAt": "2026-06-01T18:03:44.000Z",
        "previousHash": "423e55e90bb69abd29b1639371a413ac4b7f2c1ce82216aa4965a9919caa3129",
        "canonicalPayloadHash": "d2f5ab876b93bb91a760327de66b546a0822befefa3102778f6b8615f1964c80",
        "entryHash": "8aa0f011140eee312887297bbf4d9bdd9155a2f824cf34495de321864149f1c3",
        "payload": {
          "branchId": "branch_redacted_review",
          "cleanupVerified": true,
          "sourceMutationCount": 0,
          "sourceUntouched": true,
          "evidence": "branch-local changes removed without source writes"
        }
      },
      {
        "index": 5,
        "eventType": "protected_compute.run.attested",
        "boundary": "compute",
        "decision": "allowed",
        "occurredAt": "2026-06-01T18:04:16.000Z",
        "previousHash": "8aa0f011140eee312887297bbf4d9bdd9155a2f824cf34495de321864149f1c3",
        "canonicalPayloadHash": "7c392b66b375f00090c5b01ed5fb10a025caef0cf210034cb8cce39677c670bf",
        "entryHash": "d0fc144e5294a1cb3c46212770fa1772301866eccf4af87346e1d71870645053",
        "payload": {
          "workload": "qwen_lora_redacted",
          "providerClass": "h100_same_allocation_family",
          "attestationVerified": true,
          "adapterDigestDistinct": true,
          "finiteLossObserved": true,
          "zeroizedCleanup": true,
          "artifactDigest": "sha256:7e424ed5de349e7608d24a70a8843641a8d4bf4fe1c7e6001f6c4651d89f87cb"
        }
      },
      {
        "index": 6,
        "eventType": "packet.exported",
        "boundary": "proof",
        "decision": "recorded",
        "occurredAt": "2026-06-01T18:10:00.000Z",
        "previousHash": "d0fc144e5294a1cb3c46212770fa1772301866eccf4af87346e1d71870645053",
        "canonicalPayloadHash": "24c20507f7d80f42bd5612a0e6135c98de942012781a729af20d62518f90fcdd",
        "entryHash": "b5046d2bab59397f4a4bece1a28c85280f94c60fbd96aaf9e1df224b9f412bce",
        "payload": {
          "redactionMode": "auditor",
          "canonicalization": "json-stable-v1",
          "digestAlgorithm": "SHA-256",
          "exportedSurfaces": [
            "action",
            "data",
            "compute",
            "ci",
            "sdk",
            "mcp"
          ]
        }
      }
    ]
  },
  "redactions": [
    {
      "field": "ownerEmails",
      "reason": "Public sample hides customer identity."
    },
    {
      "field": "agent secrets, endpoint URLs, source relation names",
      "reason": "Auditor packet proves boundary behavior without exposing credentials or production data."
    },
    {
      "field": "raw model prompts and payload bodies",
      "reason": "Only policy decision, normalized action, and digest metadata are public."
    }
  ],
  "verificationInstructions": [
    "Canonicalize each event payload with json-stable-v1 and recompute canonicalPayloadHash.",
    "For every entry, recompute entryHash from index, eventType, boundary, decision, occurredAt, previousHash, and canonicalPayloadHash.",
    "Confirm each entry previousHash matches the prior entryHash, ending at chain.chainRoot.",
    "Confirm blocked action entries have bodyEntered=false and unsafeBodyCalls=0.",
    "Confirm database entries carry sourceMutationCount=0 and sourceUntouched=true."
  ],
  "signature": {
    "publicSample": true,
    "packetDigestCovers": "canonical packet with signature.packetDigestHex omitted",
    "digestAlgorithm": "SHA-256",
    "packetDigestHex": "2c9eec2efbbe0416fc13ca727e4954433ebd7f647c86d4442611c4f449493602",
    "signatureAlgorithm": "sample-digest-only",
    "keyId": "sample.redacted.public",
    "signedAt": "2026-06-01T18:10:00.000Z",
    "productionNote": "Approved private packets are signed with the workspace signing key; this public sample exposes digest structure only."
  }
}