{"checkpoints": [{"checkpoint_id": 22, "api_key_id": 26, "max_log_id": 13102, "row_count": 2864, "head_record_hash": "3ab38d898c9befcf36307a36b1095b9fa66e1e32d2557beea9b4893bb34890c7", "as_of": "2026-10-07T10:19:50.461882+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "-i1DXvtnlFJmpPV4LmwZ49KrfbzwCa59nLMVadBHrpzi241Gbe0EzVMr1sGPUj5i2kJf61Vui4cBb2PsmiOsCA"}, "emitted_to_siem": false}, {"checkpoint_id": 21, "api_key_id": 26, "max_log_id": 13001, "row_count": 2774, "head_record_hash": "6586ac71f99c74bc2ae1fe60df14aad4f6b910d27c58b9c681439c57df15aa8e", "as_of": "2026-10-07T09:53:20.289230+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "0xMMrd6RYRTgjN-yNwLWg8rLGlQphRrpSLufWx13AS5VcfFxvuJncOq_UfH06Lm2VIOan37Cd3y06yLaU54cDA"}, "emitted_to_siem": false}, {"checkpoint_id": 20, "api_key_id": 26, "max_log_id": 13000, "row_count": 2773, "head_record_hash": "dcdc116124f3db7248ce18e9f6a350870f0b6c34d98326a2fbe979a8c377fb3a", "as_of": "2026-10-07T09:53:18.369772+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "kUcG8UwUu0QgJyY56J8hwjSflpqj-K-e8DzrvTj16aZ3As_5ylVm2wV7U547npgJhgDshOBFn29rNNec5h_8Cw"}, "emitted_to_siem": false}, {"checkpoint_id": 19, "api_key_id": 26, "max_log_id": 12941, "row_count": 2714, "head_record_hash": "4f7d13acf9d94460ad12ae87dd2f5090077939baa2a7a22b54e43427533e7343", "as_of": "2026-10-07T03:13:25.916291+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "JuQRnH16ZN8oT7iancYezP0cpcM77dOYZfGOSdnnHM6lk9jpG2Aoa5AlihBPJvRDwoKjevu79PDK3PiAyFCsCw"}, "emitted_to_siem": false}, {"checkpoint_id": 18, "api_key_id": 26, "max_log_id": 12500, "row_count": 2467, "head_record_hash": "37cb4ca03506e24be0b824b57c286d534b9f9ddb532f0cfe881d4db2e55ffb61", "as_of": "2026-09-20T19:05:05.696928+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "1m9JM0qSaIJJFo7U9j2HKkyrsapy0vQYLPRqDUMFmCg1h8PEghPy5A6XnsDLThOUI-YR-8OyoZ1Jx9OGwB2EAQ"}, "emitted_to_siem": false}, {"checkpoint_id": 17, "api_key_id": 26, "max_log_id": 12000, "row_count": 2052, "head_record_hash": "2e6769b1bac9907acfdcaf6cbe6237af972094d5e5a4037396b372d5b6df2627", "as_of": "2026-09-16T20:45:49.349811+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "dAIkW-oY6byyo9tweQfYnuqvqyquJqHkxZBYL66zjdlowRsEyUzvEBbHIXLEa8cqHa94IeaoWP9Keab7ZELkAw"}, "emitted_to_siem": false}, {"checkpoint_id": 16, "api_key_id": 26, "max_log_id": 11500, "row_count": 1636, "head_record_hash": "3e02df94b2568a090a4dc2324b73a2670c5383d7cd6bf33ac5c5592765c58789", "as_of": "2026-09-16T19:16:26.565572+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "ITUxpc-HTABmP56aO0BI9pPzzbVJ_XHnmeSWk06fe3uKjESEUVVRM5kUy7gXp6cREN3yKxQBo3z3HjFCwunfCA"}, "emitted_to_siem": false}, {"checkpoint_id": 14, "api_key_id": 26, "max_log_id": 10863, "row_count": 1273, "head_record_hash": "3289cfb04de1de3de80bbb15fcac67e511085f9c8a1d7ff642a98f3736e845ab", "as_of": "2026-09-12T11:28:35.306509+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "9ZtR9nix3pLlHqfst3s1QMDzk3NVA9KxdbrmVf1tXEpNbLv6QajJmXmpr6zxfOK0K9eZI73gl_R0lFt2Y6o0Aw"}, "emitted_to_siem": false}, {"checkpoint_id": 13, "api_key_id": 26, "max_log_id": 10863, "row_count": 1273, "head_record_hash": "3289cfb04de1de3de80bbb15fcac67e511085f9c8a1d7ff642a98f3736e845ab", "as_of": "2026-09-12T11:28:27.678777+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "kQyZNlEabQM2Q7vfyFQT2J_EmyirHlya4LOJVB_RW0GivAsVSUPHu0bM8u_pPCQb1hActyS_Zl2dQ-S-89S_Cw"}, "emitted_to_siem": false}, {"checkpoint_id": 12, "api_key_id": 26, "max_log_id": 10769, "row_count": 1179, "head_record_hash": "7f8b80f429ce1c78a617de52f34dcb1f6a8b8a1733d925d92aff524702d33d7e", "as_of": "2026-09-12T11:17:11.490864+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "o34lZ4lUF3MUpJAfF2lXES0vUV5JPFHRZGHKqmfFk16QlRbb_-2o4wIUcs6059Wq9TOeE3z1sX9iaBmBESxEBA"}, "emitted_to_siem": false}, {"checkpoint_id": 11, "api_key_id": 26, "max_log_id": 10769, "row_count": 1179, "head_record_hash": "7f8b80f429ce1c78a617de52f34dcb1f6a8b8a1733d925d92aff524702d33d7e", "as_of": "2026-09-12T11:17:05.970650+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "myqBLzz4EvW1PGOICer27ipQ8z7l65vtaMcuVgR2df2MqicqXEIQ-uNFr9VSYYSjMCMhSF4gfZyGuBz0heKKCQ"}, "emitted_to_siem": false}, {"checkpoint_id": 10, "api_key_id": 26, "max_log_id": 10717, "row_count": 1127, "head_record_hash": "eb6f76fb00ab844c6eda3907ca8c186a6943f1c1792ea44645e244b9c1be8a26", "as_of": "2026-09-12T11:15:47.888685+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "WOJk_DqakxOUxP9ZaohFCEV_XPkFBhVuwwejCXbTtbSS2ConU_IChslcUJ2H0Doz2tvEpQWf4OwMkfHvyGmPAg"}, "emitted_to_siem": false}, {"checkpoint_id": 9, "api_key_id": 26, "max_log_id": 10717, "row_count": 1127, "head_record_hash": "eb6f76fb00ab844c6eda3907ca8c186a6943f1c1792ea44645e244b9c1be8a26", "as_of": "2026-09-12T11:15:42.562457+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "qmOcwZYSzBpasei96JjetiX3tcQ5kZvKLBEiXK_EvsNSfSl81elMGaawL215on9FPd1GZ_mSBiWez_mMXYRoCg"}, "emitted_to_siem": false}, {"checkpoint_id": 8, "api_key_id": 26, "max_log_id": 10614, "row_count": 1059, "head_record_hash": "35676d1ea5f7533d793f6dde1b48db234552b371c86bb53e5f65865131604d60", "as_of": "2026-09-11T10:10:54.502046+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "zfPIB_mFKCRHepVZzPp4qFby5DPnW55zoCoga5ZSwM1y08vYX5zn9XyE6w5nP9fa6OeB4Af9TqUyeRoS0Ig2Dg"}, "emitted_to_siem": false}, {"checkpoint_id": 7, "api_key_id": 26, "max_log_id": 10614, "row_count": 1059, "head_record_hash": "35676d1ea5f7533d793f6dde1b48db234552b371c86bb53e5f65865131604d60", "as_of": "2026-09-11T10:10:47.853331+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "86SPCYamTBPI3MpVtudPj9vFWQVoFFNMa_NKaKazeJlPP1dXQ2UfSM3HB4H_SXC4aF95vLjTt2A2bmaaJPITCQ"}, "emitted_to_siem": false}, {"checkpoint_id": 6, "api_key_id": 26, "max_log_id": 10500, "row_count": 972, "head_record_hash": "2ee7802178a17e869e0558e3910c998bebb3c022bad03e8ca1e0a9dc938f528e", "as_of": "2026-09-11T09:59:48.253208+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "7_L8V9ev6lyjaCYqeiGQ2WzbAyJPSSVvgbl4t2BYRADsCWS3EcjNJdEwrfQ2T5rAlOMkG_68plDVf6-b_cnIBg"}, "emitted_to_siem": false}, {"checkpoint_id": 4, "api_key_id": 26, "max_log_id": 9500, "row_count": 694, "head_record_hash": "71c47c39b46cbd3101e6b9ff6e314ef228951bd3d546e85c274412a0802a70f8", "as_of": "2026-09-07T17:04:14.502500+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "p3PIQWtzQqTWW0AZ-_SxfakP-nV0sRBPaoRnl5Ri-am6Kpmg3lffI9w49vlyo7HRz-snj0DABQyEqQUIBeNeAA"}, "emitted_to_siem": false}, {"checkpoint_id": 3, "api_key_id": 26, "max_log_id": 9065, "row_count": 341, "head_record_hash": "a78ffef1b7e9e59cd1fe430fbe9a4f0591ea6346d1f32c1168620bcf040b2144", "as_of": "2026-09-07T09:45:12.593718+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "100wopBBUiZvjquAiPotbMvtbQ8eOE5CiQjXDc4DjlmRk5hd4k8CZY-cRHT5EDknl4o8LGBlaX0QZRrRoxr3Bw"}, "emitted_to_siem": false}, {"checkpoint_id": 2, "api_key_id": 26, "max_log_id": 9065, "row_count": 341, "head_record_hash": "a78ffef1b7e9e59cd1fe430fbe9a4f0591ea6346d1f32c1168620bcf040b2144", "as_of": "2026-09-07T09:45:05.375206+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "fCSlmTclkn5LL1vlji4ub9kj-kB2smp_gPr9zu3BZk0sPlj0EcyDRo-mhn-Ah6097Asfp-E4s2lCeGRyCc_IAA"}, "emitted_to_siem": false}, {"checkpoint_id": 1, "api_key_id": 26, "max_log_id": 9000, "row_count": 323, "head_record_hash": "97eba3c37146975b2485f53bc1b125776705003168431e570e1fbfdc9a4ee3da", "as_of": "2026-09-07T09:39:46.687967+00:00", "signature": {"scheme": "ed25519-chain-checkpoint-v1", "key_id": "4c5e576d5765a733", "signature": "Ca08eQCrh-n8Scd2eqvYETdJ75N9cpmZFWQpfaMfFMlN8hIncRMEGa5C1-hIC78SXKoGoyRsX_jWt19zG6KODA"}, "emitted_to_siem": false}], "purge_attestations": [], "export_type": "eu_ai_act_full_record_export", "format": "ndjson", "schema_version": "1.1", "generated_at": "2026-10-07T10:21:08.801951+00:00", "period": {"from": "1970-01-01T00:00:00+00:00", "to": "2026-10-07T10:21:08.753093+00:00"}, "subject": {"api_key_id": 26, "tier": "enterprise"}, "signature": {"scheme": "ed25519-record-v1", "algorithm": "ed25519", "public_key": "KqnlGJzpi9ikD2-YZh86Wuk6804t-_yZgfCw82auhXY", "key_id": "4c5e576d5765a733", "canonicalization": "arcezia-jcs-plain-v1", "keys": [{"key_id": "4c5e576d5765a733", "public_key": "KqnlGJzpi9ikD2-YZh86Wuk6804t-_yZgfCw82auhXY", "algorithm": "ed25519", "valid_from": "2026-09-07T06:37:49.816487+00:00", "valid_to": null, "retired_reason": null, "fingerprint_sha256": "4c5e576d5765a7334c9d1a34bef62084627b66206d2018dff957987717c3c15c"}], "signed_field": "records[].certificate.record_signature", "verifier": "arcezia-verify-records (pip install \"arcezia[verify]\")", "detail": null, "records_renamed_for_publication": 0, "records_withheld": 0, "records_attested": 0, "view_attestation_scheme": "ed25519-view-attestation-v1", "checkpoint_scheme": "ed25519-chain-checkpoint-v1", "purge_attestation_scheme": "ed25519-purge-attestation-v1", "completeness_note": "The records in this file are contiguous by prev_hash/record_hash. That shows nothing was CHANGED; it cannot show nothing was REMOVED from the end, because no surviving row points at the newest row. `checkpoints` are signed statements of how far the chain reached, and `purge_attestations` are signed statements of which removals were legal. Verify both with arcezia-verify-records (pip install \"arcezia[verify]\").", "header_scheme": "ed25519-export-header-v1", "header_signed_fields": ["subject.api_key_id", "period.from", "period.to", "page.after_id", "record_count", "page.first_log_id", "page.last_log_id", "page.first_record_hash", "page.last_record_hash", "next_after_id", "generated_at"]}, "record_count": 4, "next_after_id": 13102, "page": {"after_id": 13098, "first_log_id": 13099, "last_log_id": 13102, "first_record_hash": "783b5908791d16fe57623a35df9b504da1476b00a762d759480354ece41323b1", "last_record_hash": "3ab38d898c9befcf36307a36b1095b9fa66e1e32d2557beea9b4893bb34890c7"}, "header_signature": {"scheme": "ed25519-export-header-v1", "algorithm": "ed25519", "key_id": "4c5e576d5765a733", "canonicalization": "arcezia-jcs-plain-v1", "signature": "AelsgsvU3VWJPh_n3nQUYp-5G5ItZ7PJbn9kC1-r2Kc7YI9Leet3J2WU9q-gtZG4pqV4EPfRUA9sVgi8N5ThBQ"}}
{"log_id": 13099, "timestamp": "2026-10-07T10:19:36.334680+00:00", "verdict": "BLOCK", "fabrication_detected": false, "domain": "filesystem_ops", "action_type": "run_shell", "check_type": "verify", "chain_id": null, "step_id": null, "session_id": "QVd-QIYIiZ2pO5kcFMFW0sO3oU46WQJx", "request_id": "cbd5bae7a6ad4cdb80153d3c269224ef", "prev_hash": "400375f64b1ca5cf77147f3b5ad7a4a6941384daf4b522c2cadacab6c2f6ae7a", "record_hash": "783b5908791d16fe57623a35df9b504da1476b00a762d759480354ece41323b1", "certificate": {"reason": ["scope:allowed_action_types"], "record": {"domain": "filesystem_ops", "schema": "arcezia.decision.v2", "step_id": null, "chain_id": null, "signed_at": "2026-10-07T10:19:36.331792+00:00", "api_key_id": 26, "check_type": "verify", "projection": "public.v1", "request_id": "cbd5bae7a6ad4cdb80153d3c269224ef", "session_id": "QVd-QIYIiZ2pO5kcFMFW0sO3oU46WQJx", "action_type": "run_shell", "ruleset_hash": "builtin", "engine_version": "rel_fc58da1ed664b108", "subject_fingerprint": null}, "status": "BLOCKED", "summary": "Blocked: 'run_shell' is outside your capability envelope ('allowed_action_types'). Your capability envelope denies: irreversible, mass_scope, outbound. Only a newly signed envelope widens it.", "verdict": "BLOCK", "signature": "58eb30c4965c931958ad94f3969743c5349f35805ee53191d123e452b0c30981", "action_binding": "3c941b61ac21086a772385bcd3dd618bd19193819e5748df661988ab21906fd1", "action_identity": {"type": "run_shell", "digest": "17f69ae2697b61fda85f4efef12aad45a1bb7dda951b5dacf0132eb76e0807be", "domain": "filesystem_ops", "binding": "3c941b61ac21086a772385bcd3dd618bd19193819e5748df661988ab21906fd1"}, "data_categories": null, "envelope_signed": false, "record_signature": {"key_id": "4c5e576d5765a733", "scheme": "ed25519-record-v1", "algorithm": "ed25519", "signature": "UcjAO0Gmwa_jG32ql7It1bk3sRZOZz7_4puOMCKOUynPRvGvMDnAgzuOU132GOSxyCxeZqFTx3pNVrMEzMuzBw", "canonicalization": "arcezia-jcs-plain-v1"}, "revocation_epoch": 0, "contract_coverage": "none", "credential_withheld": "not_allowed", "fabrication_detected": false, "unverified_approvals": ["capability_envelope"], "denied_authority_axes": ["irreversible", "mass_scope", "outbound"], "fabricated_constraints": [], "contract_coverage_reason": "no_contract_for_tool"}}
{"log_id": 13100, "timestamp": "2026-10-07T10:19:37.341443+00:00", "verdict": "ALLOW", "fabrication_detected": false, "domain": "c_quickstart__execute_sql", "action_type": "execute_sql", "check_type": "verify", "chain_id": null, "step_id": null, "session_id": "mtx1Yab6fSe0wJbKO6HFSxg7cYaNturH", "request_id": "198a92939bf64c24adf1126a7b4d9a1f", "prev_hash": "783b5908791d16fe57623a35df9b504da1476b00a762d759480354ece41323b1", "record_hash": "64d96412217163aedf9c1de35715a1370548ee996a601e40ee36f6ba5511c6c7", "certificate": {"record": {"domain": "c_quickstart__execute_sql", "schema": "arcezia.decision.v2", "step_id": null, "chain_id": null, "signed_at": "2026-10-07T10:19:37.338602+00:00", "api_key_id": 26, "check_type": "verify", "projection": "public.v1", "request_id": "198a92939bf64c24adf1126a7b4d9a1f", "session_id": "mtx1Yab6fSe0wJbKO6HFSxg7cYaNturH", "action_type": "execute_sql", "ruleset_hash": "e85a5cc783f038a555c4f4dd86d7668a0f4fe0738b5819fb24877814902ba2b8", "engine_version": "rel_fc58da1ed664b108", "subject_fingerprint": null}, "status": "ALLOWED", "summary": "Allowed.", "verdict": "ALLOW", "signature": "", "chain_status": "CLEAR", "action_binding": "41616b74963c6f289557140dc08dc8c19b9ad5283b6e03f50260825ffd96b211", "action_identity": {"type": "execute_sql", "digest": "b83e4b4007f532293f0e7dd37fdff9b02ce1eeaefa471f85a4516e9f4290f57b", "domain": "c_quickstart__execute_sql", "binding": "41616b74963c6f289557140dc08dc8c19b9ad5283b6e03f50260825ffd96b211"}, "data_categories": null, "envelope_signed": true, "record_signature": {"key_id": "4c5e576d5765a733", "scheme": "ed25519-record-v1", "algorithm": "ed25519", "signature": "6EGIocoD71_Q5OAN7oRv_NgoVPj1vbXFHlUttSa47xKGrl94WdHVpl4vc_PN8ghr7AACH4Ne10613cEri9p6Aw", "canonicalization": "arcezia-jcs-plain-v1"}, "revocation_epoch": 0, "contract_coverage": "covered", "fabrication_detected": false, "denied_authority_axes": [], "fabricated_constraints": []}}
{"log_id": 13101, "timestamp": "2026-10-07T10:19:39.015262+00:00", "verdict": "REVIEW", "fabrication_detected": false, "domain": "c_quickstart__execute_sql", "action_type": "execute_sql", "check_type": "verify", "chain_id": null, "step_id": null, "session_id": "Kcvz131qBbC9ZdTKTUyx8q2xa74qgWSL", "request_id": "0efba8fad5314513b16da4cf193c9f1a", "prev_hash": "64d96412217163aedf9c1de35715a1370548ee996a601e40ee36f6ba5511c6c7", "record_hash": "6f90c9785dd330c80686c23ba644d046fa7dfded5cb8dfc2187ae5a268d64ac6", "certificate": {"record": {"domain": "c_quickstart__execute_sql", "schema": "arcezia.decision.v2", "step_id": null, "chain_id": null, "signed_at": "2026-10-07T10:19:39.011984+00:00", "api_key_id": 26, "check_type": "verify", "projection": "public.v1", "request_id": "0efba8fad5314513b16da4cf193c9f1a", "session_id": "Kcvz131qBbC9ZdTKTUyx8q2xa74qgWSL", "action_type": "execute_sql", "ruleset_hash": "e85a5cc783f038a555c4f4dd86d7668a0f4fe0738b5819fb24877814902ba2b8", "engine_version": "rel_fc58da1ed664b108", "subject_fingerprint": null}, "status": "INSUFFICIENT_EVIDENCE", "release": ["approval:user"], "summary": "Held for review. To proceed: attach a signed approval from a person. Or, without a person (each only if it is true): sign the tables, records, addresses or folders this job acts on into the session's signed capability envelope ('resource_scope').", "verdict": "REVIEW", "signature": "", "action_binding": "41616b74963c6f289557140dc08dc8c19b9ad5283b6e03f50260825ffd96b211", "action_identity": {"type": "execute_sql", "digest": "b83e4b4007f532293f0e7dd37fdff9b02ce1eeaefa471f85a4516e9f4290f57b", "domain": "c_quickstart__execute_sql", "binding": "41616b74963c6f289557140dc08dc8c19b9ad5283b6e03f50260825ffd96b211"}, "data_categories": null, "envelope_signed": false, "record_signature": {"key_id": "4c5e576d5765a733", "scheme": "ed25519-record-v1", "algorithm": "ed25519", "signature": "gVkuccVzO_2hiuSyFZIXSVXGmm1T0eYJB7y4Peww69ntrxpbatxSnQ6MU0kNQpdEtZ6taki7b0hb5EVZJ53ECw", "canonicalization": "arcezia-jcs-plain-v1"}, "revocation_epoch": 0, "contract_coverage": "covered", "credential_withheld": "not_allowed", "fabrication_detected": false, "unverified_approvals": ["capability_envelope"], "denied_authority_axes": [], "fabricated_constraints": [], "release_without_person": ["scope:resource_scope"]}}
{"log_id": 13102, "timestamp": "2026-10-07T10:19:40.746931+00:00", "verdict": "BLOCK", "fabrication_detected": false, "domain": "c_quickstart__execute_sql", "action_type": "execute_sql", "check_type": "verify", "chain_id": null, "step_id": null, "session_id": "RlfxtZctKMq-YGPOa97Egdtwofcd6xKE", "request_id": "1c81019a307146c6a22b68f4d9f2d22b", "prev_hash": "6f90c9785dd330c80686c23ba644d046fa7dfded5cb8dfc2187ae5a268d64ac6", "record_hash": "3ab38d898c9befcf36307a36b1095b9fa66e1e32d2557beea9b4893bb34890c7", "certificate": {"reason": ["scope:denied_action_types"], "record": {"domain": "c_quickstart__execute_sql", "schema": "arcezia.decision.v2", "step_id": null, "chain_id": null, "signed_at": "2026-10-07T10:19:40.743972+00:00", "api_key_id": 26, "check_type": "verify", "projection": "public.v1", "request_id": "1c81019a307146c6a22b68f4d9f2d22b", "session_id": "RlfxtZctKMq-YGPOa97Egdtwofcd6xKE", "action_type": "execute_sql", "ruleset_hash": "e85a5cc783f038a555c4f4dd86d7668a0f4fe0738b5819fb24877814902ba2b8", "engine_version": "rel_fc58da1ed664b108", "subject_fingerprint": null}, "status": "BLOCKED", "summary": "Blocked: 'execute_sql' is outside your capability envelope ('denied_action_types').", "verdict": "BLOCK", "signature": "", "action_binding": "41616b74963c6f289557140dc08dc8c19b9ad5283b6e03f50260825ffd96b211", "action_identity": {"type": "execute_sql", "digest": "b83e4b4007f532293f0e7dd37fdff9b02ce1eeaefa471f85a4516e9f4290f57b", "domain": "c_quickstart__execute_sql", "binding": "41616b74963c6f289557140dc08dc8c19b9ad5283b6e03f50260825ffd96b211"}, "data_categories": null, "envelope_signed": true, "record_signature": {"key_id": "4c5e576d5765a733", "scheme": "ed25519-record-v1", "algorithm": "ed25519", "signature": "l277Rt8avZOfm8XLjFTyVbpry-awS4WfKNXQNWkm_WBO4yDKT2vpgsWXOi72QtgjFSccV9DBv6Zojo5H9-rmCA", "canonicalization": "arcezia-jcs-plain-v1"}, "revocation_epoch": 0, "contract_coverage": "covered", "credential_withheld": "not_allowed", "fabrication_detected": false, "denied_authority_axes": [], "fabricated_constraints": []}}