{
  "model": {
    "summary.json": {
      "example": "agent-commerce-network",
      "scope": "hotfix-review",
      "target": "payments-api",
      "budget_minor": 90000,
      "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
      "final_status": "fulfilled",
      "price_minor": 45000,
      "currency": "USD",
      "agent_mode": "openai_agents_sdk",
      "tool_calls": 3,
      "llm_mode": "openai_agents_sdk"
    },
    "agent-output.json": {
      "quote_id": "quote_e19826ebf7",
      "job_id": "job_3b29d30d0b",
      "final_status": "fulfilled",
      "price_minor": 45000,
      "currency": "USD",
      "rationale": "The provider quoted a hotfix security review for payments-api at 45000 USD, which is within the 90000 USD budget. The job was created and completed successfully without requiring approval. The review identified 3 findings, including 2 high severity issues and 1 medium severity issue, with specific recommendations for remediation. The job status is fulfilled with deliverables provided.",
      "mode": "openai_agents_sdk",
      "tool_calls": [
        {
          "tool": "request_quote",
          "input": {
            "requested_scope": "hotfix-review",
            "target": "payments-api"
          },
          "output": {
            "request_id": "quote_req_c9e8cea266",
            "status": "quoted",
            "quote": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_e19826ebf7",
              "request_id": "quote_req_c9e8cea266",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "provider_trace": {
              "tool_name": "request_quote",
              "session_id": "959ac5d9e90076874b60db0c3544ed105bdea9ce7dd447f98ef9e07e16333a37",
              "capability_ids": [
                "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
              ],
              "result": {
                "content": [
                  {
                    "text": "quoted security-review at 45000 USD",
                    "type": "text"
                  }
                ],
                "structuredContent": {
                  "approval_required": false,
                  "checks": [
                    "python-call-patterns"
                  ],
                  "currency": "USD",
                  "estimated_delivery_hours": 0,
                  "max_bytes": 200000,
                  "max_files": 10,
                  "offer_id": "hotfix-review",
                  "price_minor": 45000,
                  "pricing_basis": "bounded hotfix-review for payments-api",
                  "provider_id": "vanguard-security",
                  "quote_id": "quote_e19826ebf7",
                  "request_id": "quote_req_c9e8cea266",
                  "service_family": "security-review",
                  "target": "payments-api"
                },
                "isError": false
              },
              "receipt_id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
              "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
              "arguments": {
                "request_id": "quote_req_c9e8cea266",
                "buyer_id": "lattice-platform-security",
                "service_family": "security-review",
                "target": "payments-api",
                "requested_scope": "hotfix-review",
                "release_window": null
              },
              "is_error": false,
              "edge_base_url": "http://127.0.0.1:40343",
              "receipt": {
                "action": {
                  "parameter_hash": "5fc824dceb98246d8d462ea5568fc1b6d3fd43e7f2999e7f83760d2fb4e9c2fa",
                  "parameters": {
                    "buyer_id": "lattice-platform-security",
                    "release_window": null,
                    "request_id": "quote_req_c9e8cea266",
                    "requested_scope": "hotfix-review",
                    "service_family": "security-review",
                    "target": "payments-api"
                  }
                },
                "boundary_class": "prevent",
                "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
                "content_hash": "c95619250bd3f1aa59d89c14f45f3620ea54dd1897db8bcfca3815382f527929",
                "decision": {
                  "verdict": "allow"
                },
                "id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
                "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
                "metadata": {
                  "admission_operation": {
                    "compensation_status": "not_compensated",
                    "coordinator_lease_epoch": 8,
                    "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                    "projected_dispatch_state": "terminal",
                    "projected_operation_version": 8,
                    "projected_state": "completed",
                    "request_binding_hash": "e0eca632e08cfb5512c09f237261a6e647eee2757cbf5751e5f4db37c8780c9e",
                    "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
                    "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                    "retained_dispatch_commit": {
                      "committed_version": 6,
                      "coordinator_lease_epoch": 8,
                      "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "provider_attempt": {
                        "attempt_id": "attempt:bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                        "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                        "transport_id": "kernel-tool-server:provider-security-review",
                        "transport_key_epoch": 8
                      },
                      "store_fence": {
                        "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                        "owner_epoch": 8,
                        "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                      }
                    },
                    "schema": "chio.admission-receipt.v1",
                    "store_fence": {
                      "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "owner_epoch": 8,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    },
                    "tool_outcome_id": "a007f302f8f6a8f943395f7b358859ebe4103b99ccd5fff6f3d5f18833d47be8",
                    "tool_outcome_version": 2,
                    "trusted_time_unix_ms": 1789091422407
                  },
                  "attribution": {
                    "delegation_depth": 0,
                    "grant_index": 0,
                    "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                    "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
                  },
                  "chio_receipt_signing_nonce": "rcpt-01a08e28-a11d-7e70-98f8-9b14050bd979",
                  "receipt_context": {
                    "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a"
                  }
                },
                "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
                "receipt_kind": "mediated_decision",
                "redaction_mode": "none",
                "signature": "6095e6389bdb37e281bdb99b160aa5cc38241d1543bc807324d4f4b9d30578969139c593cfbe3ea41cb53bc088425f18a990c8434bb029fd1d1025bebc54800b",
                "timestamp": 1789091422,
                "tool_name": "request_quote",
                "tool_origin": "caller_executed",
                "tool_server": "provider-security-review",
                "trust_level": "mediated"
              },
              "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
            },
            "_chio_http": {
              "receipt_id": "6fc653f8235585cf766e45d9b4f19ad604ae137478c056e51f7184fd95104f72",
              "method": "POST",
              "path": "/procurement/quote-requests",
              "body": {
                "service_family": "security-review",
                "target": "payments-api",
                "requested_scope": "hotfix-review",
                "release_window": null
              },
              "body_sha256": "755c46649fbbef309ac97e1afd9d5e5a30d9b52f4d58319f8429b5670b3f7789",
              "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
              "status": 202
            }
          }
        },
        {
          "tool": "create_job",
          "input": {
            "quote_id": "quote_e19826ebf7",
            "budget_minor": 90000
          },
          "output": {
            "job_id": "job_3b29d30d0b",
            "buyer_id": "lattice-platform-security",
            "provider_id": "vanguard-security",
            "service_family": "security-review",
            "budget_minor": 90000,
            "quote": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_e19826ebf7",
              "request_id": "quote_req_c9e8cea266",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null,
            "status": "fulfilled",
            "approval_required": false,
            "approval": null,
            "fulfillment": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_3b29d30d0b",
              "input_sha256": "cef80b279f1905bf198ba6cceb6a7c3043b28f88243fe0259da1b49603e86a60",
              "job_id": "job_3b29d30d0b",
              "quote_id": "quote_e19826ebf7",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "fulfillment_trace": {
              "tool_name": "execute_review",
              "session_id": "959ac5d9e90076874b60db0c3544ed105bdea9ce7dd447f98ef9e07e16333a37",
              "capability_ids": [
                "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
              ],
              "result": {
                "content": [
                  {
                    "text": "completed security-review for job job_3b29d30d0b",
                    "type": "text"
                  }
                ],
                "structuredContent": {
                  "artifacts": [
                    {
                      "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                      "name": "findings.json",
                      "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                    },
                    {
                      "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                      "name": "executive-summary.md",
                      "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                    },
                    {
                      "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                      "name": "remediation-checklist.md",
                      "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                    }
                  ],
                  "checks": [
                    "python-call-patterns"
                  ],
                  "deliverables": [
                    "findings.json",
                    "executive-summary.md",
                    "remediation-checklist.md"
                  ],
                  "fulfillment_id": "fulfillment_job_3b29d30d0b",
                  "input_sha256": "cef80b279f1905bf198ba6cceb6a7c3043b28f88243fe0259da1b49603e86a60",
                  "job_id": "job_3b29d30d0b",
                  "quote_id": "quote_e19826ebf7",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "severity_summary": {
                    "critical": 0,
                    "high": 2,
                    "low": 0,
                    "medium": 1
                  },
                  "source": [
                    {
                      "bytes": 325,
                      "path": "review_input.py",
                      "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                    }
                  ],
                  "status": "completed_with_findings",
                  "target": "payments-api"
                },
                "isError": false
              },
              "receipt_id": "4559db0e686eebbc555af339f86280d1c68ac4908a4101ecb6424384f2cc7405",
              "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf",
              "arguments": {
                "job_id": "job_3b29d30d0b",
                "quote_id": "quote_e19826ebf7",
                "service_family": "security-review",
                "requested_scope": "hotfix-review",
                "target": "payments-api",
                "release_window": null
              },
              "is_error": false,
              "edge_base_url": "http://127.0.0.1:40343",
              "receipt": {
                "action": {
                  "parameter_hash": "8717564b1141e9051de59a2c7cbc6e56956ce0f88fa486f9e7158ae71f18bca7",
                  "parameters": {
                    "job_id": "job_3b29d30d0b",
                    "quote_id": "quote_e19826ebf7",
                    "release_window": null,
                    "requested_scope": "hotfix-review",
                    "service_family": "security-review",
                    "target": "payments-api"
                  }
                },
                "boundary_class": "prevent",
                "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
                "content_hash": "1ccb1715b30cb62519cb7c113e1dced14da341c3115148d735992fd7ae0b8556",
                "decision": {
                  "verdict": "allow"
                },
                "id": "4559db0e686eebbc555af339f86280d1c68ac4908a4101ecb6424384f2cc7405",
                "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
                "metadata": {
                  "admission_operation": {
                    "compensation_status": "not_compensated",
                    "coordinator_lease_epoch": 8,
                    "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                    "projected_dispatch_state": "terminal",
                    "projected_operation_version": 8,
                    "projected_state": "completed",
                    "request_binding_hash": "ca569287ae6340f7b95705f4f38dfcdbae36bb70a99ef22a867c290fa3c6db90",
                    "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf",
                    "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                    "retained_dispatch_commit": {
                      "committed_version": 6,
                      "coordinator_lease_epoch": 8,
                      "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "provider_attempt": {
                        "attempt_id": "attempt:7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                        "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                        "transport_id": "kernel-tool-server:provider-security-review",
                        "transport_key_epoch": 8
                      },
                      "store_fence": {
                        "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                        "owner_epoch": 8,
                        "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                      }
                    },
                    "schema": "chio.admission-receipt.v1",
                    "store_fence": {
                      "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "owner_epoch": 8,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    },
                    "tool_outcome_id": "b9799e05786579ac942f74d6484f56ef33a2a049e58e59fafa18d2015dca5833",
                    "tool_outcome_version": 2,
                    "trusted_time_unix_ms": 1789091424779
                  },
                  "attribution": {
                    "delegation_depth": 0,
                    "grant_index": 1,
                    "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                    "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
                  },
                  "chio_receipt_signing_nonce": "rcpt-01a08e28-aa64-78a1-bf04-31409c8685f2",
                  "receipt_context": {
                    "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf"
                  }
                },
                "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
                "receipt_kind": "mediated_decision",
                "redaction_mode": "none",
                "signature": "e522f1480f043af35c7f24d8ae920a12f66c425643ac05771aff2a67592a8fd263877a27823133788e54953ff81d6764dcb8723fa7f29b6961a3bfb8b35b3a05",
                "timestamp": 1789091424,
                "tool_name": "execute_review",
                "tool_origin": "caller_executed",
                "tool_server": "provider-security-review",
                "trust_level": "mediated"
              },
              "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
            },
            "settlement": {
              "settlement_id": "settlement_job_3b29d30d0b",
              "job_id": "job_3b29d30d0b",
              "quoted_amount_minor": 45000,
              "approved_amount_minor": 45000,
              "settled_amount_minor": 45000,
              "currency": "USD",
              "status": "reconciled",
              "settlement_kind": "internal_book_entry",
              "entries": [
                {
                  "account": "lattice-platform-security",
                  "amount_minor": -45000
                },
                {
                  "account": "vanguard-security",
                  "amount_minor": 45000
                }
              ],
              "buyer_position": "accepted",
              "provider_position": "accepted",
              "remaining_budget_minor": 70000
            },
            "disputes": [],
            "quote_provider_trace": {
              "tool_name": "request_quote",
              "session_id": "959ac5d9e90076874b60db0c3544ed105bdea9ce7dd447f98ef9e07e16333a37",
              "capability_ids": [
                "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
              ],
              "result": {
                "content": [
                  {
                    "text": "quoted security-review at 45000 USD",
                    "type": "text"
                  }
                ],
                "structuredContent": {
                  "approval_required": false,
                  "checks": [
                    "python-call-patterns"
                  ],
                  "currency": "USD",
                  "estimated_delivery_hours": 0,
                  "max_bytes": 200000,
                  "max_files": 10,
                  "offer_id": "hotfix-review",
                  "price_minor": 45000,
                  "pricing_basis": "bounded hotfix-review for payments-api",
                  "provider_id": "vanguard-security",
                  "quote_id": "quote_e19826ebf7",
                  "request_id": "quote_req_c9e8cea266",
                  "service_family": "security-review",
                  "target": "payments-api"
                },
                "isError": false
              },
              "receipt_id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
              "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
              "arguments": {
                "request_id": "quote_req_c9e8cea266",
                "buyer_id": "lattice-platform-security",
                "service_family": "security-review",
                "target": "payments-api",
                "requested_scope": "hotfix-review",
                "release_window": null
              },
              "is_error": false,
              "edge_base_url": "http://127.0.0.1:40343",
              "receipt": {
                "action": {
                  "parameter_hash": "5fc824dceb98246d8d462ea5568fc1b6d3fd43e7f2999e7f83760d2fb4e9c2fa",
                  "parameters": {
                    "buyer_id": "lattice-platform-security",
                    "release_window": null,
                    "request_id": "quote_req_c9e8cea266",
                    "requested_scope": "hotfix-review",
                    "service_family": "security-review",
                    "target": "payments-api"
                  }
                },
                "boundary_class": "prevent",
                "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
                "content_hash": "c95619250bd3f1aa59d89c14f45f3620ea54dd1897db8bcfca3815382f527929",
                "decision": {
                  "verdict": "allow"
                },
                "id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
                "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
                "metadata": {
                  "admission_operation": {
                    "compensation_status": "not_compensated",
                    "coordinator_lease_epoch": 8,
                    "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                    "projected_dispatch_state": "terminal",
                    "projected_operation_version": 8,
                    "projected_state": "completed",
                    "request_binding_hash": "e0eca632e08cfb5512c09f237261a6e647eee2757cbf5751e5f4db37c8780c9e",
                    "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
                    "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                    "retained_dispatch_commit": {
                      "committed_version": 6,
                      "coordinator_lease_epoch": 8,
                      "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "provider_attempt": {
                        "attempt_id": "attempt:bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                        "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                        "transport_id": "kernel-tool-server:provider-security-review",
                        "transport_key_epoch": 8
                      },
                      "store_fence": {
                        "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                        "owner_epoch": 8,
                        "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                      }
                    },
                    "schema": "chio.admission-receipt.v1",
                    "store_fence": {
                      "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "owner_epoch": 8,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    },
                    "tool_outcome_id": "a007f302f8f6a8f943395f7b358859ebe4103b99ccd5fff6f3d5f18833d47be8",
                    "tool_outcome_version": 2,
                    "trusted_time_unix_ms": 1789091422407
                  },
                  "attribution": {
                    "delegation_depth": 0,
                    "grant_index": 0,
                    "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                    "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
                  },
                  "chio_receipt_signing_nonce": "rcpt-01a08e28-a11d-7e70-98f8-9b14050bd979",
                  "receipt_context": {
                    "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a"
                  }
                },
                "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
                "receipt_kind": "mediated_decision",
                "redaction_mode": "none",
                "signature": "6095e6389bdb37e281bdb99b160aa5cc38241d1543bc807324d4f4b9d30578969139c593cfbe3ea41cb53bc088425f18a990c8434bb029fd1d1025bebc54800b",
                "timestamp": 1789091422,
                "tool_name": "request_quote",
                "tool_origin": "caller_executed",
                "tool_server": "provider-security-review",
                "trust_level": "mediated"
              },
              "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
            },
            "_chio_http": {
              "receipt_id": "cbfc8bd8eb362e810550bb910021d42a63fec9fceadec0018bc927578cdf20dc",
              "method": "POST",
              "path": "/procurement/jobs",
              "body": {
                "quote_id": "quote_e19826ebf7",
                "provider_id": "vanguard-security",
                "service_family": "security-review",
                "budget_minor": 90000
              },
              "body_sha256": "c3293535c00e0ba465b567f321459a28dcd48d4ba777ecaf096de61d59e0c272",
              "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
              "status": 202
            }
          }
        },
        {
          "tool": "get_job",
          "output": {
            "job_id": "job_3b29d30d0b",
            "buyer_id": "lattice-platform-security",
            "provider_id": "vanguard-security",
            "service_family": "security-review",
            "budget_minor": 90000,
            "quote": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_e19826ebf7",
              "request_id": "quote_req_c9e8cea266",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null,
            "status": "fulfilled",
            "approval_required": false,
            "approval": null,
            "fulfillment": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_3b29d30d0b",
              "input_sha256": "cef80b279f1905bf198ba6cceb6a7c3043b28f88243fe0259da1b49603e86a60",
              "job_id": "job_3b29d30d0b",
              "quote_id": "quote_e19826ebf7",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "fulfillment_trace": {
              "tool_name": "execute_review",
              "session_id": "959ac5d9e90076874b60db0c3544ed105bdea9ce7dd447f98ef9e07e16333a37",
              "capability_ids": [
                "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
              ],
              "result": {
                "content": [
                  {
                    "text": "completed security-review for job job_3b29d30d0b",
                    "type": "text"
                  }
                ],
                "structuredContent": {
                  "artifacts": [
                    {
                      "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                      "name": "findings.json",
                      "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                    },
                    {
                      "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                      "name": "executive-summary.md",
                      "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                    },
                    {
                      "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                      "name": "remediation-checklist.md",
                      "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                    }
                  ],
                  "checks": [
                    "python-call-patterns"
                  ],
                  "deliverables": [
                    "findings.json",
                    "executive-summary.md",
                    "remediation-checklist.md"
                  ],
                  "fulfillment_id": "fulfillment_job_3b29d30d0b",
                  "input_sha256": "cef80b279f1905bf198ba6cceb6a7c3043b28f88243fe0259da1b49603e86a60",
                  "job_id": "job_3b29d30d0b",
                  "quote_id": "quote_e19826ebf7",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "severity_summary": {
                    "critical": 0,
                    "high": 2,
                    "low": 0,
                    "medium": 1
                  },
                  "source": [
                    {
                      "bytes": 325,
                      "path": "review_input.py",
                      "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                    }
                  ],
                  "status": "completed_with_findings",
                  "target": "payments-api"
                },
                "isError": false
              },
              "receipt_id": "4559db0e686eebbc555af339f86280d1c68ac4908a4101ecb6424384f2cc7405",
              "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf",
              "arguments": {
                "job_id": "job_3b29d30d0b",
                "quote_id": "quote_e19826ebf7",
                "service_family": "security-review",
                "requested_scope": "hotfix-review",
                "target": "payments-api",
                "release_window": null
              },
              "is_error": false,
              "edge_base_url": "http://127.0.0.1:40343",
              "receipt": {
                "action": {
                  "parameter_hash": "8717564b1141e9051de59a2c7cbc6e56956ce0f88fa486f9e7158ae71f18bca7",
                  "parameters": {
                    "job_id": "job_3b29d30d0b",
                    "quote_id": "quote_e19826ebf7",
                    "release_window": null,
                    "requested_scope": "hotfix-review",
                    "service_family": "security-review",
                    "target": "payments-api"
                  }
                },
                "boundary_class": "prevent",
                "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
                "content_hash": "1ccb1715b30cb62519cb7c113e1dced14da341c3115148d735992fd7ae0b8556",
                "decision": {
                  "verdict": "allow"
                },
                "id": "4559db0e686eebbc555af339f86280d1c68ac4908a4101ecb6424384f2cc7405",
                "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
                "metadata": {
                  "admission_operation": {
                    "compensation_status": "not_compensated",
                    "coordinator_lease_epoch": 8,
                    "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                    "projected_dispatch_state": "terminal",
                    "projected_operation_version": 8,
                    "projected_state": "completed",
                    "request_binding_hash": "ca569287ae6340f7b95705f4f38dfcdbae36bb70a99ef22a867c290fa3c6db90",
                    "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf",
                    "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                    "retained_dispatch_commit": {
                      "committed_version": 6,
                      "coordinator_lease_epoch": 8,
                      "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "provider_attempt": {
                        "attempt_id": "attempt:7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                        "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                        "transport_id": "kernel-tool-server:provider-security-review",
                        "transport_key_epoch": 8
                      },
                      "store_fence": {
                        "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                        "owner_epoch": 8,
                        "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                      }
                    },
                    "schema": "chio.admission-receipt.v1",
                    "store_fence": {
                      "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "owner_epoch": 8,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    },
                    "tool_outcome_id": "b9799e05786579ac942f74d6484f56ef33a2a049e58e59fafa18d2015dca5833",
                    "tool_outcome_version": 2,
                    "trusted_time_unix_ms": 1789091424779
                  },
                  "attribution": {
                    "delegation_depth": 0,
                    "grant_index": 1,
                    "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                    "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
                  },
                  "chio_receipt_signing_nonce": "rcpt-01a08e28-aa64-78a1-bf04-31409c8685f2",
                  "receipt_context": {
                    "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf"
                  }
                },
                "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
                "receipt_kind": "mediated_decision",
                "redaction_mode": "none",
                "signature": "e522f1480f043af35c7f24d8ae920a12f66c425643ac05771aff2a67592a8fd263877a27823133788e54953ff81d6764dcb8723fa7f29b6961a3bfb8b35b3a05",
                "timestamp": 1789091424,
                "tool_name": "execute_review",
                "tool_origin": "caller_executed",
                "tool_server": "provider-security-review",
                "trust_level": "mediated"
              },
              "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
            },
            "settlement": {
              "settlement_id": "settlement_job_3b29d30d0b",
              "job_id": "job_3b29d30d0b",
              "quoted_amount_minor": 45000,
              "approved_amount_minor": 45000,
              "settled_amount_minor": 45000,
              "currency": "USD",
              "status": "reconciled",
              "settlement_kind": "internal_book_entry",
              "entries": [
                {
                  "account": "lattice-platform-security",
                  "amount_minor": -45000
                },
                {
                  "account": "vanguard-security",
                  "amount_minor": 45000
                }
              ],
              "buyer_position": "accepted",
              "provider_position": "accepted",
              "remaining_budget_minor": 70000
            },
            "disputes": [],
            "quote_provider_trace": {
              "tool_name": "request_quote",
              "session_id": "959ac5d9e90076874b60db0c3544ed105bdea9ce7dd447f98ef9e07e16333a37",
              "capability_ids": [
                "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
              ],
              "result": {
                "content": [
                  {
                    "text": "quoted security-review at 45000 USD",
                    "type": "text"
                  }
                ],
                "structuredContent": {
                  "approval_required": false,
                  "checks": [
                    "python-call-patterns"
                  ],
                  "currency": "USD",
                  "estimated_delivery_hours": 0,
                  "max_bytes": 200000,
                  "max_files": 10,
                  "offer_id": "hotfix-review",
                  "price_minor": 45000,
                  "pricing_basis": "bounded hotfix-review for payments-api",
                  "provider_id": "vanguard-security",
                  "quote_id": "quote_e19826ebf7",
                  "request_id": "quote_req_c9e8cea266",
                  "service_family": "security-review",
                  "target": "payments-api"
                },
                "isError": false
              },
              "receipt_id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
              "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
              "arguments": {
                "request_id": "quote_req_c9e8cea266",
                "buyer_id": "lattice-platform-security",
                "service_family": "security-review",
                "target": "payments-api",
                "requested_scope": "hotfix-review",
                "release_window": null
              },
              "is_error": false,
              "edge_base_url": "http://127.0.0.1:40343",
              "receipt": {
                "action": {
                  "parameter_hash": "5fc824dceb98246d8d462ea5568fc1b6d3fd43e7f2999e7f83760d2fb4e9c2fa",
                  "parameters": {
                    "buyer_id": "lattice-platform-security",
                    "release_window": null,
                    "request_id": "quote_req_c9e8cea266",
                    "requested_scope": "hotfix-review",
                    "service_family": "security-review",
                    "target": "payments-api"
                  }
                },
                "boundary_class": "prevent",
                "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
                "content_hash": "c95619250bd3f1aa59d89c14f45f3620ea54dd1897db8bcfca3815382f527929",
                "decision": {
                  "verdict": "allow"
                },
                "id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
                "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
                "metadata": {
                  "admission_operation": {
                    "compensation_status": "not_compensated",
                    "coordinator_lease_epoch": 8,
                    "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                    "projected_dispatch_state": "terminal",
                    "projected_operation_version": 8,
                    "projected_state": "completed",
                    "request_binding_hash": "e0eca632e08cfb5512c09f237261a6e647eee2757cbf5751e5f4db37c8780c9e",
                    "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
                    "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                    "retained_dispatch_commit": {
                      "committed_version": 6,
                      "coordinator_lease_epoch": 8,
                      "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "provider_attempt": {
                        "attempt_id": "attempt:bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                        "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                        "transport_id": "kernel-tool-server:provider-security-review",
                        "transport_key_epoch": 8
                      },
                      "store_fence": {
                        "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                        "owner_epoch": 8,
                        "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                      }
                    },
                    "schema": "chio.admission-receipt.v1",
                    "store_fence": {
                      "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "owner_epoch": 8,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    },
                    "tool_outcome_id": "a007f302f8f6a8f943395f7b358859ebe4103b99ccd5fff6f3d5f18833d47be8",
                    "tool_outcome_version": 2,
                    "trusted_time_unix_ms": 1789091422407
                  },
                  "attribution": {
                    "delegation_depth": 0,
                    "grant_index": 0,
                    "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                    "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
                  },
                  "chio_receipt_signing_nonce": "rcpt-01a08e28-a11d-7e70-98f8-9b14050bd979",
                  "receipt_context": {
                    "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a"
                  }
                },
                "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
                "receipt_kind": "mediated_decision",
                "redaction_mode": "none",
                "signature": "6095e6389bdb37e281bdb99b160aa5cc38241d1543bc807324d4f4b9d30578969139c593cfbe3ea41cb53bc088425f18a990c8434bb029fd1d1025bebc54800b",
                "timestamp": 1789091422,
                "tool_name": "request_quote",
                "tool_origin": "caller_executed",
                "tool_server": "provider-security-review",
                "trust_level": "mediated"
              },
              "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
            },
            "_chio_http": {
              "receipt_id": "e4e72af80d0594e764b56886cc8d84d10a2dbfcc3b6056f966b23fc51a711097",
              "method": "GET",
              "path": "/procurement/jobs/job_3b29d30d0b",
              "body": null,
              "body_sha256": null,
              "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
              "status": 200
            }
          }
        }
      ]
    },
    "verification.json": {
      "ok": true,
      "agent_status": "fulfilled",
      "agent_mode": "openai_agents_sdk",
      "verified_receipts": 5,
      "artifacts": 3,
      "settled_amount_minor": 45000,
      "settlement_kind": "internal_book_entry",
      "errors": []
    },
    "receipts.json": {
      "http": [
        {
          "association": {
            "receipt_id": "6fc653f8235585cf766e45d9b4f19ad604ae137478c056e51f7184fd95104f72",
            "method": "POST",
            "path": "/procurement/quote-requests",
            "body": {
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "body_sha256": "755c46649fbbef309ac97e1afd9d5e5a30d9b52f4d58319f8429b5670b3f7789",
            "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
            "status": 202
          },
          "receipt": {
            "id": "6fc653f8235585cf766e45d9b4f19ad604ae137478c056e51f7184fd95104f72",
            "request_id": "01a08e28-94f0-7713-a207-7474d853f7ca",
            "route_pattern": "/procurement/quote-requests",
            "method": "POST",
            "caller_identity_hash": "e20383ef1957ed82fa8f6e9c70ee6aa4ff960fd1ac1dedaf1055bb477ae62270",
            "verdict": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "evidence": [
              {
                "guard_name": "DefaultPolicyGuard",
                "verdict": true,
                "details": "safe method, session-scoped allow"
              }
            ],
            "response_status": 202,
            "timestamp": 1789091423,
            "content_hash": "a360c94c452a1eb56e0b33f1511e63965ef1688fa43666ea747549a222400925",
            "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
            "trust_level": "mediated",
            "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
            "metadata": {
              "chio_decision_receipt_id": "528b0932a1403ea36cbe1975a56b3c4e624a3ad19bb35cc203a65b4e6ebac567",
              "chio_http_status_scope": "final",
              "chio_kernel_receipt_id": "48a11087c6abda027ddefb8a931a03b353da7f105827a54fd90ad7dc00f0363f",
              "route_selection": {
                "candidates": [
                  {
                    "available": true,
                    "routeId": "native-route",
                    "selectedProtocols": [
                      "http",
                      "native"
                    ],
                    "targetProtocol": "native"
                  }
                ],
                "decision": "select",
                "requestedTargetProtocol": "native",
                "routeSelectionId": "2b957e68754b4df99a90172e2879be113a9f05219c82f644284c0731388e5d58",
                "selectedProtocols": [
                  "http",
                  "native"
                ],
                "selectedRouteId": "native-route",
                "selectedTargetProtocol": "native",
                "sourceProtocol": "http"
              }
            },
            "kernel_key": "fcd00a772803f7dd0da9e4e153ab0f6d2d30b354b8e3f76166393a0caa13434b",
            "signature": "af5dd4305e04c4b2576e8b3fa3de02e2fbf3ac214ffed9b31e119e93b07a12ef1eea959ce786bfc0632a3cecfbc1514e93fbbba3c87e33609e4a88f83baadb08"
          }
        },
        {
          "association": {
            "receipt_id": "cbfc8bd8eb362e810550bb910021d42a63fec9fceadec0018bc927578cdf20dc",
            "method": "POST",
            "path": "/procurement/jobs",
            "body": {
              "quote_id": "quote_e19826ebf7",
              "provider_id": "vanguard-security",
              "service_family": "security-review",
              "budget_minor": 90000
            },
            "body_sha256": "c3293535c00e0ba465b567f321459a28dcd48d4ba777ecaf096de61d59e0c272",
            "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
            "status": 202
          },
          "receipt": {
            "id": "cbfc8bd8eb362e810550bb910021d42a63fec9fceadec0018bc927578cdf20dc",
            "request_id": "01a08e28-a763-7c60-bba1-acf3411f1f5b",
            "route_pattern": "/procurement/jobs",
            "method": "POST",
            "caller_identity_hash": "e20383ef1957ed82fa8f6e9c70ee6aa4ff960fd1ac1dedaf1055bb477ae62270",
            "verdict": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "evidence": [
              {
                "guard_name": "CapabilityGuard",
                "verdict": true,
                "details": "valid capability token presented"
              }
            ],
            "response_status": 202,
            "timestamp": 1789091425,
            "content_hash": "eb0cfe5af844fd6a92c7262258046141e302cee2d88208418bb2fd117f96c8e3",
            "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
            "trust_level": "mediated",
            "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
            "metadata": {
              "chio_decision_receipt_id": "e6ff914975ed5db5e7a7188570545ffbe54e3cb93fb2c0bf2497c03818f837c1",
              "chio_http_status_scope": "final",
              "chio_kernel_receipt_id": "c684c71d032bf7b79a80c785be3d708be14f5d0cb1c133864616b45ee4444fe0",
              "route_selection": {
                "candidates": [
                  {
                    "available": true,
                    "routeId": "native-route",
                    "selectedProtocols": [
                      "http",
                      "native"
                    ],
                    "targetProtocol": "native"
                  }
                ],
                "decision": "select",
                "requestedTargetProtocol": "native",
                "routeSelectionId": "b413a81819dc05921fdf94806b67aa37f4657e99f6fb2a9af6115cf20c606433",
                "selectedProtocols": [
                  "http",
                  "native"
                ],
                "selectedRouteId": "native-route",
                "selectedTargetProtocol": "native",
                "sourceProtocol": "http"
              }
            },
            "kernel_key": "fcd00a772803f7dd0da9e4e153ab0f6d2d30b354b8e3f76166393a0caa13434b",
            "signature": "f794462d803ebf3f4f7defa1cd8969b0a3b7e444761e1c120627b031a14bf62d02953fc5db0840384bb142cca7f8a4f3bdd5f70d0c58221942f1764da271050a"
          }
        },
        {
          "association": {
            "receipt_id": "e4e72af80d0594e764b56886cc8d84d10a2dbfcc3b6056f966b23fc51a711097",
            "method": "GET",
            "path": "/procurement/jobs/job_3b29d30d0b",
            "body": null,
            "body_sha256": null,
            "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
            "status": 200
          },
          "receipt": {
            "id": "e4e72af80d0594e764b56886cc8d84d10a2dbfcc3b6056f966b23fc51a711097",
            "request_id": "01a08e28-b573-74a1-882f-3145ff0d74cf",
            "route_pattern": "/procurement/jobs/{job_id}",
            "method": "GET",
            "caller_identity_hash": "e20383ef1957ed82fa8f6e9c70ee6aa4ff960fd1ac1dedaf1055bb477ae62270",
            "verdict": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "evidence": [
              {
                "guard_name": "DefaultPolicyGuard",
                "verdict": true,
                "details": "safe method, session-scoped allow"
              }
            ],
            "response_status": 200,
            "timestamp": 1789091427,
            "content_hash": "ff25aa5b3d3a63749c77fa9c874559892fe3a7b3ac950836627ab9196b430f06",
            "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
            "trust_level": "mediated",
            "capability_id": "cap-01a08e28-8caf-70b3-9fcd-31facbdf7147",
            "metadata": {
              "chio_decision_receipt_id": "412957e6866d49229f14d39e938284e83bda21c62427960e42704767f24f8512",
              "chio_http_status_scope": "final",
              "chio_kernel_receipt_id": "ccffba7c0161e1b167131b32037a498639c870c9f903fe61d3020fa1d0c7f6a4",
              "route_selection": {
                "candidates": [
                  {
                    "available": true,
                    "routeId": "native-route",
                    "selectedProtocols": [
                      "http",
                      "native"
                    ],
                    "targetProtocol": "native"
                  }
                ],
                "decision": "select",
                "requestedTargetProtocol": "native",
                "routeSelectionId": "49246b9f951c60a4b5c9b17b6ae377abb8a0e5793a9f782bd509bc167161da4e",
                "selectedProtocols": [
                  "http",
                  "native"
                ],
                "selectedRouteId": "native-route",
                "selectedTargetProtocol": "native",
                "sourceProtocol": "http"
              }
            },
            "kernel_key": "fcd00a772803f7dd0da9e4e153ab0f6d2d30b354b8e3f76166393a0caa13434b",
            "signature": "8c18f7f7c818c146f024601095de9bb6fbc72c2dfce059ca133db764dca4a4f95950fee225c619d6aac068001c6f2e80f581666eb1f23987aa3e57375d7e5405"
          }
        }
      ],
      "mcp": [
        {
          "association": {
            "tool_name": "request_quote",
            "session_id": "959ac5d9e90076874b60db0c3544ed105bdea9ce7dd447f98ef9e07e16333a37",
            "capability_ids": [
              "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_e19826ebf7",
                "request_id": "quote_req_c9e8cea266",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
            "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
            "arguments": {
              "request_id": "quote_req_c9e8cea266",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:40343",
            "receipt": {
              "action": {
                "parameter_hash": "5fc824dceb98246d8d462ea5568fc1b6d3fd43e7f2999e7f83760d2fb4e9c2fa",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_c9e8cea266",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
              "content_hash": "c95619250bd3f1aa59d89c14f45f3620ea54dd1897db8bcfca3815382f527929",
              "decision": {
                "verdict": "allow"
              },
              "id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
              "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 8,
                  "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                  "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "e0eca632e08cfb5512c09f237261a6e647eee2757cbf5751e5f4db37c8780c9e",
                  "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
                  "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 8,
                    "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "provider_attempt": {
                      "attempt_id": "attempt:bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                      "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 8
                    },
                    "store_fence": {
                      "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "owner_epoch": 8,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "owner_epoch": 8,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  },
                  "tool_outcome_id": "a007f302f8f6a8f943395f7b358859ebe4103b99ccd5fff6f3d5f18833d47be8",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091422407
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                  "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e28-a11d-7e70-98f8-9b14050bd979",
                "receipt_context": {
                  "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "6095e6389bdb37e281bdb99b160aa5cc38241d1543bc807324d4f4b9d30578969139c593cfbe3ea41cb53bc088425f18a990c8434bb029fd1d1025bebc54800b",
              "timestamp": 1789091422,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
          },
          "receipt": {
            "id": "df4da7fd2176d5e8dd31804e74bd31b2540294140a7aabc3252865571e1a1dbb",
            "timestamp": 1789091422,
            "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
            "tool_server": "provider-security-review",
            "tool_name": "request_quote",
            "action": {
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_c9e8cea266",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "parameter_hash": "5fc824dceb98246d8d462ea5568fc1b6d3fd43e7f2999e7f83760d2fb4e9c2fa"
            },
            "decision": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "content_hash": "c95619250bd3f1aa59d89c14f45f3620ea54dd1897db8bcfca3815382f527929",
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 8,
                "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "e0eca632e08cfb5512c09f237261a6e647eee2757cbf5751e5f4db37c8780c9e",
                "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a",
                "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 8,
                  "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                  "provider_attempt": {
                    "attempt_id": "attempt:bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                    "operation_id": "bfcf045be1d62084fa8ef8f68456093a1c225e44da3918962aa6b8a5b243e3d5",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 8
                  },
                  "store_fence": {
                    "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "owner_epoch": 8,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                  "owner_epoch": 8,
                  "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                },
                "tool_outcome_id": "a007f302f8f6a8f943395f7b358859ebe4103b99ccd5fff6f3d5f18833d47be8",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091422407
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e28-a11d-7e70-98f8-9b14050bd979",
              "receipt_context": {
                "request_id": "mcp-edge-req-889637d7aba441279bc897e2761a009a"
              }
            },
            "trust_level": "mediated",
            "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
            "signature": "6095e6389bdb37e281bdb99b160aa5cc38241d1543bc807324d4f4b9d30578969139c593cfbe3ea41cb53bc088425f18a990c8434bb029fd1d1025bebc54800b"
          }
        },
        {
          "association": {
            "tool_name": "execute_review",
            "session_id": "959ac5d9e90076874b60db0c3544ed105bdea9ce7dd447f98ef9e07e16333a37",
            "capability_ids": [
              "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_3b29d30d0b",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_3b29d30d0b",
                "input_sha256": "cef80b279f1905bf198ba6cceb6a7c3043b28f88243fe0259da1b49603e86a60",
                "job_id": "job_3b29d30d0b",
                "quote_id": "quote_e19826ebf7",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "4559db0e686eebbc555af339f86280d1c68ac4908a4101ecb6424384f2cc7405",
            "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf",
            "arguments": {
              "job_id": "job_3b29d30d0b",
              "quote_id": "quote_e19826ebf7",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:40343",
            "receipt": {
              "action": {
                "parameter_hash": "8717564b1141e9051de59a2c7cbc6e56956ce0f88fa486f9e7158ae71f18bca7",
                "parameters": {
                  "job_id": "job_3b29d30d0b",
                  "quote_id": "quote_e19826ebf7",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
              "content_hash": "1ccb1715b30cb62519cb7c113e1dced14da341c3115148d735992fd7ae0b8556",
              "decision": {
                "verdict": "allow"
              },
              "id": "4559db0e686eebbc555af339f86280d1c68ac4908a4101ecb6424384f2cc7405",
              "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 8,
                  "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                  "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "ca569287ae6340f7b95705f4f38dfcdbae36bb70a99ef22a867c290fa3c6db90",
                  "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf",
                  "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 8,
                    "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "provider_attempt": {
                      "attempt_id": "attempt:7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                      "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 8
                    },
                    "store_fence": {
                      "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                      "owner_epoch": 8,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "owner_epoch": 8,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  },
                  "tool_outcome_id": "b9799e05786579ac942f74d6484f56ef33a2a049e58e59fafa18d2015dca5833",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091424779
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                  "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e28-aa64-78a1-bf04-31409c8685f2",
                "receipt_context": {
                  "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "e522f1480f043af35c7f24d8ae920a12f66c425643ac05771aff2a67592a8fd263877a27823133788e54953ff81d6764dcb8723fa7f29b6961a3bfb8b35b3a05",
              "timestamp": 1789091424,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4"
          },
          "receipt": {
            "id": "4559db0e686eebbc555af339f86280d1c68ac4908a4101ecb6424384f2cc7405",
            "timestamp": 1789091424,
            "capability_id": "cap-01a08e28-9d74-7032-a077-953e7c6be7a4",
            "tool_server": "provider-security-review",
            "tool_name": "execute_review",
            "action": {
              "parameters": {
                "job_id": "job_3b29d30d0b",
                "quote_id": "quote_e19826ebf7",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "parameter_hash": "8717564b1141e9051de59a2c7cbc6e56956ce0f88fa486f9e7158ae71f18bca7"
            },
            "decision": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "content_hash": "1ccb1715b30cb62519cb7c113e1dced14da341c3115148d735992fd7ae0b8556",
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 8,
                "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "ca569287ae6340f7b95705f4f38dfcdbae36bb70a99ef22a867c290fa3c6db90",
                "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf",
                "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 8,
                  "coordinator_lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                  "provider_attempt": {
                    "attempt_id": "attempt:7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                    "operation_id": "7ad156683ea55f85a2a90a632be025749435d5d238baa6bab0c84a302cd6d73e",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 8
                  },
                  "store_fence": {
                    "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                    "owner_epoch": 8,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e28-81e7-7ac3-9d18-b318aa129555",
                  "owner_epoch": 8,
                  "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                },
                "tool_outcome_id": "b9799e05786579ac942f74d6484f56ef33a2a049e58e59fafa18d2015dca5833",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091424779
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                "subject_key": "45ff2f3af9c2e69436ebf2579bcb950ffdbd41c08573b6db693b926c5eec4306"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e28-aa64-78a1-bf04-31409c8685f2",
              "receipt_context": {
                "request_id": "mcp-edge-req-d859d26519e347578015d808ca845baf"
              }
            },
            "trust_level": "mediated",
            "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
            "signature": "e522f1480f043af35c7f24d8ae920a12f66c425643ac05771aff2a67592a8fd263877a27823133788e54953ff81d6764dcb8723fa7f29b6961a3bfb8b35b3a05"
          }
        }
      ]
    },
    "contracts/quote-response.json": {
      "approval_required": false,
      "checks": [
        "python-call-patterns"
      ],
      "currency": "USD",
      "estimated_delivery_hours": 0,
      "max_bytes": 200000,
      "max_files": 10,
      "offer_id": "hotfix-review",
      "price_minor": 45000,
      "pricing_basis": "bounded hotfix-review for payments-api",
      "provider_id": "vanguard-security",
      "quote_id": "quote_e19826ebf7",
      "request_id": "quote_req_c9e8cea266",
      "service_family": "security-review",
      "target": "payments-api"
    },
    "contracts/fulfillment-package.json": {
      "artifacts": [
        {
          "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
          "name": "findings.json",
          "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
        },
        {
          "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
          "name": "executive-summary.md",
          "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
        },
        {
          "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
          "name": "remediation-checklist.md",
          "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
        }
      ],
      "checks": [
        "python-call-patterns"
      ],
      "deliverables": [
        "findings.json",
        "executive-summary.md",
        "remediation-checklist.md"
      ],
      "fulfillment_id": "fulfillment_job_3b29d30d0b",
      "input_sha256": "cef80b279f1905bf198ba6cceb6a7c3043b28f88243fe0259da1b49603e86a60",
      "job_id": "job_3b29d30d0b",
      "quote_id": "quote_e19826ebf7",
      "requested_scope": "hotfix-review",
      "service_family": "security-review",
      "severity_summary": {
        "critical": 0,
        "high": 2,
        "low": 0,
        "medium": 1
      },
      "source": [
        {
          "bytes": 325,
          "path": "review_input.py",
          "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
        }
      ],
      "status": "completed_with_findings",
      "target": "payments-api"
    },
    "contracts/settlement-reconciliation.json": {
      "settlement_id": "settlement_job_3b29d30d0b",
      "job_id": "job_3b29d30d0b",
      "quoted_amount_minor": 45000,
      "approved_amount_minor": 45000,
      "settled_amount_minor": 45000,
      "currency": "USD",
      "status": "reconciled",
      "settlement_kind": "internal_book_entry",
      "entries": [
        {
          "account": "lattice-platform-security",
          "amount_minor": -45000
        },
        {
          "account": "vanguard-security",
          "amount_minor": 45000
        }
      ],
      "buyer_position": "accepted",
      "provider_position": "accepted",
      "remaining_budget_minor": 70000
    },
    "trusted-signers.json": {
      "trust": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
      "buyer": "fcd00a772803f7dd0da9e4e153ab0f6d2d30b354b8e3f76166393a0caa13434b",
      "caller": "611418af162740687e0ab79345884a3a1337a497ccad44fd98d2c5bed2414705",
      "provider": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51"
    }
  },
  "approval": {
    "summary.json": {
      "final_status": "fulfilled"
    },
    "agent-output.json": {
      "mode": "operator-approval",
      "final_status": "fulfilled",
      "job_id": "job_0d97014df8",
      "tool_calls": [
        {
          "tool": "approve_job",
          "output": {
            "job_id": "job_0d97014df8",
            "buyer_id": "lattice-platform-security",
            "provider_id": "vanguard-security",
            "service_family": "security-review",
            "budget_minor": 150000,
            "quote": {
              "approval_required": true,
              "checks": [
                "python-call-patterns",
                "exception-handling"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 2000000,
              "max_files": 100,
              "offer_id": "release-review",
              "price_minor": 125000,
              "pricing_basis": "bounded release-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_eb348fa905",
              "request_id": "quote_req_02686a6909",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "requested_scope": "release-review",
            "target": "payments-api",
            "release_window": null,
            "status": "fulfilled",
            "approval_required": true,
            "approval": {
              "approver": "local-operator",
              "reason": "Explicit approval using the operator launcher",
              "status": "approved"
            },
            "fulfillment": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns, exception-handling. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "cf67044f08f4a69a64011344e5cb520bb3e692df1c008ea0df0cd733e4644f7e"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns",
                "exception-handling"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_0d97014df8",
              "input_sha256": "a2e52003899f1302e19e6e69cf13861bf5a07cd645d999d336a17b663262f5dd",
              "job_id": "job_0d97014df8",
              "quote_id": "quote_eb348fa905",
              "requested_scope": "release-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "fulfillment_trace": {
              "tool_name": "execute_review",
              "session_id": "edf5c53e7d5317446ace7e45267cf0c7bfd4e3b20922c67d5baf03aa60b5049f",
              "capability_ids": [
                "cap-01a08e25-de04-76b0-a2b1-a662d857c805"
              ],
              "result": {
                "content": [
                  {
                    "text": "completed security-review for job job_0d97014df8",
                    "type": "text"
                  }
                ],
                "structuredContent": {
                  "artifacts": [
                    {
                      "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                      "name": "findings.json",
                      "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                    },
                    {
                      "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns, exception-handling. This report describes those checks only.\n",
                      "name": "executive-summary.md",
                      "sha256": "cf67044f08f4a69a64011344e5cb520bb3e692df1c008ea0df0cd733e4644f7e"
                    },
                    {
                      "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                      "name": "remediation-checklist.md",
                      "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                    }
                  ],
                  "checks": [
                    "python-call-patterns",
                    "exception-handling"
                  ],
                  "deliverables": [
                    "findings.json",
                    "executive-summary.md",
                    "remediation-checklist.md"
                  ],
                  "fulfillment_id": "fulfillment_job_0d97014df8",
                  "input_sha256": "a2e52003899f1302e19e6e69cf13861bf5a07cd645d999d336a17b663262f5dd",
                  "job_id": "job_0d97014df8",
                  "quote_id": "quote_eb348fa905",
                  "requested_scope": "release-review",
                  "service_family": "security-review",
                  "severity_summary": {
                    "critical": 0,
                    "high": 2,
                    "low": 0,
                    "medium": 1
                  },
                  "source": [
                    {
                      "bytes": 325,
                      "path": "review_input.py",
                      "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                    }
                  ],
                  "status": "completed_with_findings",
                  "target": "payments-api"
                },
                "isError": false
              },
              "receipt_id": "c86cf1f0ca7667e6651e16befba7834f6af1c8d41daec1dff4531b3125b04102",
              "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a",
              "arguments": {
                "job_id": "job_0d97014df8",
                "quote_id": "quote_eb348fa905",
                "service_family": "security-review",
                "requested_scope": "release-review",
                "target": "payments-api",
                "release_window": null
              },
              "is_error": false,
              "edge_base_url": "http://127.0.0.1:43417",
              "receipt": {
                "action": {
                  "parameter_hash": "a564007fe5751d9f9b682f33edc6c317bbffd726972c6e2b73e2b6500f35b7af",
                  "parameters": {
                    "job_id": "job_0d97014df8",
                    "quote_id": "quote_eb348fa905",
                    "release_window": null,
                    "requested_scope": "release-review",
                    "service_family": "security-review",
                    "target": "payments-api"
                  }
                },
                "boundary_class": "prevent",
                "capability_id": "cap-01a08e25-de04-76b0-a2b1-a662d857c805",
                "content_hash": "728c57bb6895d4eb3bedf2c74a237f1529880dc71d0e2278287d17ccfea02b4d",
                "decision": {
                  "verdict": "allow"
                },
                "id": "c86cf1f0ca7667e6651e16befba7834f6af1c8d41daec1dff4531b3125b04102",
                "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
                "metadata": {
                  "admission_operation": {
                    "compensation_status": "not_compensated",
                    "coordinator_lease_epoch": 6,
                    "coordinator_lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                    "operation_id": "b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                    "projected_dispatch_state": "terminal",
                    "projected_operation_version": 8,
                    "projected_state": "completed",
                    "request_binding_hash": "b9ad44f1eaccc1d3420eb8256bfe4958924b0f775c9c2a6023e659b6726a0120",
                    "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a",
                    "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                    "retained_dispatch_commit": {
                      "committed_version": 6,
                      "coordinator_lease_epoch": 6,
                      "coordinator_lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                      "provider_attempt": {
                        "attempt_id": "attempt:b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                        "operation_id": "b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                        "transport_id": "kernel-tool-server:provider-security-review",
                        "transport_key_epoch": 6
                      },
                      "store_fence": {
                        "lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                        "owner_epoch": 6,
                        "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                      }
                    },
                    "schema": "chio.admission-receipt.v1",
                    "store_fence": {
                      "lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                      "owner_epoch": 6,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    },
                    "tool_outcome_id": "964c6cac060e28020b57ca744cc7615b335dcec1415e6d96efef06736bcbc58b",
                    "tool_outcome_version": 2,
                    "trusted_time_unix_ms": 1789091242271
                  },
                  "attribution": {
                    "delegation_depth": 0,
                    "grant_index": 1,
                    "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                    "subject_key": "256ee2184e015678160f95aff741cf1fbc5de8b9063d859fd599518dfe1a2105"
                  },
                  "chio_receipt_signing_nonce": "rcpt-01a08e25-e177-7b13-bd05-2a8dd683d97a",
                  "receipt_context": {
                    "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a"
                  }
                },
                "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
                "receipt_kind": "mediated_decision",
                "redaction_mode": "none",
                "signature": "fa7a9b12a5605fe42fb6ffe68a72628e94fdda3d4a20a9018127755035f1af3923ff3ce3327bf4bc7e6aa489e3ccdcdbc63c54f8f5c180cd56ad9ef794a4fc07",
                "timestamp": 1789091242,
                "tool_name": "execute_review",
                "tool_origin": "caller_executed",
                "tool_server": "provider-security-review",
                "trust_level": "mediated"
              },
              "capability_id": "cap-01a08e25-de04-76b0-a2b1-a662d857c805"
            },
            "settlement": {
              "settlement_id": "settlement_job_0d97014df8",
              "job_id": "job_0d97014df8",
              "quoted_amount_minor": 125000,
              "approved_amount_minor": 125000,
              "settled_amount_minor": 125000,
              "currency": "USD",
              "status": "reconciled",
              "settlement_kind": "internal_book_entry",
              "entries": [
                {
                  "account": "lattice-platform-security",
                  "amount_minor": -125000
                },
                {
                  "account": "vanguard-security",
                  "amount_minor": 125000
                }
              ],
              "buyer_position": "accepted",
              "provider_position": "accepted",
              "remaining_budget_minor": 160000
            },
            "disputes": [],
            "quote_provider_trace": {
              "tool_name": "request_quote",
              "session_id": "bcae2aa3603e4869568b823611b9f00a13c9738e0ebae3ba37acb035580d4526",
              "capability_ids": [
                "cap-01a08e25-c470-7400-affc-e38cd0d063df"
              ],
              "result": {
                "content": [
                  {
                    "text": "quoted security-review at 125000 USD",
                    "type": "text"
                  }
                ],
                "structuredContent": {
                  "approval_required": true,
                  "checks": [
                    "python-call-patterns",
                    "exception-handling"
                  ],
                  "currency": "USD",
                  "estimated_delivery_hours": 0,
                  "max_bytes": 2000000,
                  "max_files": 100,
                  "offer_id": "release-review",
                  "price_minor": 125000,
                  "pricing_basis": "bounded release-review for payments-api",
                  "provider_id": "vanguard-security",
                  "quote_id": "quote_eb348fa905",
                  "request_id": "quote_req_02686a6909",
                  "service_family": "security-review",
                  "target": "payments-api"
                },
                "isError": false
              },
              "receipt_id": "f9007981dbaf13c9bc73581cd37c33cf2b7693c779303a37d88fd994f11496c7",
              "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a",
              "arguments": {
                "request_id": "quote_req_02686a6909",
                "buyer_id": "lattice-platform-security",
                "service_family": "security-review",
                "target": "payments-api",
                "requested_scope": "release-review",
                "release_window": null
              },
              "is_error": false,
              "edge_base_url": "http://127.0.0.1:56617",
              "receipt": {
                "action": {
                  "parameter_hash": "f4a555bfb8483b08c4ff78e158e3aa80ee04a147e10f5452416cd467c6184ed1",
                  "parameters": {
                    "buyer_id": "lattice-platform-security",
                    "release_window": null,
                    "request_id": "quote_req_02686a6909",
                    "requested_scope": "release-review",
                    "service_family": "security-review",
                    "target": "payments-api"
                  }
                },
                "boundary_class": "prevent",
                "capability_id": "cap-01a08e25-c470-7400-affc-e38cd0d063df",
                "content_hash": "fd845574592ad116aaa10319e6b95aa469ac7a8081abc354e14322af724d7b07",
                "decision": {
                  "verdict": "allow"
                },
                "id": "f9007981dbaf13c9bc73581cd37c33cf2b7693c779303a37d88fd994f11496c7",
                "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
                "metadata": {
                  "admission_operation": {
                    "compensation_status": "not_compensated",
                    "coordinator_lease_epoch": 5,
                    "coordinator_lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                    "operation_id": "edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                    "projected_dispatch_state": "terminal",
                    "projected_operation_version": 8,
                    "projected_state": "completed",
                    "request_binding_hash": "34eec223df0d4ac94e7bc1b0a8e51657a9634ba944c49ca63e2e304aa1510832",
                    "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a",
                    "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                    "retained_dispatch_commit": {
                      "committed_version": 6,
                      "coordinator_lease_epoch": 5,
                      "coordinator_lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                      "provider_attempt": {
                        "attempt_id": "attempt:edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                        "operation_id": "edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                        "transport_id": "kernel-tool-server:provider-security-review",
                        "transport_key_epoch": 5
                      },
                      "store_fence": {
                        "lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                        "owner_epoch": 5,
                        "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                      }
                    },
                    "schema": "chio.admission-receipt.v1",
                    "store_fence": {
                      "lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                      "owner_epoch": 5,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    },
                    "tool_outcome_id": "5d5ff1c776c3662af07e31c4bc03704e07c51e4fbb64f10607ea99f068b53d84",
                    "tool_outcome_version": 2,
                    "trusted_time_unix_ms": 1789091235681
                  },
                  "attribution": {
                    "delegation_depth": 0,
                    "grant_index": 0,
                    "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                    "subject_key": "ffa79686920a8b11dc527b6408d46c010259f9de59ff2b7b261ca1e0d57e6972"
                  },
                  "chio_receipt_signing_nonce": "rcpt-01a08e25-c7b8-7d02-b69b-df28cd4ae6ed",
                  "receipt_context": {
                    "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a"
                  }
                },
                "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
                "receipt_kind": "mediated_decision",
                "redaction_mode": "none",
                "signature": "5ad8cb27c0f2c6388c194fe87bafc88c1a938ecefb5a24ce16bec07e07eb90e2e17f599c51f17d59905b6648cbe36dfee625b94615ca22fbdb6c3866fc70a406",
                "timestamp": 1789091235,
                "tool_name": "request_quote",
                "tool_origin": "caller_executed",
                "tool_server": "provider-security-review",
                "trust_level": "mediated"
              },
              "capability_id": "cap-01a08e25-c470-7400-affc-e38cd0d063df"
            },
            "_chio_http": {
              "receipt_id": "126460be76b46320586572528d22099529b472ed6639c16b83400bddff7bfed0",
              "method": "POST",
              "path": "/procurement/jobs/job_0d97014df8/approve",
              "body": {
                "approver": "local-operator",
                "reason": "Explicit approval using the operator launcher"
              },
              "body_sha256": "64d7f58fe50bb0868120176883055ab5bdb2bfbf48912225dd5dc5865f378845",
              "capability_id": "cap-01a08e25-d799-7412-a386-8e5168628ef5",
              "status": 200
            }
          }
        }
      ]
    },
    "verification.json": {
      "ok": true,
      "agent_status": "fulfilled",
      "agent_mode": "operator-approval",
      "verified_receipts": 3,
      "artifacts": 3,
      "settled_amount_minor": 125000,
      "settlement_kind": "internal_book_entry",
      "errors": []
    },
    "receipts.json": {
      "http": [
        {
          "association": {
            "receipt_id": "126460be76b46320586572528d22099529b472ed6639c16b83400bddff7bfed0",
            "method": "POST",
            "path": "/procurement/jobs/job_0d97014df8/approve",
            "body": {
              "approver": "local-operator",
              "reason": "Explicit approval using the operator launcher"
            },
            "body_sha256": "64d7f58fe50bb0868120176883055ab5bdb2bfbf48912225dd5dc5865f378845",
            "capability_id": "cap-01a08e25-d799-7412-a386-8e5168628ef5",
            "status": 200
          },
          "receipt": {
            "id": "126460be76b46320586572528d22099529b472ed6639c16b83400bddff7bfed0",
            "request_id": "01a08e25-d839-7260-91ce-4a1fd97e779a",
            "route_pattern": "/procurement/jobs/{job_id}/approve",
            "method": "POST",
            "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
            "verdict": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "evidence": [
              {
                "guard_name": "CapabilityGuard",
                "verdict": true,
                "details": "valid capability token presented"
              }
            ],
            "response_status": 200,
            "timestamp": 1789091242,
            "content_hash": "2de4dbdf2632855b772bad25827d2eb8468e3c4cbd715423fb1de08d6e7e566e",
            "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
            "trust_level": "mediated",
            "capability_id": "cap-01a08e25-d799-7412-a386-8e5168628ef5",
            "metadata": {
              "chio_decision_receipt_id": "e6f797a09ce76133d90fc9b9f4f46eca711d6c5cdfbd8094572b8bc5b44f8bed",
              "chio_http_status_scope": "final",
              "chio_kernel_receipt_id": "4a5e80901257e29b52859f46bfed05aea54171a7e6c756b2964d50aeda372e58",
              "route_selection": {
                "candidates": [
                  {
                    "available": true,
                    "routeId": "native-route",
                    "selectedProtocols": [
                      "http",
                      "native"
                    ],
                    "targetProtocol": "native"
                  }
                ],
                "decision": "select",
                "requestedTargetProtocol": "native",
                "routeSelectionId": "bf9786bceccf6efc7ba15dbabd2ab47b17828331626c63899351a55be379b1c7",
                "selectedProtocols": [
                  "http",
                  "native"
                ],
                "selectedRouteId": "native-route",
                "selectedTargetProtocol": "native",
                "sourceProtocol": "http"
              }
            },
            "kernel_key": "fcd00a772803f7dd0da9e4e153ab0f6d2d30b354b8e3f76166393a0caa13434b",
            "signature": "a9a97dca0b7ab3aff1ad0aa6a25f648bd9dece1ba1572f57d191c4ebf477ab83ada8dfe46f26f65018ad2d4dc280d0903d692fec95a65bf4a129a06befd72f00"
          }
        }
      ],
      "mcp": [
        {
          "association": {
            "tool_name": "request_quote",
            "session_id": "bcae2aa3603e4869568b823611b9f00a13c9738e0ebae3ba37acb035580d4526",
            "capability_ids": [
              "cap-01a08e25-c470-7400-affc-e38cd0d063df"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 125000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": true,
                "checks": [
                  "python-call-patterns",
                  "exception-handling"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 2000000,
                "max_files": 100,
                "offer_id": "release-review",
                "price_minor": 125000,
                "pricing_basis": "bounded release-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_eb348fa905",
                "request_id": "quote_req_02686a6909",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "f9007981dbaf13c9bc73581cd37c33cf2b7693c779303a37d88fd994f11496c7",
            "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a",
            "arguments": {
              "request_id": "quote_req_02686a6909",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "release-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:56617",
            "receipt": {
              "action": {
                "parameter_hash": "f4a555bfb8483b08c4ff78e158e3aa80ee04a147e10f5452416cd467c6184ed1",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_02686a6909",
                  "requested_scope": "release-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e25-c470-7400-affc-e38cd0d063df",
              "content_hash": "fd845574592ad116aaa10319e6b95aa469ac7a8081abc354e14322af724d7b07",
              "decision": {
                "verdict": "allow"
              },
              "id": "f9007981dbaf13c9bc73581cd37c33cf2b7693c779303a37d88fd994f11496c7",
              "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 5,
                  "coordinator_lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                  "operation_id": "edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "34eec223df0d4ac94e7bc1b0a8e51657a9634ba944c49ca63e2e304aa1510832",
                  "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a",
                  "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 5,
                    "coordinator_lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                    "provider_attempt": {
                      "attempt_id": "attempt:edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                      "operation_id": "edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 5
                    },
                    "store_fence": {
                      "lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                      "owner_epoch": 5,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                    "owner_epoch": 5,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  },
                  "tool_outcome_id": "5d5ff1c776c3662af07e31c4bc03704e07c51e4fbb64f10607ea99f068b53d84",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091235681
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                  "subject_key": "ffa79686920a8b11dc527b6408d46c010259f9de59ff2b7b261ca1e0d57e6972"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e25-c7b8-7d02-b69b-df28cd4ae6ed",
                "receipt_context": {
                  "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "5ad8cb27c0f2c6388c194fe87bafc88c1a938ecefb5a24ce16bec07e07eb90e2e17f599c51f17d59905b6648cbe36dfee625b94615ca22fbdb6c3866fc70a406",
              "timestamp": 1789091235,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e25-c470-7400-affc-e38cd0d063df"
          },
          "receipt": {
            "id": "f9007981dbaf13c9bc73581cd37c33cf2b7693c779303a37d88fd994f11496c7",
            "timestamp": 1789091235,
            "capability_id": "cap-01a08e25-c470-7400-affc-e38cd0d063df",
            "tool_server": "provider-security-review",
            "tool_name": "request_quote",
            "action": {
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_02686a6909",
                "requested_scope": "release-review",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "parameter_hash": "f4a555bfb8483b08c4ff78e158e3aa80ee04a147e10f5452416cd467c6184ed1"
            },
            "decision": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "content_hash": "fd845574592ad116aaa10319e6b95aa469ac7a8081abc354e14322af724d7b07",
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 5,
                "coordinator_lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                "operation_id": "edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "34eec223df0d4ac94e7bc1b0a8e51657a9634ba944c49ca63e2e304aa1510832",
                "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a",
                "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 5,
                  "coordinator_lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                  "provider_attempt": {
                    "attempt_id": "attempt:edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                    "operation_id": "edebe988414a5cf6f000cd696b00a459fd8c34e0058d270649509afa117af3ba",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 5
                  },
                  "store_fence": {
                    "lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                    "owner_epoch": 5,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e25-b6a1-7110-b399-586401d46067",
                  "owner_epoch": 5,
                  "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                },
                "tool_outcome_id": "5d5ff1c776c3662af07e31c4bc03704e07c51e4fbb64f10607ea99f068b53d84",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091235681
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                "subject_key": "ffa79686920a8b11dc527b6408d46c010259f9de59ff2b7b261ca1e0d57e6972"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e25-c7b8-7d02-b69b-df28cd4ae6ed",
              "receipt_context": {
                "request_id": "mcp-edge-req-7d81073de4c0489fbef98a0fd0cad93a"
              }
            },
            "trust_level": "mediated",
            "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
            "signature": "5ad8cb27c0f2c6388c194fe87bafc88c1a938ecefb5a24ce16bec07e07eb90e2e17f599c51f17d59905b6648cbe36dfee625b94615ca22fbdb6c3866fc70a406"
          }
        },
        {
          "association": {
            "tool_name": "execute_review",
            "session_id": "edf5c53e7d5317446ace7e45267cf0c7bfd4e3b20922c67d5baf03aa60b5049f",
            "capability_ids": [
              "cap-01a08e25-de04-76b0-a2b1-a662d857c805"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_0d97014df8",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns, exception-handling. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "cf67044f08f4a69a64011344e5cb520bb3e692df1c008ea0df0cd733e4644f7e"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns",
                  "exception-handling"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_0d97014df8",
                "input_sha256": "a2e52003899f1302e19e6e69cf13861bf5a07cd645d999d336a17b663262f5dd",
                "job_id": "job_0d97014df8",
                "quote_id": "quote_eb348fa905",
                "requested_scope": "release-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "c86cf1f0ca7667e6651e16befba7834f6af1c8d41daec1dff4531b3125b04102",
            "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a",
            "arguments": {
              "job_id": "job_0d97014df8",
              "quote_id": "quote_eb348fa905",
              "service_family": "security-review",
              "requested_scope": "release-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:43417",
            "receipt": {
              "action": {
                "parameter_hash": "a564007fe5751d9f9b682f33edc6c317bbffd726972c6e2b73e2b6500f35b7af",
                "parameters": {
                  "job_id": "job_0d97014df8",
                  "quote_id": "quote_eb348fa905",
                  "release_window": null,
                  "requested_scope": "release-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e25-de04-76b0-a2b1-a662d857c805",
              "content_hash": "728c57bb6895d4eb3bedf2c74a237f1529880dc71d0e2278287d17ccfea02b4d",
              "decision": {
                "verdict": "allow"
              },
              "id": "c86cf1f0ca7667e6651e16befba7834f6af1c8d41daec1dff4531b3125b04102",
              "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 6,
                  "coordinator_lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                  "operation_id": "b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "b9ad44f1eaccc1d3420eb8256bfe4958924b0f775c9c2a6023e659b6726a0120",
                  "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a",
                  "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 6,
                    "coordinator_lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                    "provider_attempt": {
                      "attempt_id": "attempt:b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                      "operation_id": "b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 6
                    },
                    "store_fence": {
                      "lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                      "owner_epoch": 6,
                      "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                    "owner_epoch": 6,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  },
                  "tool_outcome_id": "964c6cac060e28020b57ca744cc7615b335dcec1415e6d96efef06736bcbc58b",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091242271
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                  "subject_key": "256ee2184e015678160f95aff741cf1fbc5de8b9063d859fd599518dfe1a2105"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e25-e177-7b13-bd05-2a8dd683d97a",
                "receipt_context": {
                  "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "fa7a9b12a5605fe42fb6ffe68a72628e94fdda3d4a20a9018127755035f1af3923ff3ce3327bf4bc7e6aa489e3ccdcdbc63c54f8f5c180cd56ad9ef794a4fc07",
              "timestamp": 1789091242,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e25-de04-76b0-a2b1-a662d857c805"
          },
          "receipt": {
            "id": "c86cf1f0ca7667e6651e16befba7834f6af1c8d41daec1dff4531b3125b04102",
            "timestamp": 1789091242,
            "capability_id": "cap-01a08e25-de04-76b0-a2b1-a662d857c805",
            "tool_server": "provider-security-review",
            "tool_name": "execute_review",
            "action": {
              "parameters": {
                "job_id": "job_0d97014df8",
                "quote_id": "quote_eb348fa905",
                "release_window": null,
                "requested_scope": "release-review",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "parameter_hash": "a564007fe5751d9f9b682f33edc6c317bbffd726972c6e2b73e2b6500f35b7af"
            },
            "decision": {
              "verdict": "allow"
            },
            "receipt_kind": "mediated_decision",
            "boundary_class": "prevent",
            "tool_origin": "caller_executed",
            "redaction_mode": "none",
            "content_hash": "728c57bb6895d4eb3bedf2c74a237f1529880dc71d0e2278287d17ccfea02b4d",
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 6,
                "coordinator_lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                "operation_id": "b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "b9ad44f1eaccc1d3420eb8256bfe4958924b0f775c9c2a6023e659b6726a0120",
                "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a",
                "request_namespace_digest": "c5a9cc313e2b59a442c5dd5bd334cc45abfe831154c72750acb9cd65e04260c2",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 6,
                  "coordinator_lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                  "provider_attempt": {
                    "attempt_id": "attempt:b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                    "operation_id": "b405cca6d05cf23113f3d5d84274c806237d4bcb853d690ff6a95c19c78d3eb8",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 6
                  },
                  "store_fence": {
                    "lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                    "owner_epoch": 6,
                    "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e25-ceda-7c21-9513-6d2af8a97b20",
                  "owner_epoch": 6,
                  "store_uuid": "01a08d81-f818-7250-8d0e-daf69621b1e7"
                },
                "tool_outcome_id": "964c6cac060e28020b57ca744cc7615b335dcec1415e6d96efef06736bcbc58b",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091242271
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
                "subject_key": "256ee2184e015678160f95aff741cf1fbc5de8b9063d859fd599518dfe1a2105"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e25-e177-7b13-bd05-2a8dd683d97a",
              "receipt_context": {
                "request_id": "mcp-edge-req-b35571870e33477ba90542fe6da6df1a"
              }
            },
            "trust_level": "mediated",
            "kernel_key": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51",
            "signature": "fa7a9b12a5605fe42fb6ffe68a72628e94fdda3d4a20a9018127755035f1af3923ff3ce3327bf4bc7e6aa489e3ccdcdbc63c54f8f5c180cd56ad9ef794a4fc07"
          }
        }
      ]
    },
    "contracts/quote-response.json": {
      "approval_required": true,
      "checks": [
        "python-call-patterns",
        "exception-handling"
      ],
      "currency": "USD",
      "estimated_delivery_hours": 0,
      "max_bytes": 2000000,
      "max_files": 100,
      "offer_id": "release-review",
      "price_minor": 125000,
      "pricing_basis": "bounded release-review for payments-api",
      "provider_id": "vanguard-security",
      "quote_id": "quote_eb348fa905",
      "request_id": "quote_req_02686a6909",
      "service_family": "security-review",
      "target": "payments-api"
    },
    "contracts/fulfillment-package.json": {
      "artifacts": [
        {
          "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
          "name": "findings.json",
          "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
        },
        {
          "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns, exception-handling. This report describes those checks only.\n",
          "name": "executive-summary.md",
          "sha256": "cf67044f08f4a69a64011344e5cb520bb3e692df1c008ea0df0cd733e4644f7e"
        },
        {
          "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
          "name": "remediation-checklist.md",
          "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
        }
      ],
      "checks": [
        "python-call-patterns",
        "exception-handling"
      ],
      "deliverables": [
        "findings.json",
        "executive-summary.md",
        "remediation-checklist.md"
      ],
      "fulfillment_id": "fulfillment_job_0d97014df8",
      "input_sha256": "a2e52003899f1302e19e6e69cf13861bf5a07cd645d999d336a17b663262f5dd",
      "job_id": "job_0d97014df8",
      "quote_id": "quote_eb348fa905",
      "requested_scope": "release-review",
      "service_family": "security-review",
      "severity_summary": {
        "critical": 0,
        "high": 2,
        "low": 0,
        "medium": 1
      },
      "source": [
        {
          "bytes": 325,
          "path": "review_input.py",
          "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
        }
      ],
      "status": "completed_with_findings",
      "target": "payments-api"
    },
    "contracts/settlement-reconciliation.json": {
      "settlement_id": "settlement_job_0d97014df8",
      "job_id": "job_0d97014df8",
      "quoted_amount_minor": 125000,
      "approved_amount_minor": 125000,
      "settled_amount_minor": 125000,
      "currency": "USD",
      "status": "reconciled",
      "settlement_kind": "internal_book_entry",
      "entries": [
        {
          "account": "lattice-platform-security",
          "amount_minor": -125000
        },
        {
          "account": "vanguard-security",
          "amount_minor": 125000
        }
      ],
      "buyer_position": "accepted",
      "provider_position": "accepted",
      "remaining_budget_minor": 160000
    },
    "trusted-signers.json": {
      "trust": "0b4779b514470d64a2a3156bc8a15ae780c899a65de4fff8ecf1f8cc8474b393",
      "buyer": "fcd00a772803f7dd0da9e4e153ab0f6d2d30b354b8e3f76166393a0caa13434b",
      "caller": "611418af162740687e0ab79345884a3a1337a497ccad44fd98d2c5bed2414705",
      "provider": "b47fa16e1fb8bceededad15e120f3e7a99c258b6c27a6c384f5f31e50abeaa51"
    }
  },
  "qualification": {
    "ok": true,
    "operator_budget_minor": 500000,
    "ledger": {
      "jobs": 11,
      "ledger": [
        18,
        0
      ],
      "committed": 485000
    },
    "http": [
      {
        "case": "quote actual source review",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "deba8ad74aecd49a158ffa2ea2d8810172371d38814326e9f20663a3ac8c88f9",
          "request_id": "01a08e27-536e-7df1-b772-e771c10f2ec8",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091338,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "313662fcbb30c1e0317ad9c104bf8db9aee14bd7f7bd482c92adfb0eeb0d5a7d",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "6e3b852b82d2121e207bea0f026ebb3546cab4a5080407bde6fc8212c9de499f",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "a36f561b6eeddae3b88e4105e13a8ee0206e15489877a9de5eb9121824a94b28",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "79072adb5372c11145474374c4a1326e9f339e66e3d84b4b00e9bf5d1e052cbc64e8a58bfc11a99029b9f47fa74320aeb258d8f29b009a95188c96c36125b00c"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_d08559672c",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_a27a93da72",
            "request_id": "quote_req_d08559672c",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_a27a93da72",
                "request_id": "quote_req_d08559672c",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "1197900213e1926e56b0a766452fcdbc3d5e3432daa34246d90e9cbcd70c9a02",
            "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80",
            "arguments": {
              "request_id": "quote_req_d08559672c",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "2fbb2e9170e03cf6999a623ce94b16bce76ae3058580fff403c9df9b42d2c7b8",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_d08559672c",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "64cd5f4322b867de3211fc314dc6f006da645ad012ed77b365564459498244a7",
              "decision": {
                "verdict": "allow"
              },
              "id": "1197900213e1926e56b0a766452fcdbc3d5e3432daa34246d90e9cbcd70c9a02",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "1cd51e28288c1aa93f9b4fcea0de5c9111561e3155bbb4826e4ea46a1ac27173",
                  "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                      "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "ce478f87179ea4f1ba9a83f9665d2492933820fe3950d13d0a8162f1fb63e2b7",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091338121
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-57e7-77c2-9bd1-8cb131e16f5c",
                "receipt_context": {
                  "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "44f9cf9bbcbdaca6e666f4d22e62616e8e042c610205050b2232e5e65241686ad4a67939087f3f8c08b870d03dcabfe0ee36f7d292735002ab70835e10b36d0c",
              "timestamp": 1789091338,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "provider substitution refused",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "682039be62d958015363dd194282a849d1bcb9423e20ee85c305f61edc76db3c"
        },
        "body": {
          "quote_id": "quote_a27a93da72",
          "provider_id": "unapproved-provider",
          "service_family": "security-review"
        },
        "status": 409,
        "receipt": {
          "id": "830138b05ae50b7b1b2e10923b347a484afb8ca1f2ab29dda9f12d234fc30d43",
          "request_id": "01a08e27-5950-7da0-9b03-79059f2abac6",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 409,
          "timestamp": 1789091338,
          "content_hash": "d24d9990a0ac26ad2461b2b3b9e6dbaca1e6519adbbd21abf31739a02c17cfbd",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "654c9ac7466496984bb6e1d524d1868281cb7693c81fb58b0adb08720ad788c1",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "697eff3f56aff8b7d5ec3a32c1ce5e8b64f0f6d67de182c656f2d5fe9d8950bd",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "ef6629c86141da8367f434cadcd6f7922e144c6a9590bbf75c502071e4b7952c",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "5bd992133e9e51728ce006c474c6dff15b6d4ab1629265dc6f44bd7309fa9b43b1825fa7d0097b7a4d9d0c9da4736a57342afec24ae458899594d1ed4153ed07"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "detail": "Provider and service must match the accepted quote"
        }
      },
      {
        "case": "negative budget refused",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "24604e09eff80408c70cebcfa3cc7d991d7b5124aa7add85a37c11d6edb97d0d"
        },
        "body": {
          "quote_id": "quote_a27a93da72",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": -1
        },
        "status": 422,
        "receipt": {
          "id": "6c0ca6e340fc5b962d4ba0a17fc807d2618408bf477d24a0d7b7e5b87d3e0ecf",
          "request_id": "01a08e27-5a8e-7242-bc22-7e519a1de938",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 422,
          "timestamp": 1789091339,
          "content_hash": "afb20574bb66562b51f556b888750f46a68aae3efbc550207740842449077293",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "1dd6f2c9ae0951ff39a07c34cf0d40e674375f6c779b9a2a901f17055462d064",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "d987c3d3693a830172cd4a674be05de3b51bcb2e5049effde3be06882fb83ec0",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "70024f737fab405a3a68cdf5484406144129eeb2deb470d2c5e307cc395729ee",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "d543f9e220b9873085597754de6741255323428b45bd481c608fcd766e5cd6eaeaf17c48bab8b161ceee80851bc29202518fbabff4977b6debe09a00129cc706"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "detail": [
            {
              "type": "greater_than_equal",
              "loc": [
                "body",
                "budget_minor"
              ],
              "msg": "Input should be greater than or equal to 0",
              "input": -1,
              "ctx": {
                "ge": 0
              }
            }
          ]
        }
      },
      {
        "case": "caller cannot raise operator ceiling",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "05e18d6125c65c168b9cc5999691c3e4f8d4a2e968d61a406df40c43f961a6d9"
        },
        "body": {
          "quote_id": "quote_a27a93da72",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500001
        },
        "status": 409,
        "receipt": {
          "id": "b717ffa65908f1e52e542f804409bc1513d250410c6cee51325ba7b1f3d1692a",
          "request_id": "01a08e27-5bd5-7ae2-b21d-592aa0a84523",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 409,
          "timestamp": 1789091339,
          "content_hash": "e9332f7aa624eefd41045a91e7120c69697074a70c7cd569f96fd988319db86c",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "1e79343bd51ba1db097dcf271fbe9d05d0cf788813bf0653b39a7b27f35876d4",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "53eb2027f112a97bfef354d21d6120d5d4743e389cad5fe7ba1e55fabf024782",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "3ff4629edb835cb8d94c8e57714cc27435162d7b96a7b0d84c7d29d0d4d0d5b0",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "a3b35c4b7ac36197159e94d6fedd7f91eb55284e83d3bf01306dbf8ddaf0054b5a4b35d5cd92d1fdc05aab639915c13c0e49f81272f06baee692bea749bce50c"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "detail": "A caller cannot increase the operator budget"
        }
      },
      {
        "case": "zero budget stays zero",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "fe815eefa9766ec58b6e130ad98af53451fe63bdae949f0c7feeb177558aeb65"
        },
        "body": {
          "quote_id": "quote_a27a93da72",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 0
        },
        "status": 202,
        "receipt": {
          "id": "61d6361e3802a4dda6a8eb44272432e231f6390a3538bac0f92ea190a507f830",
          "request_id": "01a08e27-5d31-7783-bb6b-3b8d3f20d4d4",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091339,
          "content_hash": "46568fabb4fb1390b66eee56a33e7a3ab1d44e7e8d196a2c1f0014981ab9264d",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "8b47ab7dbd87a1ae4ebe117b5c203b824d0d45d3359526acbc55356c78de26d0",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "9eb03ab00039ecfbeb89a35745624e0d8e9bf580f4e83da84eefd4bc2a00c736",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "5ca892e1a795d876b896f2bc6cf6dec00c9a6514206210744438c353ec5dc812",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "d47727007ace333261e4c3e10d30de6651764a5edb87eea07abe4087d8d10ec45fd20b141d40ab01a6a7d398f21d0cb27a9bafd1eb27116cb6d114d3eecb2006"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_c7a13680fc",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 0,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_a27a93da72",
            "request_id": "quote_req_d08559672c",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "denied_budget",
          "approval_required": false,
          "approval": null,
          "fulfillment": null,
          "fulfillment_trace": null,
          "settlement": null,
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_a27a93da72",
                "request_id": "quote_req_d08559672c",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "1197900213e1926e56b0a766452fcdbc3d5e3432daa34246d90e9cbcd70c9a02",
            "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80",
            "arguments": {
              "request_id": "quote_req_d08559672c",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "2fbb2e9170e03cf6999a623ce94b16bce76ae3058580fff403c9df9b42d2c7b8",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_d08559672c",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "64cd5f4322b867de3211fc314dc6f006da645ad012ed77b365564459498244a7",
              "decision": {
                "verdict": "allow"
              },
              "id": "1197900213e1926e56b0a766452fcdbc3d5e3432daa34246d90e9cbcd70c9a02",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "1cd51e28288c1aa93f9b4fcea0de5c9111561e3155bbb4826e4ea46a1ac27173",
                  "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                      "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "ce478f87179ea4f1ba9a83f9665d2492933820fe3950d13d0a8162f1fb63e2b7",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091338121
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-57e7-77c2-9bd1-8cb131e16f5c",
                "receipt_context": {
                  "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "44f9cf9bbcbdaca6e666f4d22e62616e8e042c610205050b2232e5e65241686ad4a67939087f3f8c08b870d03dcabfe0ee36f7d292735002ab70835e10b36d0c",
              "timestamp": 1789091338,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "denial_reason": "Quoted work exceeds the requested or remaining operator budget"
        }
      },
      {
        "case": "quote completed work",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "104522655757033d4db720c90f6bac9349ee083b8bdec179460422fadbaa0c33",
          "request_id": "01a08e27-5e6a-71d0-8875-47052fc41640",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091340,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "d191847b21993a41513b919f9beac8995e8ed5aa8199efa3a309c98a3436a450",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "2bf2a93b7401e031221231d6e443c1ee4275f35074707c397936402298ffd729",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "5d63caffe6276fce12734a4c8c0794c243f8c063e364cc50f90145f3c59dbad2",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "75c85a012ec610c062256e78aa8ce13e1038a8ea80b2410f823cf7c3e606702ca4c97b8753b044c49aaebfaabd23450878844f5d00a7f40f1ec0091d98b26805"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_837c36c654",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_ce5f7b56dc",
            "request_id": "quote_req_837c36c654",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_ce5f7b56dc",
                "request_id": "quote_req_837c36c654",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "68b556d93baa73118b91db1393a3e3d272d851663a5df999584882146631d538",
            "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2",
            "arguments": {
              "request_id": "quote_req_837c36c654",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "c8953834d3fd3ada0ec82fe95f271a6a1b626241ef0515f0fd09d50ab5c10d03",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_837c36c654",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "5dc28b8b85f0b53f8c842d230329d684387c333f7bf9efb9245f3d04f30ccfbe",
              "decision": {
                "verdict": "allow"
              },
              "id": "68b556d93baa73118b91db1393a3e3d272d851663a5df999584882146631d538",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "761756d39c3456ba96b315d8c33362697c87b3c1a68b01f005d136e6df30b475",
                  "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                      "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "381fb94bc0b2a0e3f6d7c4b5e3c7e7341ef4296bf34bd0e662e7d2783c80a717",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091340498
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-612a-78f0-b8e9-4c73d484c4ac",
                "receipt_context": {
                  "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "bee48b45f1053d38a0229e1695dd48f54e9c38eadcbfeca9353d8e53f0817a65bfd1ee2fcd448e2a3ffc85ba166171f056af08de9a269c576fbb44bbac15bc08",
              "timestamp": 1789091340,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "accept completed work",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "ed31c20b1d2b4a9e93e36112a8858e94c4b8e54cdec75ffa84c381bb0e831ed2"
        },
        "body": {
          "quote_id": "quote_ce5f7b56dc",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "2e6bfd87e015937916eaa6af2d6a18f7c582047c2c95e7038e32d97a0766eafa",
          "request_id": "01a08e27-629f-7760-b50c-713bd8712461",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091342,
          "content_hash": "213ccae407c60fd8761272ada96e2c2873b080349574f9a21b9ed903d0e700da",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "6a05802a3debc910a470bd0eeee135a0bde3675556dd703fb3f9d01729e37aef",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "ad7eb91c8c4a1a4df68d59722e1cb766ca294672204ff149f6ba8f685747990f",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "074c6887ad65e316677c15107b8881a43a898880a23cc49f305c022f33b3ca2b",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "510ff884b7804b7e4c027577f699b9dd30472929249efd81f0426f0be7478a0eb558d19f85b059a51ebdc24fef93386b6b2c47001c271b08dde013d2591a4606"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_180c5e1bb8",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_ce5f7b56dc",
            "request_id": "quote_req_837c36c654",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_180c5e1bb8",
            "input_sha256": "f965a4df863bd8a1c9c431c6a5722f8078f9674f44fc849f2ef3096d015bf1c1",
            "job_id": "job_180c5e1bb8",
            "quote_id": "quote_ce5f7b56dc",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_180c5e1bb8",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_180c5e1bb8",
                "input_sha256": "f965a4df863bd8a1c9c431c6a5722f8078f9674f44fc849f2ef3096d015bf1c1",
                "job_id": "job_180c5e1bb8",
                "quote_id": "quote_ce5f7b56dc",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "b6af1d3d46bfe9b8c7767f694867acb5504da6cb28dba2011d09f8140471e6df",
            "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396",
            "arguments": {
              "job_id": "job_180c5e1bb8",
              "quote_id": "quote_ce5f7b56dc",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "acaf604ede8daec49453067315e2bd7dd5dd9335fe9a4a2db84c9329e7b30a72",
                "parameters": {
                  "job_id": "job_180c5e1bb8",
                  "quote_id": "quote_ce5f7b56dc",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "169c446218784f021d18dcbeb4d4e48920ce1f29212f3385a9357261fd39846a",
              "decision": {
                "verdict": "allow"
              },
              "id": "b6af1d3d46bfe9b8c7767f694867acb5504da6cb28dba2011d09f8140471e6df",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "72f3469bfb3188d2bebb5a22937b59add46e03062b7e486dd8c6c45fcbc5801d",
                  "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                      "operation_id": "936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "afd66b07aa5bc8e570bd2c672147f572600cbc33d279976c759ccded386710fc",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091341632
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-6596-75a2-90e1-ae6e6b783323",
                "receipt_context": {
                  "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "77ed57e0c856396f8b7fa68a19cc6ebabe7d099ce2a769ded9d26ada38a8cc7da520804383d33da0790cfb89d8d9e4ce80798c83da9857e9885c9bdbe12ba90a",
              "timestamp": 1789091341,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_180c5e1bb8",
            "job_id": "job_180c5e1bb8",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 455000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_ce5f7b56dc",
                "request_id": "quote_req_837c36c654",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "68b556d93baa73118b91db1393a3e3d272d851663a5df999584882146631d538",
            "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2",
            "arguments": {
              "request_id": "quote_req_837c36c654",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "c8953834d3fd3ada0ec82fe95f271a6a1b626241ef0515f0fd09d50ab5c10d03",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_837c36c654",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "5dc28b8b85f0b53f8c842d230329d684387c333f7bf9efb9245f3d04f30ccfbe",
              "decision": {
                "verdict": "allow"
              },
              "id": "68b556d93baa73118b91db1393a3e3d272d851663a5df999584882146631d538",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "761756d39c3456ba96b315d8c33362697c87b3c1a68b01f005d136e6df30b475",
                  "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                      "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "381fb94bc0b2a0e3f6d7c4b5e3c7e7341ef4296bf34bd0e662e7d2783c80a717",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091340498
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-612a-78f0-b8e9-4c73d484c4ac",
                "receipt_context": {
                  "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "bee48b45f1053d38a0229e1695dd48f54e9c38eadcbfeca9353d8e53f0817a65bfd1ee2fcd448e2a3ffc85ba166171f056af08de9a269c576fbb44bbac15bc08",
              "timestamp": 1789091340,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "quote replay refused",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "ed31c20b1d2b4a9e93e36112a8858e94c4b8e54cdec75ffa84c381bb0e831ed2"
        },
        "body": {
          "quote_id": "quote_ce5f7b56dc",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 409,
        "receipt": {
          "id": "51619f639b5b26413eee65667e09fe08c2eac017909f6521ef484b1e2bcf6d08",
          "request_id": "01a08e27-6700-7a43-9bec-f8a0c3c903c5",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 409,
          "timestamp": 1789091342,
          "content_hash": "213ccae407c60fd8761272ada96e2c2873b080349574f9a21b9ed903d0e700da",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "360f8cb30f711beb787353cbf915e4ecc4193ddef1f0bb667e3472bf8383c4b8",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "de04b2cbd24685b24c0bf566fb6aead966344872a04a85e064f8d5af40272b59",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "687ce3895d1df4daa92d9473fb52e1fdfe86d376e4feec1e97e5028b0471616c",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "b2c6f852d873787203082c94000ae7f62c73d49d97d4d2442e343331d897681286c88c85ce4eeb1fad6e36771a7b7ae3212de4e057af3e5ce7ad34a716468b0f"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "detail": "This quote has already been consumed; inspect the existing job"
        }
      },
      {
        "case": "quote independently approved work",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "7442266075a4ad1b74182a7c01e5f6de2b3e5a3a4a450eb1c3076f3e99922550"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "release-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "18d3fbbac890c36d38e8f69832c11f8eabbe1b2dab2b3fbfcddd2dfa38aa62ad",
          "request_id": "01a08e27-6832-7610-b7fe-2a669dfe1535",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091343,
          "content_hash": "b7c5cff1e7e5833eff9ba52277bbb49a7b1293d9703eb4ffc50c1dfc7e9d7dee",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "d0f6bbcaab4949b19c75f6b3bda017e030b3b71b53f23254b9ed19f796483bc6",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "7f8cd4e52fe09909267242e5c515a4499a18f270d8e76498cc126dd337a4909f",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "20776c86aadaaad6c85bea4b172b1e8641c081ca1b9ac6010e8ab3deb356f17d",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "2b576f7cf88d34b31b0a06e85bfb38556987a0120a205e596db7c8aeb348d05d56c84105432d46b3f366c67c64be632a798161904a6dc060182da1c50973e207"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_f2158b2c41",
          "status": "quoted",
          "quote": {
            "approval_required": true,
            "checks": [
              "python-call-patterns",
              "exception-handling"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 2000000,
            "max_files": 100,
            "offer_id": "release-review",
            "price_minor": 125000,
            "pricing_basis": "bounded release-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_80978b4ea1",
            "request_id": "quote_req_f2158b2c41",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 125000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": true,
                "checks": [
                  "python-call-patterns",
                  "exception-handling"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 2000000,
                "max_files": 100,
                "offer_id": "release-review",
                "price_minor": 125000,
                "pricing_basis": "bounded release-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_80978b4ea1",
                "request_id": "quote_req_f2158b2c41",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
            "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
            "arguments": {
              "request_id": "quote_req_f2158b2c41",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "release-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "dbadec83d8d6082c3609929127b250ca230d8874f0fe677d8355c191de7fbdcb",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_f2158b2c41",
                  "requested_scope": "release-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "7d855c6f2a241241852e8b52340988133a12eb3da2ef74074a6ad60683632197",
              "decision": {
                "verdict": "allow"
              },
              "id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "7d2d5b705a2169fc64e7e51a9e21187b63a2613f3b2acd9610ec627ce85c4aa1",
                  "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                      "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "66c700c5d2c570041152740162f7b0af9c166279cf7e037b754085a07db98918",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091343009
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-6af8-7103-8a10-4d2f1f0b62d2",
                "receipt_context": {
                  "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "080e790818c2df224dd1bf9dd4ef515b96b26419226e6380bddcc925e3cbe6fc8fc7fbc98b4c9333c1aa15735876693a1e6752720c503f4e1e45bf33aeda4004",
              "timestamp": 1789091343,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "reserve approval budget",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "ebb8e8457ac5719c8fada579de0b60c723b565539b32bd327f26cd5652295a92"
        },
        "body": {
          "quote_id": "quote_80978b4ea1",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "3a6f7486502287fa00b93ce18a992d69c5a79384ced49a28697a595aafc10a85",
          "request_id": "01a08e27-6c93-7171-a112-7a525866bfdb",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091343,
          "content_hash": "3c8f3b1178d676af6306d07975f778ca89530372e969986542f0ced1b5b4e447",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "8ee8f32e5aa9ff6a98727c12ddefd5bb9939e8898c21c8446f2bcdc5efc11491",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "90af5a6f3c355e484e1067cf22251476e016e648ed3693993159848f8552dccc",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "f1ff6d868713126a32d2f0a09b5379b59c0aa864c4acc9090c662c79b29f3596",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "72c01f0b78f74563d8f5732233678014fcd8ec4f210e33529c70183ada8dec3e4fc53a6d612cdd0e5b22dcf5f1ead7a5a7f8aaa8a5cfa3afcb6cc8a886c9100a"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_a0ab58c4e3",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": true,
            "checks": [
              "python-call-patterns",
              "exception-handling"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 2000000,
            "max_files": 100,
            "offer_id": "release-review",
            "price_minor": 125000,
            "pricing_basis": "bounded release-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_80978b4ea1",
            "request_id": "quote_req_f2158b2c41",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "release-review",
          "target": "payments-api",
          "release_window": null,
          "status": "pending_approval",
          "approval_required": true,
          "approval": null,
          "fulfillment": null,
          "fulfillment_trace": null,
          "settlement": null,
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 125000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": true,
                "checks": [
                  "python-call-patterns",
                  "exception-handling"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 2000000,
                "max_files": 100,
                "offer_id": "release-review",
                "price_minor": 125000,
                "pricing_basis": "bounded release-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_80978b4ea1",
                "request_id": "quote_req_f2158b2c41",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
            "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
            "arguments": {
              "request_id": "quote_req_f2158b2c41",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "release-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "dbadec83d8d6082c3609929127b250ca230d8874f0fe677d8355c191de7fbdcb",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_f2158b2c41",
                  "requested_scope": "release-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "7d855c6f2a241241852e8b52340988133a12eb3da2ef74074a6ad60683632197",
              "decision": {
                "verdict": "allow"
              },
              "id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "7d2d5b705a2169fc64e7e51a9e21187b63a2613f3b2acd9610ec627ce85c4aa1",
                  "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                      "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "66c700c5d2c570041152740162f7b0af9c166279cf7e037b754085a07db98918",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091343009
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-6af8-7103-8a10-4d2f1f0b62d2",
                "receipt_context": {
                  "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "080e790818c2df224dd1bf9dd4ef515b96b26419226e6380bddcc925e3cbe6fc8fc7fbc98b4c9333c1aa15735876693a1e6752720c503f4e1e45bf33aeda4004",
              "timestamp": 1789091343,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "agent credential cannot approve",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs/job_a0ab58c4e3/approve",
          "query": {},
          "route_pattern": "/procurement/jobs/{job_id}/approve",
          "body_hash": "cfcaaf564ae8c041291f6768d608d56be32dc2d9d42bc6fb6e4a62bf601ae933"
        },
        "body": {
          "approver": "application-operator",
          "reason": "Reviewed scope and remaining budget"
        },
        "status": 403,
        "receipt": {
          "id": "de829c55694c45311f4d63ec083a8a2043c1af5873c5c055aca01c7772479587",
          "request_id": "01a08e27-6dc6-7c81-afce-6db96b3b9370",
          "route_pattern": "/procurement/jobs/{job_id}/approve",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 403,
          "timestamp": 1789091344,
          "content_hash": "c5099185266b2a04d5a6eaa29fa3616820a44cb4b7dce175b3814158b8363721",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "9683f47e75df9effeced2e79704987eeada5b32216462212d0c3cb517e487369",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "62164bebfc7a7b3461dcc74dea50c0f240735e9ab466423c1adb2ab32054cca3",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "de901d2f73b16dc7b56e670046480178b4235047a9531fbb6ab70249e870af7e",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "1a9780a01c2e1262314e5744ccc4630151119b6ea173f3222a0a3fc28c236578194ccfe262d8ffa282812de439a2f444e13d57a97a60295fdc7ca3d168784d06"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "detail": "An independent operator approval credential is required"
        }
      },
      {
        "case": "independent operator approves",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs/job_a0ab58c4e3/approve",
          "query": {},
          "route_pattern": "/procurement/jobs/{job_id}/approve",
          "body_hash": "cfcaaf564ae8c041291f6768d608d56be32dc2d9d42bc6fb6e4a62bf601ae933"
        },
        "body": {
          "approver": "application-operator",
          "reason": "Reviewed scope and remaining budget"
        },
        "status": 200,
        "receipt": {
          "id": "95e3b178c04cf64f0a17ca22d082f8ad2d1738de39eabfb0f9206bc5f2870100",
          "request_id": "01a08e27-6ef8-7f83-a462-8b40306cc702",
          "route_pattern": "/procurement/jobs/{job_id}/approve",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 200,
          "timestamp": 1789091345,
          "content_hash": "c5099185266b2a04d5a6eaa29fa3616820a44cb4b7dce175b3814158b8363721",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "a429bf86a03a770afa825a278735f9e70044ad3fc6fe9c72c8d0787ea0a9530c",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "1db330ffed6a07a2cb385a645b71f6821c663b6576a39cbc2a4444ba4ce07c2e",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "20f48d5d722dd6dd704f529bf449fac39f11ffd7f39e979835c1e33cf1f860e2",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "8a73ee2af36eda34c592ea6d9c62f0a8b5ac92c104ba930483b7944a5e22925d6cb2935a3f6ca11ec1bf18d165f90937b420a3f01dee022d4e3f484751c80c0a"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_a0ab58c4e3",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": true,
            "checks": [
              "python-call-patterns",
              "exception-handling"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 2000000,
            "max_files": 100,
            "offer_id": "release-review",
            "price_minor": 125000,
            "pricing_basis": "bounded release-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_80978b4ea1",
            "request_id": "quote_req_f2158b2c41",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "release-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": true,
          "approval": {
            "approver": "application-operator",
            "reason": "Reviewed scope and remaining budget",
            "status": "approved"
          },
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns, exception-handling. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "cf67044f08f4a69a64011344e5cb520bb3e692df1c008ea0df0cd733e4644f7e"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns",
              "exception-handling"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_a0ab58c4e3",
            "input_sha256": "234715a684ee3dd2b74c58553ef23a408780cdf5f139b88c7483a8c1651749f4",
            "job_id": "job_a0ab58c4e3",
            "quote_id": "quote_80978b4ea1",
            "requested_scope": "release-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_a0ab58c4e3",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns, exception-handling. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "cf67044f08f4a69a64011344e5cb520bb3e692df1c008ea0df0cd733e4644f7e"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns",
                  "exception-handling"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_a0ab58c4e3",
                "input_sha256": "234715a684ee3dd2b74c58553ef23a408780cdf5f139b88c7483a8c1651749f4",
                "job_id": "job_a0ab58c4e3",
                "quote_id": "quote_80978b4ea1",
                "requested_scope": "release-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "3a9a078a04749254c76bbde475f63df2ef864a5695faab6420ceebce91b429bd",
            "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8",
            "arguments": {
              "job_id": "job_a0ab58c4e3",
              "quote_id": "quote_80978b4ea1",
              "service_family": "security-review",
              "requested_scope": "release-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "aa09e7a106125c21fc3d0243d2d0d5c82a91db5ee816ffab1d3391064a35e584",
                "parameters": {
                  "job_id": "job_a0ab58c4e3",
                  "quote_id": "quote_80978b4ea1",
                  "release_window": null,
                  "requested_scope": "release-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "72f70601c77f1effc1ae70afa564d4da4f32dc7e691d204c1442bb856cdfa21f",
              "decision": {
                "verdict": "allow"
              },
              "id": "3a9a078a04749254c76bbde475f63df2ef864a5695faab6420ceebce91b429bd",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "fe3a543e60f7d833418d6cfd6ae2fe5ace5b7f1512656c66539e3dc6fcdfde61",
                  "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                      "operation_id": "1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "47cce10749f7eb5e8190727bc1c2eba14e1f4ab503cdc32b6372dfcdcb65abfd",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091344785
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-71eb-7af0-b02a-4a76203b50d0",
                "receipt_context": {
                  "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "b1fbb4f10f6c9cb87a517566b06f6d1643ae87f5c02e446fd788a08240d58e9b7a19e69ffa24235d8a6ba37ac5cd070d057c3b1d34719dbf6e0656a46f5a0a01",
              "timestamp": 1789091344,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_a0ab58c4e3",
            "job_id": "job_a0ab58c4e3",
            "quoted_amount_minor": 125000,
            "approved_amount_minor": 125000,
            "settled_amount_minor": 125000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -125000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 125000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 330000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 125000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": true,
                "checks": [
                  "python-call-patterns",
                  "exception-handling"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 2000000,
                "max_files": 100,
                "offer_id": "release-review",
                "price_minor": 125000,
                "pricing_basis": "bounded release-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_80978b4ea1",
                "request_id": "quote_req_f2158b2c41",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
            "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
            "arguments": {
              "request_id": "quote_req_f2158b2c41",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "release-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "dbadec83d8d6082c3609929127b250ca230d8874f0fe677d8355c191de7fbdcb",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_f2158b2c41",
                  "requested_scope": "release-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "7d855c6f2a241241852e8b52340988133a12eb3da2ef74074a6ad60683632197",
              "decision": {
                "verdict": "allow"
              },
              "id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "7d2d5b705a2169fc64e7e51a9e21187b63a2613f3b2acd9610ec627ce85c4aa1",
                  "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                      "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "66c700c5d2c570041152740162f7b0af9c166279cf7e037b754085a07db98918",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091343009
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-6af8-7103-8a10-4d2f1f0b62d2",
                "receipt_context": {
                  "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "080e790818c2df224dd1bf9dd4ef515b96b26419226e6380bddcc925e3cbe6fc8fc7fbc98b4c9333c1aa15735876693a1e6752720c503f4e1e45bf33aeda4004",
              "timestamp": 1789091343,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "approval replay refused",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs/job_a0ab58c4e3/approve",
          "query": {},
          "route_pattern": "/procurement/jobs/{job_id}/approve",
          "body_hash": "cfcaaf564ae8c041291f6768d608d56be32dc2d9d42bc6fb6e4a62bf601ae933"
        },
        "body": {
          "approver": "application-operator",
          "reason": "Reviewed scope and remaining budget"
        },
        "status": 409,
        "receipt": {
          "id": "48523473b221a5a6ff5379588033bafa20dfd09d8b97c1c6b8b2f1c746ca5f57",
          "request_id": "01a08e27-7399-7320-8da1-fd56243034e5",
          "route_pattern": "/procurement/jobs/{job_id}/approve",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 409,
          "timestamp": 1789091345,
          "content_hash": "c5099185266b2a04d5a6eaa29fa3616820a44cb4b7dce175b3814158b8363721",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "f9636250f1c1f7f5cfb39b2e8d02da465cc9c06f47ab7b3a161ab0bd70d192b8",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "65fd2ca551f2a4bf9f6040ba354c1710a3f4fdeb5c2abeb088aad78f70f9350c",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "f723c815fd6a422ec60e7949a161f862260c8ef7bf42ff9b8be4c6780b067de7",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "4322487021290e5bfa6203314869e17187dd8efe4a4bf8131a2ed95a5d4ddeb27af40e96d64b532b155c6c58795c6223f42e8539e62eb9eb2e2e06d48596e802"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "detail": "Job is not waiting for approval"
        }
      },
      {
        "case": "concurrent quote 0",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "efb35651ae1e5393c094c10bb545dfdf46d7bc74fa5d57c181443b0360a5a117",
          "request_id": "01a08e27-74cb-7873-b51c-fd67ce75abba",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091346,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "fbf48897832d17fe76cf6d45a32a69bdb88d8a381b059d6d3a1f207f7b939ef2",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "ce8a64b022e60ec5c94d1a6fd6f19bdbeca906a815a2d723caecdf59cdb20016",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "8c6cdab82443935cd28b494ff56f61db8974a7cbd96ba033a939560aa0dd21b4",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "82f95ad12e73e94f27318e9c133569a27f7ace2e6c72c2bb6bd075c8ee7670112aecb51be0883195665608609d9c206793cd5f9a851dcebb9105612b470e3e03"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_67610f73d1",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_f1b037137d",
            "request_id": "quote_req_67610f73d1",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_f1b037137d",
                "request_id": "quote_req_67610f73d1",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "566ab5eedfd95e2f14e4aadecdb9dce8655dd992b28bba539f2b0cfe8bd5584b",
            "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12",
            "arguments": {
              "request_id": "quote_req_67610f73d1",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "7335e20e8d0f98c14c3a19103f08b598c5bc35b0281bb137b4fc27a3480a716f",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_67610f73d1",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "3dff5ef3f7063c36058009d1b5be135094eb495fbee535d3aa46307bcc1823f9",
              "decision": {
                "verdict": "allow"
              },
              "id": "566ab5eedfd95e2f14e4aadecdb9dce8655dd992b28bba539f2b0cfe8bd5584b",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "d092973fb562f8dd52402c9f955c702b774e7f9a3a52ca9e40e59d87ccde4a25",
                  "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                      "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "2cfe6df319f2bfc5f4f45c3efc5979fbddff1fec688cb468853d56629310fb58",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091346252
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-77a1-7f93-a21a-7ecc1e36b880",
                "receipt_context": {
                  "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "5dbedfad4fc6f1def1a62bc7d409f02f6f694c74e630ad17471ab6745da6985f60668e1de15cb776f905a9a7051fa8278410f44eb10d23c4349104b110f09c04",
              "timestamp": 1789091346,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent quote 1",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "e17239297d4a2cdddbf7c24c2d072bcfc65078db8088ead74921ea4b1e5c8dfa",
          "request_id": "01a08e27-7975-7462-8b90-a2a2df07acea",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091348,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "c0d8c7c30c3f63f8840a0431f5a75b3d100d2df918f2dc38c00e25ccc89648b6",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "38cda2dc90c0267047db424d667e00c12282a95a68b90018f444b6419effa974",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "1727ae3b0d00e5b65faf286f65138e8c767f8ad7d18bd3dc2cf1d0c8da5db9d3",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "4654467d74b3b9ff4ef9a65abe6221da1f468c7573c6589690a0fe5ef3f71916c4e2c5cfba33806a87938c15df4c51168b2ab25871ae6828dcd48b2069cd450c"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_16f6fd547e",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_10fe91f8c7",
            "request_id": "quote_req_16f6fd547e",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_10fe91f8c7",
                "request_id": "quote_req_16f6fd547e",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "9cb23baf9e9d8aa9b5b854c57c60dd5cbb84bbcffb2f2cd8d5e2fb68fae86fa4",
            "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285",
            "arguments": {
              "request_id": "quote_req_16f6fd547e",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "2c0aece9efe24f43d475891fd78f20373d6bb22946c622f233304f6943042107",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_16f6fd547e",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "ad6000cda8e7c8ab3d1450510be0d67472a3c5d13892a3b64f5d66943b9ec78b",
              "decision": {
                "verdict": "allow"
              },
              "id": "9cb23baf9e9d8aa9b5b854c57c60dd5cbb84bbcffb2f2cd8d5e2fb68fae86fa4",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "75c8d4c7308cb0005d480ed2b8ff1aedc57c21fe84254502e10fa4a132559b97",
                  "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                      "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "908d4d5249f3cb2b9320499bb09a8e5f7679936fe02a86a3e737a7cc67c9259a",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091347493
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-7c7c-77d3-b697-5f3f37104f23",
                "receipt_context": {
                  "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "cd6bf841f3593b3bb17e04bf5ee5f40efe6a1ba786126a1b52e1e8cee080384f6162909f10d0349913e5759850bdb15893f5991f83a1d590c40589fddc31b109",
              "timestamp": 1789091347,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent quote 2",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "baf0b72fbc7d537f6fe849bd7ae00463d046975ee71a72407b778f3703badd9a",
          "request_id": "01a08e27-7e76-7cd2-a9b2-a9c61b10beec",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091349,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "3f5c18d500f2e876409f3c37d532d909bca7b895e71c586a4dcd827b7df48e63",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "c709a15a3899daed2280eca7e5dedc32737e1d8286cba27a266618c93f26dd90",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "9470cd36af9abb6425a6127deb58367fd9f2e54b1f834d349118d8b10bb017a4",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "92d861953090db3d31afc17a723295abf60e52785a93a11a825ff6bde053a24c8d670cb2362f72576b8bbb772b9cfce67582ed56c73b5af844ee988935c24b06"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_197c3b32c0",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_079c10b451",
            "request_id": "quote_req_197c3b32c0",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_079c10b451",
                "request_id": "quote_req_197c3b32c0",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "051798951db66bdfaa754a456894b9c5f6a185b11fc2988b77c1459f9713314f",
            "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44",
            "arguments": {
              "request_id": "quote_req_197c3b32c0",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "9df5d9e870b5c74d5396659fc6e2e0babea1e086004f7d3486f8f2c1fbdbef25",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_197c3b32c0",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "c28b90f4aa1b6ca33bf9b0bef98b9b4ebb6049d15b37202f7b08a09a91d87333",
              "decision": {
                "verdict": "allow"
              },
              "id": "051798951db66bdfaa754a456894b9c5f6a185b11fc2988b77c1459f9713314f",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "e02f65f380a9b4025d0b394115058dd39c3f9b8c169e297650316d0f3cedf318",
                  "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                      "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "0ab8eea2a546974173f6238a717a23219ec48e33fc44bcac49a98da8c53a81d0",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091348741
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-815c-7a21-99df-7f1d604ac407",
                "receipt_context": {
                  "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "a94adad09d94d732b7f09b343e45c90aa64eeedf4c193ef3d2ffabfb9598dca5c4400000b5cc84e1fb9127e94238e6253b859eda2cd8f143ce958b185186480b",
              "timestamp": 1789091348,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent quote 3",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "865810dd2d6d735e1cb54877f82fff9b66e8488fd21cc7a17dace84178346f30",
          "request_id": "01a08e27-837e-7842-8b2d-9f52edc5e2f1",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091350,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "b88e37efc2c640ed2d89746b7b15545441c8412c37a018b9d041b53966f9b415",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "e825e325663fbd9d87a7e95f4e244cda94fe0200d5ae31bd54686c9eab1b95b3",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "2a1047248145826d8d5bb6ad9385ac341e73ad2db8192a3a4ff723f90d508268",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "f103a366d65f543e66caa365d19d468360dbe95e576969bd695bf50f0b792faa4227713ad83db441129190bffb8285ab176125674d269504897a9bb43907b906"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_2a71107508",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_ce119eacd0",
            "request_id": "quote_req_2a71107508",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_ce119eacd0",
                "request_id": "quote_req_2a71107508",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "48aafd4ffe3020a1db2aa9e7a15b45f096c18c7fd03a77cb6923508499ab6739",
            "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d",
            "arguments": {
              "request_id": "quote_req_2a71107508",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "84bf1a212dc84a904c47b9ca4a26a43c3dfbf7e7b6e77aceae4b2cf6830039ad",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_2a71107508",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "ab823136e281aa82d6d988ec7422cce4ed3614fe339f47428a1947b41aab4ffd",
              "decision": {
                "verdict": "allow"
              },
              "id": "48aafd4ffe3020a1db2aa9e7a15b45f096c18c7fd03a77cb6923508499ab6739",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "f701beafd1eb89667b38a7bc3ce1c41c5356113a14ed2722261d6d35622cee9b",
                  "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                      "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "8285c5bedd77756b3c4fac8892b3e57e467694f472e1f407e2016946969c1bae",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091350040
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-8670-7a11-9546-c7e809591828",
                "receipt_context": {
                  "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "4b9a16530f3212cf439e0f62a6b4ea1ddf6331e620d4f617470f38bbb2e12ed1ddb9850bcf68511a6150037caba35d92af839f3a61313b0abfdd3dc10f365a0a",
              "timestamp": 1789091350,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent quote 4",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "3d277bd044c3e63d5bdf8a926dfdca879e12bafd3ae030ddae0fbb5adb7e22bd",
          "request_id": "01a08e27-88b5-7c63-bb0c-32e69de6361c",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091352,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "e310c0d1f862b938475ced06698e6ce267b2f1833121f25c0cbb8dcc5efebc9f",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "bb041c9bc929da2e9f0c4bc22926d64565c779626053eac80194d6fc6806bc1a",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "7b60c4d58bda5f3834d2e3d9e8606917871efd83426f784a473d501a47b5ee0f",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "376b01a918f937c86d14a1ef0b4b8308777cc6d5d340475fe4c7031a5343d64a14b3ea3cea5ad871dcef89ddb13010838c88a4248f46a8046c77fe34b8932300"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_156b38fb30",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_141fa1c3c2",
            "request_id": "quote_req_156b38fb30",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_141fa1c3c2",
                "request_id": "quote_req_156b38fb30",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "be2e3d8b16f3ddeecd897bd131b0965f5351cf8151f05e2628cdb39476b6491d",
            "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731",
            "arguments": {
              "request_id": "quote_req_156b38fb30",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "a43a47a4ebd1c1016703f41b52f1a9a73e6b5131cb227b4bb648f184206cce3d",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_156b38fb30",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "1ec28266b3baaed79cad1b99f9be52732bc9ddf4f823bb6e2c576b659ee1bea2",
              "decision": {
                "verdict": "allow"
              },
              "id": "be2e3d8b16f3ddeecd897bd131b0965f5351cf8151f05e2628cdb39476b6491d",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "c829fffcab83ae84f7138239f0a4d3b8bc1873098584d4e7142aca962c0a2971",
                  "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                      "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "aaa6484b7d97609677702f5ff64d81151db6ebbdb204a3781e42cefddcfd8ccc",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091351399
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-8bcb-7bd2-9195-1ef14720231b",
                "receipt_context": {
                  "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "be799bd6e1141f6d42b4aae8ecabcca171cefa6dfbc698da229755aa9e9c52507c181e200d17d13340df2626c2cb0178562b561a2206558550486faefee5cf0e",
              "timestamp": 1789091351,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent quote 5",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "208bf3b6705dbbe9000c1d1fce7b6e7446d570161f08c7b7b7d07afc4f1ceeca",
          "request_id": "01a08e27-8e3f-7873-af20-94d003fb9411",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091353,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "db56eb790595f15ed9f10657b355bf948510cc3f041e17e498944c48a8f1948f",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "c78a4b8e72c39b88a571c5876a5c442905f09d2a3823705ad6bd271be6e5d4f8",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "c2c91273f81504b6d139890e74e9837215bdef14d00a5754713108ad185f0d33",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "da3de459b9171f153890abea9bc0a6e7c98a2acc9aaf5d348428a88ded944b639aa5e0ec3d133ea8fde76319f2ea0a0093b8367f9de7827ddbd6b00366bd4005"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_04aa377c27",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_f05bcf82e2",
            "request_id": "quote_req_04aa377c27",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_f05bcf82e2",
                "request_id": "quote_req_04aa377c27",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "4b026798f40a5e24d8fa1d4e44a64e690365d7d13afa8c3fc8ce3799f53a17c3",
            "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7",
            "arguments": {
              "request_id": "quote_req_04aa377c27",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "1fc6987c1e265dc9fb8d97851c0e430aa3f2dd6d5b2b26efd49ab7b3258ad13c",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_04aa377c27",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "d7e71cfe70f00216bc0984f261769a0b3ae81d8699bbae322765065b8078c405",
              "decision": {
                "verdict": "allow"
              },
              "id": "4b026798f40a5e24d8fa1d4e44a64e690365d7d13afa8c3fc8ce3799f53a17c3",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "914982c070d65b4c79ae41d0daa93d9b11d2586230a8d3b343fe1414cb650094",
                  "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                      "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "5cd5b7cfbac25671407a47651b4d92c310897d2d3bcce3f563cf6397ade3384f",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091352819
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-914d-7b40-a0bc-6f6793e0711f",
                "receipt_context": {
                  "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "f331ccfea4605c73b469200f065b254208476dec7dd2a512412c5148c7909d54808eba2930f5c7ae13e857ad4abc705aa45e63ab986b6ce52c79e0f75b6ea400",
              "timestamp": 1789091352,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent quote 6",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "ab7868c79f652a808d0ba61ddcc468a7d2de2076218722c88927cf1cafc0deed",
          "request_id": "01a08e27-93d6-79e3-b0dd-0d1e9545e74d",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091354,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "e40a623af40e8b8585df35f0c1da2dd548aaa32c55126ce8c146ac8471c1ba41",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "a5eb430f1bc59b4b28f783649dc78fda5d6bb6b7fd7ac6c05e1e5dcb44a6cf10",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "6e5b05fbb2465f751036bb011491240fa60f6f5edaabca61ca137a36fdaec608",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "fddcf6cb210ac41cd9b04a0072a9e9b723f838a4d9c8d2635a4826a9563a3d1a81437563bc5390174f2084142da6a2395dfd4f81a69a59b281b853fed412db0f"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_c7290cceff",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_e4e28430c0",
            "request_id": "quote_req_c7290cceff",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_e4e28430c0",
                "request_id": "quote_req_c7290cceff",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "ef7a465cd20f37e89cd19e9fa79e65652e59dbbef2a3fc21583366f8844525b4",
            "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba",
            "arguments": {
              "request_id": "quote_req_c7290cceff",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "c554fa4288be897ed7b7062d154ce0c5861af01c05af169cb2f54149b17d959f",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_c7290cceff",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "23434c4124cfe727eb02fad3ee9880c0a46f5b2f58ec9ed8a9fef16b4c993782",
              "decision": {
                "verdict": "allow"
              },
              "id": "ef7a465cd20f37e89cd19e9fa79e65652e59dbbef2a3fc21583366f8844525b4",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "2f076d2beb59fb9fa219e06f19edc65702527435dfc3a1c4e352f2bdfd102576",
                  "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                      "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "e4a6dbece9a930b5d1870667cfffbdcdfa0f5823e0dd39c95b902251ebfe6bde",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091354232
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-96d0-7bb2-a9a0-b4c6941b57d2",
                "receipt_context": {
                  "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "d364b047bd572e2b5dbb41da7b8ab6dccee8b2171773e4800eefff44b8ade24edfa4d34f34f5c9e938aac64d8066a4bd0d6b4920b3bdc80733286cbbe7219106",
              "timestamp": 1789091354,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent quote 7",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 202,
        "receipt": {
          "id": "c1357ed240940f17c96abe073aff86c101b06679f0e511ea45a37de28a61ea18",
          "request_id": "01a08e27-9951-74f3-9ee3-a1415ad5cd1e",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091356,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "ab4105ced848a455e78ba08aef7f1251dd3947f39cce68f60e205ec11567eb25",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "4d8fcf097fef4aae26d644af2020d2485ab61f0e96b5e9d68888f05c1f187825",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "31aa327b448dcc24b1fb15d3b512f4cb83d0ea235892e8eedbdcd7ab7d9d21dc",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "8a17cf0bfc6432c03d2054a1e684b764f38ccad462c1ccda74bfa3491af52b01bc069f0b6a5eae36b5ff546d70526381d6ade1125ee84b9fcd580fb62825f805"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "request_id": "quote_req_c84570baa6",
          "status": "quoted",
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_5ba7e3db61",
            "request_id": "quote_req_c84570baa6",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_5ba7e3db61",
                "request_id": "quote_req_c84570baa6",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "d4c8cc565e0a28fb90e90ba216b13edca865b203068aabf97a688a5e06213f12",
            "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e",
            "arguments": {
              "request_id": "quote_req_c84570baa6",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "d222f2345fdd5260489c1de660dbe8d31a5b9d84828307d8bcccd612e2e3f9fb",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_c84570baa6",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "ed7df2fedcd07f17aabc7dc685c7cef768bdc34c49c6f7905298b166541b3410",
              "decision": {
                "verdict": "allow"
              },
              "id": "d4c8cc565e0a28fb90e90ba216b13edca865b203068aabf97a688a5e06213f12",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "9013afa4a1917487f2711040499191cb1aae2f139f8a73ba9c90896746f34baa",
                  "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                      "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "f9e3846dd1373b5851d520c7880228d371c89f1686c0af3386a0f1970d1d9c9e",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091355645
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-9c52-7d83-92d0-c6e2574b9ccc",
                "receipt_context": {
                  "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "8ed43bdda49a70db207770099df253cffb982980b0d0390c1a6bc3abf7df6dbf99edc4e63285e4c0252d5e2343a1b21c82fb6f220ceee89f1bc81f689fa7a008",
              "timestamp": 1789091355,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "ee8de283dab83acffda32ae89b02a4b8fffa7e9e2d2e9b0d044f81fd343c8a32"
        },
        "body": {
          "quote_id": "quote_e4e28430c0",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "3e3149ee8a302c5a9b379b7cdd9047f621a2d4fb19d14e32df00e7e15f29f8a1",
          "request_id": "01a08e27-9f84-7a42-993f-22639ec42c7c",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091357,
          "content_hash": "1a97a73486c98c7161d45363527ad6ebc1e36b6b4dd6c9ca6dda4b1f4ba40364",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "a4ac65210661343f8cd515e65a98a8415331ff80433df2a3a24222ed27a387ef",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "22866270289c15a09d69c927864a25dafa8ffc744327d773ed7a0699638c2247",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "651334799b0d8115036b3e1ba3f662896120ddd7de023b12c53e44657855609e",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "953f60e994024bb788cfda1790844ee9175c3be727e37c5d6e3ad71bbd8e4a4d8c6b8c2f4dc77a8e045684f90daaf5abb268533fa0cf240375bca0b93d46f70d"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_0d4b46ad56",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_e4e28430c0",
            "request_id": "quote_req_c7290cceff",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "denied_budget",
          "approval_required": false,
          "approval": null,
          "fulfillment": null,
          "fulfillment_trace": null,
          "settlement": null,
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_e4e28430c0",
                "request_id": "quote_req_c7290cceff",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "ef7a465cd20f37e89cd19e9fa79e65652e59dbbef2a3fc21583366f8844525b4",
            "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba",
            "arguments": {
              "request_id": "quote_req_c7290cceff",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "c554fa4288be897ed7b7062d154ce0c5861af01c05af169cb2f54149b17d959f",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_c7290cceff",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "23434c4124cfe727eb02fad3ee9880c0a46f5b2f58ec9ed8a9fef16b4c993782",
              "decision": {
                "verdict": "allow"
              },
              "id": "ef7a465cd20f37e89cd19e9fa79e65652e59dbbef2a3fc21583366f8844525b4",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "2f076d2beb59fb9fa219e06f19edc65702527435dfc3a1c4e352f2bdfd102576",
                  "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                      "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "e4a6dbece9a930b5d1870667cfffbdcdfa0f5823e0dd39c95b902251ebfe6bde",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091354232
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-96d0-7bb2-a9a0-b4c6941b57d2",
                "receipt_context": {
                  "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "d364b047bd572e2b5dbb41da7b8ab6dccee8b2171773e4800eefff44b8ade24edfa4d34f34f5c9e938aac64d8066a4bd0d6b4920b3bdc80733286cbbe7219106",
              "timestamp": 1789091354,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "denial_reason": "Quoted work exceeds the requested or remaining operator budget"
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "ee7e598e195e94c89c984b0c066a462289195b284a8d6c536dd7c0259947aab1"
        },
        "body": {
          "quote_id": "quote_141fa1c3c2",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "608ded7f742ec8f4a72c7d92d417fbc636c68752c8b1629792d3f5f2b284faba",
          "request_id": "01a08e27-9f2e-7050-b12d-b39adaf9b7a6",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091358,
          "content_hash": "e1bced69434e2740d4b9d16f089f6a0ca7c629b60adacb5d451862b654d22d6c",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "45e052bf91a19a51ad982877fe9cb3669ae3115a989a01f9ac148134b6f8777b",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "e8ce8074aeda47d945883743b6b2153ed40a9bf23831d0cd9f71f276fe97a92c",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "61a0d5f3ac9c7944f35c46e337c0091e32cf5ea9b4d27a8d2ed0ae9deb1d0686",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "212d76199145be93ce11c23aec3dd3c162b479a281c8bfa033c30b504def97a17137ea39f3ba53ac7caf9202bff57cdf9a047881c73ec90e6a16ffa2432bcc07"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_54a383342e",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_141fa1c3c2",
            "request_id": "quote_req_156b38fb30",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_54a383342e",
            "input_sha256": "6a329b33101682dfc6c61fcbe2222a1f9b54e6be7ea39c26e10598b36572f26d",
            "job_id": "job_54a383342e",
            "quote_id": "quote_141fa1c3c2",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_54a383342e",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_54a383342e",
                "input_sha256": "6a329b33101682dfc6c61fcbe2222a1f9b54e6be7ea39c26e10598b36572f26d",
                "job_id": "job_54a383342e",
                "quote_id": "quote_141fa1c3c2",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "3055f73186a8e2028e73230ee8279e4fce835d99aa4037390f619ea218502ae8",
            "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2",
            "arguments": {
              "job_id": "job_54a383342e",
              "quote_id": "quote_141fa1c3c2",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "99c79ee09867f26585857710b9f14fcdad491ea37ff79aeba8365b0912f06a80",
                "parameters": {
                  "job_id": "job_54a383342e",
                  "quote_id": "quote_141fa1c3c2",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "8323ffefe3b59710403efe882a232ad07f149b088cdb08683a322e4656efb302",
              "decision": {
                "verdict": "allow"
              },
              "id": "3055f73186a8e2028e73230ee8279e4fce835d99aa4037390f619ea218502ae8",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "060faf37cbdcb6bd3f392ff320299b8626cb8e54dd084415578633b88213897c",
                  "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                      "operation_id": "c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "4ec7d63c3da2c88a5ccdba50004769694f73768b6fc2eb67ded7e1a607534c01",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091357660
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-a432-73f2-bb98-fc61ccbed236",
                "receipt_context": {
                  "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "3cc0c4dfb48191638237b80e9a6e6b953dba3dd3de3e0d209b276300af2d76aae8a843b83e3ee44362f01f9455ccfd2d9d7837ff171e2b0e629887654f03070c",
              "timestamp": 1789091357,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_54a383342e",
            "job_id": "job_54a383342e",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 15000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_141fa1c3c2",
                "request_id": "quote_req_156b38fb30",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "be2e3d8b16f3ddeecd897bd131b0965f5351cf8151f05e2628cdb39476b6491d",
            "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731",
            "arguments": {
              "request_id": "quote_req_156b38fb30",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "a43a47a4ebd1c1016703f41b52f1a9a73e6b5131cb227b4bb648f184206cce3d",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_156b38fb30",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "1ec28266b3baaed79cad1b99f9be52732bc9ddf4f823bb6e2c576b659ee1bea2",
              "decision": {
                "verdict": "allow"
              },
              "id": "be2e3d8b16f3ddeecd897bd131b0965f5351cf8151f05e2628cdb39476b6491d",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "c829fffcab83ae84f7138239f0a4d3b8bc1873098584d4e7142aca962c0a2971",
                  "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                      "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "aaa6484b7d97609677702f5ff64d81151db6ebbdb204a3781e42cefddcfd8ccc",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091351399
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-8bcb-7bd2-9195-1ef14720231b",
                "receipt_context": {
                  "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "be799bd6e1141f6d42b4aae8ecabcca171cefa6dfbc698da229755aa9e9c52507c181e200d17d13340df2626c2cb0178562b561a2206558550486faefee5cf0e",
              "timestamp": 1789091351,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "13c44efe472287f49bc40689d7e6dbb3e407e537a3c18f34da4085d8b99838dd"
        },
        "body": {
          "quote_id": "quote_5ba7e3db61",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "5fe5e057d65ff5c2d469e0e3d3c967b691ff23575421a78dd1c47bf3b49758d9",
          "request_id": "01a08e27-9f32-7211-a9cb-4646c99e970d",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091359,
          "content_hash": "0a95a33479bdab8489ea5c24a37ca08a38ff4e5f4848c4f4288f4d0e775aa266",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "00816c5e913489d0c713ce3530d756c4aa1be155c76103374efec01d08bcb540",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "7566b36fc0b1e83e3d069d9950192929afa6a8f6a381b61def69345eddaf932e",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "2fb14195c329f39cef833308fef2490a811eef6d8fc8129fe7d8f6a8a0b96bc9",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "f886f67beba90312fafeb678d6e9ca126832411bccc146bf193d92ba9ef7994ebd3ad6418c0fe72cb8df379505ce67c324c35404b7ce4360a4b5b119f0d0ae0a"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_639d7e82a4",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_5ba7e3db61",
            "request_id": "quote_req_c84570baa6",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_639d7e82a4",
            "input_sha256": "b444e924567f1544684b02bcb7388250edfcbcecb1aef442e0af1fec44944f6c",
            "job_id": "job_639d7e82a4",
            "quote_id": "quote_5ba7e3db61",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_639d7e82a4",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_639d7e82a4",
                "input_sha256": "b444e924567f1544684b02bcb7388250edfcbcecb1aef442e0af1fec44944f6c",
                "job_id": "job_639d7e82a4",
                "quote_id": "quote_5ba7e3db61",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "77abc6c04ffbbaffc5557211876845acb45ebe5ed2466e9995e5b5b5b9c67308",
            "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5",
            "arguments": {
              "job_id": "job_639d7e82a4",
              "quote_id": "quote_5ba7e3db61",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "613b0d0270d17b283fa66560fc28835ff454cdd233d5570b01c7670385f74bf3",
                "parameters": {
                  "job_id": "job_639d7e82a4",
                  "quote_id": "quote_5ba7e3db61",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "c89e6e4569720920a510a7b8378320736c720a62ae631018223e629920c622e5",
              "decision": {
                "verdict": "allow"
              },
              "id": "77abc6c04ffbbaffc5557211876845acb45ebe5ed2466e9995e5b5b5b9c67308",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "215e26e5433fc81c772c6e7e88efd3be8d92bcc78a650a6602ee04ed07904237",
                  "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                      "operation_id": "f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "83466aec5718f9d4b5f02df756281864367776750de0cf0b80f5867e3cd0f581",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091358774
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-a88e-7c41-9090-10c143b9868b",
                "receipt_context": {
                  "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "326afde04ac907027a6eb3d7b8a01c7a083454c77749acb3ebf62672c820ab5e7c3a0afa08d23abb56025e21a64b4292b8c204f6248d4fa79942021950a2640a",
              "timestamp": 1789091358,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_639d7e82a4",
            "job_id": "job_639d7e82a4",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 15000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_5ba7e3db61",
                "request_id": "quote_req_c84570baa6",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "d4c8cc565e0a28fb90e90ba216b13edca865b203068aabf97a688a5e06213f12",
            "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e",
            "arguments": {
              "request_id": "quote_req_c84570baa6",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "d222f2345fdd5260489c1de660dbe8d31a5b9d84828307d8bcccd612e2e3f9fb",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_c84570baa6",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "ed7df2fedcd07f17aabc7dc685c7cef768bdc34c49c6f7905298b166541b3410",
              "decision": {
                "verdict": "allow"
              },
              "id": "d4c8cc565e0a28fb90e90ba216b13edca865b203068aabf97a688a5e06213f12",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "9013afa4a1917487f2711040499191cb1aae2f139f8a73ba9c90896746f34baa",
                  "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                      "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "f9e3846dd1373b5851d520c7880228d371c89f1686c0af3386a0f1970d1d9c9e",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091355645
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-9c52-7d83-92d0-c6e2574b9ccc",
                "receipt_context": {
                  "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "8ed43bdda49a70db207770099df253cffb982980b0d0390c1a6bc3abf7df6dbf99edc4e63285e4c0252d5e2343a1b21c82fb6f220ceee89f1bc81f689fa7a008",
              "timestamp": 1789091355,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "4af98cc9e427817377c4e7fd5b2ccfa16d6790bbea8538e838a4786c77862dac"
        },
        "body": {
          "quote_id": "quote_f1b037137d",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "492ac2b0367f5982705fa3e9d32bf3f76bdf3d9a3147c917ad47f1d66e77758d",
          "request_id": "01a08e27-9f21-7db3-8369-be46919be1a2",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091360,
          "content_hash": "9bb6d3b6fa62996442efca354e7274e0bcd128ec24082e78a2b358d0d5e06367",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "8f4cd8ce5c9e175ba18b848f060ce014131d3b2ed8398e2419060f4a031e7d3d",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "841076e3bf54ec4a5c78086d91f1d0131bfef9c59b5bf94cc0bb45495610f177",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "984b22aac9d6bc6396680de210f7551eec34c192f0643eb3589e5d08beebc8dd",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "374262c8476c514923ae817ca09b86f62b5924b650f5358653df0c2e5515052f4652672ba6a5fe6703bfc80686efa0776f399c1a382781b32e4476d0d019b005"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_34f8232563",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_f1b037137d",
            "request_id": "quote_req_67610f73d1",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_34f8232563",
            "input_sha256": "7184999c44ae9e3c78561a4a23fff7b3caab10e8f6b9b621bd8977bd5c93faec",
            "job_id": "job_34f8232563",
            "quote_id": "quote_f1b037137d",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_34f8232563",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_34f8232563",
                "input_sha256": "7184999c44ae9e3c78561a4a23fff7b3caab10e8f6b9b621bd8977bd5c93faec",
                "job_id": "job_34f8232563",
                "quote_id": "quote_f1b037137d",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "51fb76189b8afcca2565e202472396889b167a0708f0b84ccc6223f79d705485",
            "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c",
            "arguments": {
              "job_id": "job_34f8232563",
              "quote_id": "quote_f1b037137d",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "67aa324bdb1e5e0f4a0482f94558ad07864ab825cfac9c95117fbe53f04c0121",
                "parameters": {
                  "job_id": "job_34f8232563",
                  "quote_id": "quote_f1b037137d",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "4a9cf157b4c67dee22adca2419b9dcc04dbde7837639be055631d2666714841b",
              "decision": {
                "verdict": "allow"
              },
              "id": "51fb76189b8afcca2565e202472396889b167a0708f0b84ccc6223f79d705485",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "f2c1894fc5d68b5dcb51b6d21fb116d0f54bacd9bc0b38af03ccb474ff6ee1bd",
                  "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                      "operation_id": "4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "3cfe9459c280d217e78d5a906f2224d33cd2b43a092e99ea2836890e498599db",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091359980
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-ad48-7d83-bf6a-8ca3ededf496",
                "receipt_context": {
                  "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "99c7d62aeabd5379c1e0fd3a1581eb72c289a1a837e3785d1b13b8a5d2c2cc33743214cf46cdb98a29b1f033fc387faa5a875902959494251b68b33643c2ba00",
              "timestamp": 1789091359,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_34f8232563",
            "job_id": "job_34f8232563",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 15000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_f1b037137d",
                "request_id": "quote_req_67610f73d1",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "566ab5eedfd95e2f14e4aadecdb9dce8655dd992b28bba539f2b0cfe8bd5584b",
            "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12",
            "arguments": {
              "request_id": "quote_req_67610f73d1",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "7335e20e8d0f98c14c3a19103f08b598c5bc35b0281bb137b4fc27a3480a716f",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_67610f73d1",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "3dff5ef3f7063c36058009d1b5be135094eb495fbee535d3aa46307bcc1823f9",
              "decision": {
                "verdict": "allow"
              },
              "id": "566ab5eedfd95e2f14e4aadecdb9dce8655dd992b28bba539f2b0cfe8bd5584b",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "d092973fb562f8dd52402c9f955c702b774e7f9a3a52ca9e40e59d87ccde4a25",
                  "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                      "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "2cfe6df319f2bfc5f4f45c3efc5979fbddff1fec688cb468853d56629310fb58",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091346252
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-77a1-7f93-a21a-7ecc1e36b880",
                "receipt_context": {
                  "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "5dbedfad4fc6f1def1a62bc7d409f02f6f694c74e630ad17471ab6745da6985f60668e1de15cb776f905a9a7051fa8278410f44eb10d23c4349104b110f09c04",
              "timestamp": 1789091346,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "0e6ed2bee0f452e9947d71cd30a372def1bcd9b34490c18b5525bb7866dde7f3"
        },
        "body": {
          "quote_id": "quote_079c10b451",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "3ea30e353dedb58786e9a339aada27a34b0965af173af45d8dc58a5bbf3cb68a",
          "request_id": "01a08e27-9f4f-7611-b08e-a16d56e27375",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091361,
          "content_hash": "6e397c8aab581ca898acee5ce277574e22694107d0632d43e5b2007e775ce821",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "fdd54a512bb5d09bdc8e847d1ce9b453f81ce874ce86c08fb4d131b72eb46f07",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "10e297fb7262673f0be1ce80297f430d731029e86a6cee240e26dd0ee71430ce",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "61bd46275d98b5c463107d93c570168ee2f50702ab86832239c082bba65eff51",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "849817ce777ae2f7ddcae140ad38156009c9b6b70a64eb6daddf9ef812e99bac72c2716a4f8ec6bde98142386ff777075900bb5671937437a1fec8b995fcf308"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_05cff51adb",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_079c10b451",
            "request_id": "quote_req_197c3b32c0",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_05cff51adb",
            "input_sha256": "61671faaf2261be895d2adf50ed7e47d5a04e77f96bf06c57e55886dad92007b",
            "job_id": "job_05cff51adb",
            "quote_id": "quote_079c10b451",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_05cff51adb",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_05cff51adb",
                "input_sha256": "61671faaf2261be895d2adf50ed7e47d5a04e77f96bf06c57e55886dad92007b",
                "job_id": "job_05cff51adb",
                "quote_id": "quote_079c10b451",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "364f567d89de071d7aa4590de721719633aa8b2eae7ff7c85eb23fc4ac867895",
            "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001",
            "arguments": {
              "job_id": "job_05cff51adb",
              "quote_id": "quote_079c10b451",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "1d60a307dbd191ce765e1d91c4091a5983989b70089b78d86267efbbdf754ffd",
                "parameters": {
                  "job_id": "job_05cff51adb",
                  "quote_id": "quote_079c10b451",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "8bc1662271e7154f4c962836f92138da6437fc210f84006eee2ebe6cbce65869",
              "decision": {
                "verdict": "allow"
              },
              "id": "364f567d89de071d7aa4590de721719633aa8b2eae7ff7c85eb23fc4ac867895",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "951fe3ee32a6193b8e37e18665605bba847c34155eedc88e5e42718f4c1185cc",
                  "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                      "operation_id": "f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "06e89dd30bda4313af8fe63b966f579de68277cf99e5786e1e65f94b65c9aa83",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091361170
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-b1e6-7201-b61f-75ba599c8a9d",
                "receipt_context": {
                  "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "663599813ff446667bb92ef474fcef021116c84f908019377f929410fdb8456a4a0e828a304732ec91a43c1660d407dadd652b2ac0761fab749a43678043c809",
              "timestamp": 1789091361,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_05cff51adb",
            "job_id": "job_05cff51adb",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 15000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_079c10b451",
                "request_id": "quote_req_197c3b32c0",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "051798951db66bdfaa754a456894b9c5f6a185b11fc2988b77c1459f9713314f",
            "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44",
            "arguments": {
              "request_id": "quote_req_197c3b32c0",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "9df5d9e870b5c74d5396659fc6e2e0babea1e086004f7d3486f8f2c1fbdbef25",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_197c3b32c0",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "c28b90f4aa1b6ca33bf9b0bef98b9b4ebb6049d15b37202f7b08a09a91d87333",
              "decision": {
                "verdict": "allow"
              },
              "id": "051798951db66bdfaa754a456894b9c5f6a185b11fc2988b77c1459f9713314f",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "e02f65f380a9b4025d0b394115058dd39c3f9b8c169e297650316d0f3cedf318",
                  "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                      "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "0ab8eea2a546974173f6238a717a23219ec48e33fc44bcac49a98da8c53a81d0",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091348741
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-815c-7a21-99df-7f1d604ac407",
                "receipt_context": {
                  "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "a94adad09d94d732b7f09b343e45c90aa64eeedf4c193ef3d2ffabfb9598dca5c4400000b5cc84e1fb9127e94238e6253b859eda2cd8f143ce958b185186480b",
              "timestamp": 1789091348,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "fe72c2b42c61303113774f9a5fb1f41a923be515d6efeb79069f01b1af0399ec"
        },
        "body": {
          "quote_id": "quote_10fe91f8c7",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "ad17eb37db97cf99fc949748e9a005815d45f0cbb72566d71e8a45851d0abd44",
          "request_id": "01a08e27-9f2c-7f60-860d-2e9f8068a4b1",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091363,
          "content_hash": "dc4dbc4d4e0698a9dd709498519d24d215f1fcbc60ddd5650dbd118781ac6fa1",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "973c70f90ccde3b8d240f55049eff7023e89111cb5f14d44680dc7436b65ff65",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "2b4bb44c9d070e482301b3066a68c30fd4fae209d81ca3663d2625d0e505fd8e",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "f1220e458b3930bc08519eafb40568fecb4e970863468420938b9e28e2fff54c",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "a9bdfc8777d53709621395cc2a56b97e3f6e5e762825f01ad9bb9f455fe1413831d8a5c6d1935117665a3c8005d90ef101a838dc1662933cde13ed2b339ed70d"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_1b7ddbde21",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_10fe91f8c7",
            "request_id": "quote_req_16f6fd547e",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_1b7ddbde21",
            "input_sha256": "9d5d06352c7a549ace3b3e6996cc9d4a4992564401f8a51e26eb81511e9afdc2",
            "job_id": "job_1b7ddbde21",
            "quote_id": "quote_10fe91f8c7",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_1b7ddbde21",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_1b7ddbde21",
                "input_sha256": "9d5d06352c7a549ace3b3e6996cc9d4a4992564401f8a51e26eb81511e9afdc2",
                "job_id": "job_1b7ddbde21",
                "quote_id": "quote_10fe91f8c7",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "7576c26c6ad4f90d1c0fb3f3f3078dce834cc24fd1302adcce9be0e6d0c9ad87",
            "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611",
            "arguments": {
              "job_id": "job_1b7ddbde21",
              "quote_id": "quote_10fe91f8c7",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "8b5a3130ba3d4de4d2be8f009ca3c19b7302276b83eeb3aabc6067ad33882484",
                "parameters": {
                  "job_id": "job_1b7ddbde21",
                  "quote_id": "quote_10fe91f8c7",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "fbbee0012dbf59b4f002b562d9790dcea6e126ec7c12bb8315494ab5effb6d2d",
              "decision": {
                "verdict": "allow"
              },
              "id": "7576c26c6ad4f90d1c0fb3f3f3078dce834cc24fd1302adcce9be0e6d0c9ad87",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "51d036e76c0f1f520817c403d2bff336826efa72f59f27ba3df9dc6be4f087f1",
                  "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                      "operation_id": "2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "188812f78d326e09f7720d7677e3c628564bd2658c70c0a9f0223a1bf3f727d0",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091362403
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-b6b8-7af0-836f-66ec0d0ae0f7",
                "receipt_context": {
                  "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "f0b7637b8baa03c3615cd54e5d94911c2bfe9928bc8999c0bc243833f7cccdae8819af4af6998ea4e9d4ab458d81ad05b153557a520c65f33a6554b73f89500b",
              "timestamp": 1789091362,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_1b7ddbde21",
            "job_id": "job_1b7ddbde21",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 15000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_10fe91f8c7",
                "request_id": "quote_req_16f6fd547e",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "9cb23baf9e9d8aa9b5b854c57c60dd5cbb84bbcffb2f2cd8d5e2fb68fae86fa4",
            "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285",
            "arguments": {
              "request_id": "quote_req_16f6fd547e",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "2c0aece9efe24f43d475891fd78f20373d6bb22946c622f233304f6943042107",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_16f6fd547e",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "ad6000cda8e7c8ab3d1450510be0d67472a3c5d13892a3b64f5d66943b9ec78b",
              "decision": {
                "verdict": "allow"
              },
              "id": "9cb23baf9e9d8aa9b5b854c57c60dd5cbb84bbcffb2f2cd8d5e2fb68fae86fa4",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "75c8d4c7308cb0005d480ed2b8ff1aedc57c21fe84254502e10fa4a132559b97",
                  "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                      "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "908d4d5249f3cb2b9320499bb09a8e5f7679936fe02a86a3e737a7cc67c9259a",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091347493
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-7c7c-77d3-b697-5f3f37104f23",
                "receipt_context": {
                  "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "cd6bf841f3593b3bb17e04bf5ee5f40efe6a1ba786126a1b52e1e8cee080384f6162909f10d0349913e5759850bdb15893f5991f83a1d590c40589fddc31b109",
              "timestamp": 1789091347,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "d32e4b0141a3498d2d266311fb7e4961ccc80a289d452df47c3f6412272aacb0"
        },
        "body": {
          "quote_id": "quote_ce119eacd0",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "d8007df7ec1120cb6392eedcda7a17fcbb6b5b2ce3364d464c867bb658d160ad",
          "request_id": "01a08e27-9f72-7273-af6b-feffa168814d",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091364,
          "content_hash": "df9859ea687fadc20bb838422c98dc8fb5b7e993ab457eb9affb78cb99c7821c",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "5ca3e815a5f91eb699925827ab73211b86e41a64b94cb028ef84cf148fc8ba46",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "e49496166131036a272bf0d7dc4c72257cc897e1faafa407497793f777440f0f",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "33dceb95eb84df61dae8fa7d760684e70f1101f7b7943b09fb890093c7e365be",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "11b5144015a7e9390735bf060030955829a57d3e92b62c9548741bde32b2c2e580174069ef434065d1ff01da38dc29b19b0fb52e06cb5b60b7bf731d6d3dc001"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_6752f2eb87",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_ce119eacd0",
            "request_id": "quote_req_2a71107508",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_6752f2eb87",
            "input_sha256": "53fbb4ac1c93674738d54a391fd5a3bd85988508093ecabd8265fe824f24c2a6",
            "job_id": "job_6752f2eb87",
            "quote_id": "quote_ce119eacd0",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_6752f2eb87",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_6752f2eb87",
                "input_sha256": "53fbb4ac1c93674738d54a391fd5a3bd85988508093ecabd8265fe824f24c2a6",
                "job_id": "job_6752f2eb87",
                "quote_id": "quote_ce119eacd0",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "fd8336c9ee17a71381a6bc0fef2da6bd1f8ac81d260229a9ba1cd9fa4d24866c",
            "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc",
            "arguments": {
              "job_id": "job_6752f2eb87",
              "quote_id": "quote_ce119eacd0",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "22efc7a98e127e4497aeb688ef11095fc751c248e54647df7105b3ca68f9fc53",
                "parameters": {
                  "job_id": "job_6752f2eb87",
                  "quote_id": "quote_ce119eacd0",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "da1d6464bd8b92d439125c111d0551c4465e1fad6775d9e3a13fe054c0061dd1",
              "decision": {
                "verdict": "allow"
              },
              "id": "fd8336c9ee17a71381a6bc0fef2da6bd1f8ac81d260229a9ba1cd9fa4d24866c",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "51fc9b756a460573e43a600f7a6faaad6b40aa3ea9acc405434f50f98ffd1141",
                  "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                      "operation_id": "4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "cc7f88d6e2e6862db6a9eb3892d2459aaa9a270378f9d1e970b78b2aaa5153dc",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091363687
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-bbbd-7510-be4f-fb4e9ec6fc84",
                "receipt_context": {
                  "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "389b7d2a7b6f94da4cfc824cfe4d936a210905c69108f3bf446e16ebfa977a56b5a5a56a6acad5510393170725e71ccd054c1d9ba8afdfbed2e5576d68251505",
              "timestamp": 1789091363,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_6752f2eb87",
            "job_id": "job_6752f2eb87",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 15000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_ce119eacd0",
                "request_id": "quote_req_2a71107508",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "48aafd4ffe3020a1db2aa9e7a15b45f096c18c7fd03a77cb6923508499ab6739",
            "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d",
            "arguments": {
              "request_id": "quote_req_2a71107508",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "84bf1a212dc84a904c47b9ca4a26a43c3dfbf7e7b6e77aceae4b2cf6830039ad",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_2a71107508",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "ab823136e281aa82d6d988ec7422cce4ed3614fe339f47428a1947b41aab4ffd",
              "decision": {
                "verdict": "allow"
              },
              "id": "48aafd4ffe3020a1db2aa9e7a15b45f096c18c7fd03a77cb6923508499ab6739",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "f701beafd1eb89667b38a7bc3ce1c41c5356113a14ed2722261d6d35622cee9b",
                  "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                      "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "8285c5bedd77756b3c4fac8892b3e57e467694f472e1f407e2016946969c1bae",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091350040
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-8670-7a11-9546-c7e809591828",
                "receipt_context": {
                  "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "4b9a16530f3212cf439e0f62a6b4ea1ddf6331e620d4f617470f38bbb2e12ed1ddb9850bcf68511a6150037caba35d92af839f3a61313b0abfdd3dc10f365a0a",
              "timestamp": 1789091350,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "concurrent purchase",
        "request": {
          "method": "POST",
          "path": "/procurement/jobs",
          "query": {},
          "route_pattern": "/procurement/jobs",
          "body_hash": "83dc16ba674db05b12a7d5e7b3924eae0966fa442b926d0cddb621ef5445af31"
        },
        "body": {
          "quote_id": "quote_f05bcf82e2",
          "provider_id": "vanguard-security",
          "service_family": "security-review"
        },
        "status": 202,
        "receipt": {
          "id": "478dcf6d81d1b837eaa8ddec8bd18c9771d0257936f299301bbb5ef1d55aa276",
          "request_id": "01a08e27-9f62-7130-af45-52d97320660c",
          "route_pattern": "/procurement/jobs",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "CapabilityGuard",
              "verdict": true,
              "details": "valid capability token presented"
            }
          ],
          "response_status": 202,
          "timestamp": 1789091365,
          "content_hash": "6dbd80046f701ea6f555023157a7e77705e3c598f3df1d1e1a0c5ded3c3a0e19",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_decision_receipt_id": "3bea2f5a1d99dc2ac70e4d7e792da3979ebae0aa034841a29f5913169d8c58ee",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "7ea6e5f96d18051c73211310513ead9058171aabcfb95bf61b609df5a1b0873f",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "b81c174de358cef07044c869a8364265b939418b57aa0471f102b8a3df182773",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "4ac91e37af746c6cb8c51756c07e35f2e02ef8d38fee07778f91531f84a8aba7539e39ed09b95e3372d4634b87272f02929ae688aa6c16ab51a3b23a9a26ba0e"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "job_id": "job_b4939190b9",
          "buyer_id": "lattice-platform-security",
          "provider_id": "vanguard-security",
          "service_family": "security-review",
          "budget_minor": 500000,
          "quote": {
            "approval_required": false,
            "checks": [
              "python-call-patterns"
            ],
            "currency": "USD",
            "estimated_delivery_hours": 0,
            "max_bytes": 200000,
            "max_files": 10,
            "offer_id": "hotfix-review",
            "price_minor": 45000,
            "pricing_basis": "bounded hotfix-review for payments-api",
            "provider_id": "vanguard-security",
            "quote_id": "quote_f05bcf82e2",
            "request_id": "quote_req_04aa377c27",
            "service_family": "security-review",
            "target": "payments-api"
          },
          "requested_scope": "hotfix-review",
          "target": "payments-api",
          "release_window": null,
          "status": "fulfilled",
          "approval_required": false,
          "approval": null,
          "fulfillment": {
            "artifacts": [
              {
                "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                "name": "findings.json",
                "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
              },
              {
                "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                "name": "executive-summary.md",
                "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
              },
              {
                "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                "name": "remediation-checklist.md",
                "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
              }
            ],
            "checks": [
              "python-call-patterns"
            ],
            "deliverables": [
              "findings.json",
              "executive-summary.md",
              "remediation-checklist.md"
            ],
            "fulfillment_id": "fulfillment_job_b4939190b9",
            "input_sha256": "b50acdc9aad230fb088dafb6564da9a79f2f305e2b8eb55eb4c3b515d0085dac",
            "job_id": "job_b4939190b9",
            "quote_id": "quote_f05bcf82e2",
            "requested_scope": "hotfix-review",
            "service_family": "security-review",
            "severity_summary": {
              "critical": 0,
              "high": 2,
              "low": 0,
              "medium": 1
            },
            "source": [
              {
                "bytes": 325,
                "path": "review_input.py",
                "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
              }
            ],
            "status": "completed_with_findings",
            "target": "payments-api"
          },
          "fulfillment_trace": {
            "tool_name": "execute_review",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "completed security-review for job job_b4939190b9",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "artifacts": [
                  {
                    "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                    "name": "findings.json",
                    "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                  },
                  {
                    "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                    "name": "executive-summary.md",
                    "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                  },
                  {
                    "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                    "name": "remediation-checklist.md",
                    "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                  }
                ],
                "checks": [
                  "python-call-patterns"
                ],
                "deliverables": [
                  "findings.json",
                  "executive-summary.md",
                  "remediation-checklist.md"
                ],
                "fulfillment_id": "fulfillment_job_b4939190b9",
                "input_sha256": "b50acdc9aad230fb088dafb6564da9a79f2f305e2b8eb55eb4c3b515d0085dac",
                "job_id": "job_b4939190b9",
                "quote_id": "quote_f05bcf82e2",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "severity_summary": {
                  "critical": 0,
                  "high": 2,
                  "low": 0,
                  "medium": 1
                },
                "source": [
                  {
                    "bytes": 325,
                    "path": "review_input.py",
                    "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                  }
                ],
                "status": "completed_with_findings",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "36301f6b7b885e4df662f39b421c916912bbe291bd2f795b42f4a80f397c4b2c",
            "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c",
            "arguments": {
              "job_id": "job_b4939190b9",
              "quote_id": "quote_f05bcf82e2",
              "service_family": "security-review",
              "requested_scope": "hotfix-review",
              "target": "payments-api",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "04bece28d275d38fe2c3e13b4d37fd91ae9b7857fe752747bc7b800dcc853ce8",
                "parameters": {
                  "job_id": "job_b4939190b9",
                  "quote_id": "quote_f05bcf82e2",
                  "release_window": null,
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "c079260f73ab69d480488718d666d80504f7c9f82467603517465d40f04b0355",
              "decision": {
                "verdict": "allow"
              },
              "id": "36301f6b7b885e4df662f39b421c916912bbe291bd2f795b42f4a80f397c4b2c",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "3914305a74bcb9752964f614561b3b85078a090ac33ad8ff3bd9ecbb7c27d65d",
                  "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                      "operation_id": "bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "e789c5e7c501db79b53ceace4d4ed5e21508cd615b9b6ef4107d2eae139c3438",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091365017
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 1,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-c0ef-71c0-b487-634921ca791e",
                "receipt_context": {
                  "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "bc2e2d0638612177830b4dd972b26d1ea0d214b1b9f67c6ee1a29c60588a023da23b70e8f8fbf93eca380e7a2c00f6172b3e8db4deec17260d165946af7bb90f",
              "timestamp": 1789091365,
              "tool_name": "execute_review",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          },
          "settlement": {
            "settlement_id": "settlement_job_b4939190b9",
            "job_id": "job_b4939190b9",
            "quoted_amount_minor": 45000,
            "approved_amount_minor": 45000,
            "settled_amount_minor": 45000,
            "currency": "USD",
            "status": "reconciled",
            "settlement_kind": "internal_book_entry",
            "entries": [
              {
                "account": "lattice-platform-security",
                "amount_minor": -45000
              },
              {
                "account": "vanguard-security",
                "amount_minor": 45000
              }
            ],
            "buyer_position": "accepted",
            "provider_position": "accepted",
            "remaining_budget_minor": 15000
          },
          "disputes": [],
          "quote_provider_trace": {
            "tool_name": "request_quote",
            "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
            "capability_ids": [
              "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
            ],
            "result": {
              "content": [
                {
                  "text": "quoted security-review at 45000 USD",
                  "type": "text"
                }
              ],
              "structuredContent": {
                "approval_required": false,
                "checks": [
                  "python-call-patterns"
                ],
                "currency": "USD",
                "estimated_delivery_hours": 0,
                "max_bytes": 200000,
                "max_files": 10,
                "offer_id": "hotfix-review",
                "price_minor": 45000,
                "pricing_basis": "bounded hotfix-review for payments-api",
                "provider_id": "vanguard-security",
                "quote_id": "quote_f05bcf82e2",
                "request_id": "quote_req_04aa377c27",
                "service_family": "security-review",
                "target": "payments-api"
              },
              "isError": false
            },
            "receipt_id": "4b026798f40a5e24d8fa1d4e44a64e690365d7d13afa8c3fc8ce3799f53a17c3",
            "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7",
            "arguments": {
              "request_id": "quote_req_04aa377c27",
              "buyer_id": "lattice-platform-security",
              "service_family": "security-review",
              "target": "payments-api",
              "requested_scope": "hotfix-review",
              "release_window": null
            },
            "is_error": false,
            "edge_base_url": "http://127.0.0.1:44539",
            "receipt": {
              "action": {
                "parameter_hash": "1fc6987c1e265dc9fb8d97851c0e430aa3f2dd6d5b2b26efd49ab7b3258ad13c",
                "parameters": {
                  "buyer_id": "lattice-platform-security",
                  "release_window": null,
                  "request_id": "quote_req_04aa377c27",
                  "requested_scope": "hotfix-review",
                  "service_family": "security-review",
                  "target": "payments-api"
                }
              },
              "boundary_class": "prevent",
              "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
              "content_hash": "d7e71cfe70f00216bc0984f261769a0b3ae81d8699bbae322765065b8078c405",
              "decision": {
                "verdict": "allow"
              },
              "id": "4b026798f40a5e24d8fa1d4e44a64e690365d7d13afa8c3fc8ce3799f53a17c3",
              "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
              "metadata": {
                "admission_operation": {
                  "compensation_status": "not_compensated",
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                  "projected_dispatch_state": "terminal",
                  "projected_operation_version": 8,
                  "projected_state": "completed",
                  "request_binding_hash": "914982c070d65b4c79ae41d0daa93d9b11d2586230a8d3b343fe1414cb650094",
                  "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7",
                  "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                  "retained_dispatch_commit": {
                    "committed_version": 6,
                    "coordinator_lease_epoch": 1,
                    "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "provider_attempt": {
                      "attempt_id": "attempt:0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                      "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                      "transport_id": "kernel-tool-server:provider-security-review",
                      "transport_key_epoch": 1
                    },
                    "store_fence": {
                      "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                      "owner_epoch": 1,
                      "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                    }
                  },
                  "schema": "chio.admission-receipt.v1",
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  },
                  "tool_outcome_id": "5cd5b7cfbac25671407a47651b4d92c310897d2d3bcce3f563cf6397ade3384f",
                  "tool_outcome_version": 2,
                  "trusted_time_unix_ms": 1789091352819
                },
                "attribution": {
                  "delegation_depth": 0,
                  "grant_index": 0,
                  "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                  "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
                },
                "chio_receipt_signing_nonce": "rcpt-01a08e27-914d-7b40-a0bc-6f6793e0711f",
                "receipt_context": {
                  "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7"
                }
              },
              "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
              "receipt_kind": "mediated_decision",
              "redaction_mode": "none",
              "signature": "f331ccfea4605c73b469200f065b254208476dec7dd2a512412c5148c7909d54808eba2930f5c7ae13e857ad4abc705aa45e63ab986b6ce52c79e0f75b6ea400",
              "timestamp": 1789091352,
              "tool_name": "request_quote",
              "tool_origin": "caller_executed",
              "tool_server": "provider-security-review",
              "trust_level": "mediated"
            },
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          }
        }
      },
      {
        "case": "revoked caller refused before provider work",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 403,
        "receipt": {
          "id": "313a2e7d7f00abbdf35a73d1ab189cc671c1b16e6e3654d09eee20a3810852e7",
          "request_id": "01a08e27-c436-7b53-8a3d-5d496fcdb708",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "deny",
            "reason": "capability token has been revoked",
            "guard": "CapabilityRevocation",
            "http_status": 403
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "response_status": 403,
          "timestamp": 1789091365,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "ecda1e4a9c5be2c572aa750eb9d174fd4e09f9f3364d4c70e550c3fa408cfa5a",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-52ff-7413-a730-3a9eeef41a67",
          "metadata": {
            "chio_http_status_scope": "final"
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "160aeec721528989824464b9d297b3e799629a3d743acc1cdf253e33f38425296b3a03157cf6bd0fd192048b72f71e86d43b031fafc7a8de2ca7fa8f77e96907"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": false
        },
        "output": {
          "error": "chio_access_denied",
          "message": "capability token has been revoked",
          "receipt_id": "313a2e7d7f00abbdf35a73d1ab189cc671c1b16e6e3654d09eee20a3810852e7",
          "suggestion": "request a fresh capability token before retrying"
        }
      },
      {
        "case": "provider unavailable",
        "request": {
          "method": "POST",
          "path": "/procurement/quote-requests",
          "query": {},
          "route_pattern": "/procurement/quote-requests",
          "body_hash": "9a0f199763e0b4e6a50fa0e19d9d327c873d54184ab55cc449701e1465d95842"
        },
        "body": {
          "service_family": "security-review",
          "requested_scope": "hotfix-review",
          "target": "payments-api"
        },
        "status": 502,
        "receipt": {
          "id": "fb42cd66e0ecf1431f90de05a8df187615d8d498a28d05c6757b974370079c5d",
          "request_id": "01a08e27-c53e-79b2-85b7-104226739769",
          "route_pattern": "/procurement/quote-requests",
          "method": "POST",
          "caller_identity_hash": "5a45e80d1ab1a73e8c2644f3f6c6e53974d0a986c2fc86692372d3f130248c9c",
          "verdict": {
            "verdict": "allow"
          },
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "tool_origin": "caller_executed",
          "redaction_mode": "none",
          "evidence": [
            {
              "guard_name": "DefaultPolicyGuard",
              "verdict": true,
              "details": "safe method, session-scoped allow"
            }
          ],
          "response_status": 502,
          "timestamp": 1789091366,
          "content_hash": "9ff7a58455d6f5c91dcb2d687e50441c8f5a9a99d38e64813d8c53685c8215a4",
          "policy_hash": "2067a129ae0ad83239c2c28a0336a2cf0082ef8a61d0f7ee18afa8e2291afdd2",
          "trust_level": "mediated",
          "capability_id": "cap-01a08e27-c447-7470-8951-31debab26cce",
          "metadata": {
            "chio_decision_receipt_id": "e59576b82397043963416dc39032d6cfe7f21a9cf12342d39867d56376730240",
            "chio_http_status_scope": "final",
            "chio_kernel_receipt_id": "7d620bb068905440725dae7ae304e4cbfa933853aead59ca8c53cc8ae5b10a0d",
            "route_selection": {
              "candidates": [
                {
                  "available": true,
                  "routeId": "native-route",
                  "selectedProtocols": [
                    "http",
                    "native"
                  ],
                  "targetProtocol": "native"
                }
              ],
              "decision": "select",
              "requestedTargetProtocol": "native",
              "routeSelectionId": "de3279d5381a62d7ce3c8063c46cddce40f113c1c893a1c841a1e80b8e000088",
              "selectedProtocols": [
                "http",
                "native"
              ],
              "selectedRouteId": "native-route",
              "selectedTargetProtocol": "native",
              "sourceProtocol": "http"
            }
          },
          "kernel_key": "0d6368620f77f7e31a0883ef4def63ab06c7f886e06f5f53dadc68157e67cc4b",
          "signature": "431de8df34402d53d16a371c1fc5e1fa05b3f29db2ff890794ec7414d0e20bd9603cb3537890273db8dc218998165f78d308e1046501e584d7764f6980fbf306"
        },
        "verification": {
          "ok": true,
          "receipt_id_valid": true,
          "signature_valid": true,
          "signer_trusted": true,
          "semantics_valid": true,
          "authorized": true
        },
        "output": {
          "detail": "[Errno 111] Connection refused",
          "recovery": "Inspect the retained job and provider receipt before retrying an operation"
        }
      }
    ],
    "mcp": [
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_a27a93da72",
              "request_id": "quote_req_d08559672c",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "1197900213e1926e56b0a766452fcdbc3d5e3432daa34246d90e9cbcd70c9a02",
          "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80",
          "arguments": {
            "request_id": "quote_req_d08559672c",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "2fbb2e9170e03cf6999a623ce94b16bce76ae3058580fff403c9df9b42d2c7b8",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_d08559672c",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "64cd5f4322b867de3211fc314dc6f006da645ad012ed77b365564459498244a7",
            "decision": {
              "verdict": "allow"
            },
            "id": "1197900213e1926e56b0a766452fcdbc3d5e3432daa34246d90e9cbcd70c9a02",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "1cd51e28288c1aa93f9b4fcea0de5c9111561e3155bbb4826e4ea46a1ac27173",
                "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                    "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "ce478f87179ea4f1ba9a83f9665d2492933820fe3950d13d0a8162f1fb63e2b7",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091338121
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-57e7-77c2-9bd1-8cb131e16f5c",
              "receipt_context": {
                "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "44f9cf9bbcbdaca6e666f4d22e62616e8e042c610205050b2232e5e65241686ad4a67939087f3f8c08b870d03dcabfe0ee36f7d292735002ab70835e10b36d0c",
            "timestamp": 1789091338,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "2fbb2e9170e03cf6999a623ce94b16bce76ae3058580fff403c9df9b42d2c7b8",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_d08559672c",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "64cd5f4322b867de3211fc314dc6f006da645ad012ed77b365564459498244a7",
          "decision": {
            "verdict": "allow"
          },
          "id": "1197900213e1926e56b0a766452fcdbc3d5e3432daa34246d90e9cbcd70c9a02",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "1cd51e28288c1aa93f9b4fcea0de5c9111561e3155bbb4826e4ea46a1ac27173",
              "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                  "operation_id": "d01d5881585ec50f1390afecad9654a921c2f6c07a5a007abadc359021d5ab45",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "ce478f87179ea4f1ba9a83f9665d2492933820fe3950d13d0a8162f1fb63e2b7",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091338121
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-57e7-77c2-9bd1-8cb131e16f5c",
            "receipt_context": {
              "request_id": "mcp-edge-req-4fffaba5cfa149e7b79965dbe9119a80"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "44f9cf9bbcbdaca6e666f4d22e62616e8e042c610205050b2232e5e65241686ad4a67939087f3f8c08b870d03dcabfe0ee36f7d292735002ab70835e10b36d0c",
          "timestamp": 1789091338,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_ce5f7b56dc",
              "request_id": "quote_req_837c36c654",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "68b556d93baa73118b91db1393a3e3d272d851663a5df999584882146631d538",
          "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2",
          "arguments": {
            "request_id": "quote_req_837c36c654",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "c8953834d3fd3ada0ec82fe95f271a6a1b626241ef0515f0fd09d50ab5c10d03",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_837c36c654",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "5dc28b8b85f0b53f8c842d230329d684387c333f7bf9efb9245f3d04f30ccfbe",
            "decision": {
              "verdict": "allow"
            },
            "id": "68b556d93baa73118b91db1393a3e3d272d851663a5df999584882146631d538",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "761756d39c3456ba96b315d8c33362697c87b3c1a68b01f005d136e6df30b475",
                "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                    "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "381fb94bc0b2a0e3f6d7c4b5e3c7e7341ef4296bf34bd0e662e7d2783c80a717",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091340498
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-612a-78f0-b8e9-4c73d484c4ac",
              "receipt_context": {
                "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "bee48b45f1053d38a0229e1695dd48f54e9c38eadcbfeca9353d8e53f0817a65bfd1ee2fcd448e2a3ffc85ba166171f056af08de9a269c576fbb44bbac15bc08",
            "timestamp": 1789091340,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "c8953834d3fd3ada0ec82fe95f271a6a1b626241ef0515f0fd09d50ab5c10d03",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_837c36c654",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "5dc28b8b85f0b53f8c842d230329d684387c333f7bf9efb9245f3d04f30ccfbe",
          "decision": {
            "verdict": "allow"
          },
          "id": "68b556d93baa73118b91db1393a3e3d272d851663a5df999584882146631d538",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "761756d39c3456ba96b315d8c33362697c87b3c1a68b01f005d136e6df30b475",
              "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                  "operation_id": "8f76fbe45cf1c2c4c7b479ff2051bf0b999b30fc152490a0eed04c85f79a05af",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "381fb94bc0b2a0e3f6d7c4b5e3c7e7341ef4296bf34bd0e662e7d2783c80a717",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091340498
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-612a-78f0-b8e9-4c73d484c4ac",
            "receipt_context": {
              "request_id": "mcp-edge-req-2e27748b43324e9eb61df77988fea3a2"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "bee48b45f1053d38a0229e1695dd48f54e9c38eadcbfeca9353d8e53f0817a65bfd1ee2fcd448e2a3ffc85ba166171f056af08de9a269c576fbb44bbac15bc08",
          "timestamp": 1789091340,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_180c5e1bb8",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_180c5e1bb8",
              "input_sha256": "f965a4df863bd8a1c9c431c6a5722f8078f9674f44fc849f2ef3096d015bf1c1",
              "job_id": "job_180c5e1bb8",
              "quote_id": "quote_ce5f7b56dc",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "b6af1d3d46bfe9b8c7767f694867acb5504da6cb28dba2011d09f8140471e6df",
          "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396",
          "arguments": {
            "job_id": "job_180c5e1bb8",
            "quote_id": "quote_ce5f7b56dc",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "acaf604ede8daec49453067315e2bd7dd5dd9335fe9a4a2db84c9329e7b30a72",
              "parameters": {
                "job_id": "job_180c5e1bb8",
                "quote_id": "quote_ce5f7b56dc",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "169c446218784f021d18dcbeb4d4e48920ce1f29212f3385a9357261fd39846a",
            "decision": {
              "verdict": "allow"
            },
            "id": "b6af1d3d46bfe9b8c7767f694867acb5504da6cb28dba2011d09f8140471e6df",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "72f3469bfb3188d2bebb5a22937b59add46e03062b7e486dd8c6c45fcbc5801d",
                "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                    "operation_id": "936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "afd66b07aa5bc8e570bd2c672147f572600cbc33d279976c759ccded386710fc",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091341632
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-6596-75a2-90e1-ae6e6b783323",
              "receipt_context": {
                "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "77ed57e0c856396f8b7fa68a19cc6ebabe7d099ce2a769ded9d26ada38a8cc7da520804383d33da0790cfb89d8d9e4ce80798c83da9857e9885c9bdbe12ba90a",
            "timestamp": 1789091341,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "acaf604ede8daec49453067315e2bd7dd5dd9335fe9a4a2db84c9329e7b30a72",
            "parameters": {
              "job_id": "job_180c5e1bb8",
              "quote_id": "quote_ce5f7b56dc",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "169c446218784f021d18dcbeb4d4e48920ce1f29212f3385a9357261fd39846a",
          "decision": {
            "verdict": "allow"
          },
          "id": "b6af1d3d46bfe9b8c7767f694867acb5504da6cb28dba2011d09f8140471e6df",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "72f3469bfb3188d2bebb5a22937b59add46e03062b7e486dd8c6c45fcbc5801d",
              "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                  "operation_id": "936625c3e41efbe5d91a88d8f205e254d3b9483263519613b00d9da3d2efbc6c",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "afd66b07aa5bc8e570bd2c672147f572600cbc33d279976c759ccded386710fc",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091341632
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-6596-75a2-90e1-ae6e6b783323",
            "receipt_context": {
              "request_id": "mcp-edge-req-8aecd4e661154cfe8d09b623e96d2396"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "77ed57e0c856396f8b7fa68a19cc6ebabe7d099ce2a769ded9d26ada38a8cc7da520804383d33da0790cfb89d8d9e4ce80798c83da9857e9885c9bdbe12ba90a",
          "timestamp": 1789091341,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 125000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": true,
              "checks": [
                "python-call-patterns",
                "exception-handling"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 2000000,
              "max_files": 100,
              "offer_id": "release-review",
              "price_minor": 125000,
              "pricing_basis": "bounded release-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_80978b4ea1",
              "request_id": "quote_req_f2158b2c41",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
          "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
          "arguments": {
            "request_id": "quote_req_f2158b2c41",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "release-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "dbadec83d8d6082c3609929127b250ca230d8874f0fe677d8355c191de7fbdcb",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_f2158b2c41",
                "requested_scope": "release-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "7d855c6f2a241241852e8b52340988133a12eb3da2ef74074a6ad60683632197",
            "decision": {
              "verdict": "allow"
            },
            "id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "7d2d5b705a2169fc64e7e51a9e21187b63a2613f3b2acd9610ec627ce85c4aa1",
                "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                    "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "66c700c5d2c570041152740162f7b0af9c166279cf7e037b754085a07db98918",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091343009
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-6af8-7103-8a10-4d2f1f0b62d2",
              "receipt_context": {
                "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "080e790818c2df224dd1bf9dd4ef515b96b26419226e6380bddcc925e3cbe6fc8fc7fbc98b4c9333c1aa15735876693a1e6752720c503f4e1e45bf33aeda4004",
            "timestamp": 1789091343,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "dbadec83d8d6082c3609929127b250ca230d8874f0fe677d8355c191de7fbdcb",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_f2158b2c41",
              "requested_scope": "release-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "7d855c6f2a241241852e8b52340988133a12eb3da2ef74074a6ad60683632197",
          "decision": {
            "verdict": "allow"
          },
          "id": "98121ce27c1cd1191cf564bf25e604606cede8d2f5f48f649ffbc4a03c2758b4",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "7d2d5b705a2169fc64e7e51a9e21187b63a2613f3b2acd9610ec627ce85c4aa1",
              "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                  "operation_id": "74b007bb964694e308d55026208de4ec7bca8b9e17c8ab88c821a34b494bde1c",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "66c700c5d2c570041152740162f7b0af9c166279cf7e037b754085a07db98918",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091343009
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-6af8-7103-8a10-4d2f1f0b62d2",
            "receipt_context": {
              "request_id": "mcp-edge-req-94cba8ef66eb46de9c6871334770e833"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "080e790818c2df224dd1bf9dd4ef515b96b26419226e6380bddcc925e3cbe6fc8fc7fbc98b4c9333c1aa15735876693a1e6752720c503f4e1e45bf33aeda4004",
          "timestamp": 1789091343,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_a0ab58c4e3",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns, exception-handling. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "cf67044f08f4a69a64011344e5cb520bb3e692df1c008ea0df0cd733e4644f7e"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns",
                "exception-handling"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_a0ab58c4e3",
              "input_sha256": "234715a684ee3dd2b74c58553ef23a408780cdf5f139b88c7483a8c1651749f4",
              "job_id": "job_a0ab58c4e3",
              "quote_id": "quote_80978b4ea1",
              "requested_scope": "release-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "3a9a078a04749254c76bbde475f63df2ef864a5695faab6420ceebce91b429bd",
          "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8",
          "arguments": {
            "job_id": "job_a0ab58c4e3",
            "quote_id": "quote_80978b4ea1",
            "service_family": "security-review",
            "requested_scope": "release-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "aa09e7a106125c21fc3d0243d2d0d5c82a91db5ee816ffab1d3391064a35e584",
              "parameters": {
                "job_id": "job_a0ab58c4e3",
                "quote_id": "quote_80978b4ea1",
                "release_window": null,
                "requested_scope": "release-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "72f70601c77f1effc1ae70afa564d4da4f32dc7e691d204c1442bb856cdfa21f",
            "decision": {
              "verdict": "allow"
            },
            "id": "3a9a078a04749254c76bbde475f63df2ef864a5695faab6420ceebce91b429bd",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "fe3a543e60f7d833418d6cfd6ae2fe5ace5b7f1512656c66539e3dc6fcdfde61",
                "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                    "operation_id": "1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "47cce10749f7eb5e8190727bc1c2eba14e1f4ab503cdc32b6372dfcdcb65abfd",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091344785
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-71eb-7af0-b02a-4a76203b50d0",
              "receipt_context": {
                "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "b1fbb4f10f6c9cb87a517566b06f6d1643ae87f5c02e446fd788a08240d58e9b7a19e69ffa24235d8a6ba37ac5cd070d057c3b1d34719dbf6e0656a46f5a0a01",
            "timestamp": 1789091344,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "aa09e7a106125c21fc3d0243d2d0d5c82a91db5ee816ffab1d3391064a35e584",
            "parameters": {
              "job_id": "job_a0ab58c4e3",
              "quote_id": "quote_80978b4ea1",
              "release_window": null,
              "requested_scope": "release-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "72f70601c77f1effc1ae70afa564d4da4f32dc7e691d204c1442bb856cdfa21f",
          "decision": {
            "verdict": "allow"
          },
          "id": "3a9a078a04749254c76bbde475f63df2ef864a5695faab6420ceebce91b429bd",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "fe3a543e60f7d833418d6cfd6ae2fe5ace5b7f1512656c66539e3dc6fcdfde61",
              "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                  "operation_id": "1bdfa87ec4a3582b86f2c842f18de773c22b082b4faac621ebb4d78dd3ef170b",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "47cce10749f7eb5e8190727bc1c2eba14e1f4ab503cdc32b6372dfcdcb65abfd",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091344785
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-71eb-7af0-b02a-4a76203b50d0",
            "receipt_context": {
              "request_id": "mcp-edge-req-73b10c1f21f04948bb82ea5bf61f53d8"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "b1fbb4f10f6c9cb87a517566b06f6d1643ae87f5c02e446fd788a08240d58e9b7a19e69ffa24235d8a6ba37ac5cd070d057c3b1d34719dbf6e0656a46f5a0a01",
          "timestamp": 1789091344,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_f1b037137d",
              "request_id": "quote_req_67610f73d1",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "566ab5eedfd95e2f14e4aadecdb9dce8655dd992b28bba539f2b0cfe8bd5584b",
          "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12",
          "arguments": {
            "request_id": "quote_req_67610f73d1",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "7335e20e8d0f98c14c3a19103f08b598c5bc35b0281bb137b4fc27a3480a716f",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_67610f73d1",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "3dff5ef3f7063c36058009d1b5be135094eb495fbee535d3aa46307bcc1823f9",
            "decision": {
              "verdict": "allow"
            },
            "id": "566ab5eedfd95e2f14e4aadecdb9dce8655dd992b28bba539f2b0cfe8bd5584b",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "d092973fb562f8dd52402c9f955c702b774e7f9a3a52ca9e40e59d87ccde4a25",
                "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                    "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "2cfe6df319f2bfc5f4f45c3efc5979fbddff1fec688cb468853d56629310fb58",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091346252
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-77a1-7f93-a21a-7ecc1e36b880",
              "receipt_context": {
                "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "5dbedfad4fc6f1def1a62bc7d409f02f6f694c74e630ad17471ab6745da6985f60668e1de15cb776f905a9a7051fa8278410f44eb10d23c4349104b110f09c04",
            "timestamp": 1789091346,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "7335e20e8d0f98c14c3a19103f08b598c5bc35b0281bb137b4fc27a3480a716f",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_67610f73d1",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "3dff5ef3f7063c36058009d1b5be135094eb495fbee535d3aa46307bcc1823f9",
          "decision": {
            "verdict": "allow"
          },
          "id": "566ab5eedfd95e2f14e4aadecdb9dce8655dd992b28bba539f2b0cfe8bd5584b",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "d092973fb562f8dd52402c9f955c702b774e7f9a3a52ca9e40e59d87ccde4a25",
              "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                  "operation_id": "7f1075226eb3f732a8b8c74903ed5bb05fcc1657bd96b91427cca510d5d0d467",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "2cfe6df319f2bfc5f4f45c3efc5979fbddff1fec688cb468853d56629310fb58",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091346252
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-77a1-7f93-a21a-7ecc1e36b880",
            "receipt_context": {
              "request_id": "mcp-edge-req-ce7488e3fe534105966999cc0aa5ef12"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "5dbedfad4fc6f1def1a62bc7d409f02f6f694c74e630ad17471ab6745da6985f60668e1de15cb776f905a9a7051fa8278410f44eb10d23c4349104b110f09c04",
          "timestamp": 1789091346,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_10fe91f8c7",
              "request_id": "quote_req_16f6fd547e",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "9cb23baf9e9d8aa9b5b854c57c60dd5cbb84bbcffb2f2cd8d5e2fb68fae86fa4",
          "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285",
          "arguments": {
            "request_id": "quote_req_16f6fd547e",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "2c0aece9efe24f43d475891fd78f20373d6bb22946c622f233304f6943042107",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_16f6fd547e",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "ad6000cda8e7c8ab3d1450510be0d67472a3c5d13892a3b64f5d66943b9ec78b",
            "decision": {
              "verdict": "allow"
            },
            "id": "9cb23baf9e9d8aa9b5b854c57c60dd5cbb84bbcffb2f2cd8d5e2fb68fae86fa4",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "75c8d4c7308cb0005d480ed2b8ff1aedc57c21fe84254502e10fa4a132559b97",
                "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                    "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "908d4d5249f3cb2b9320499bb09a8e5f7679936fe02a86a3e737a7cc67c9259a",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091347493
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-7c7c-77d3-b697-5f3f37104f23",
              "receipt_context": {
                "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "cd6bf841f3593b3bb17e04bf5ee5f40efe6a1ba786126a1b52e1e8cee080384f6162909f10d0349913e5759850bdb15893f5991f83a1d590c40589fddc31b109",
            "timestamp": 1789091347,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "2c0aece9efe24f43d475891fd78f20373d6bb22946c622f233304f6943042107",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_16f6fd547e",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "ad6000cda8e7c8ab3d1450510be0d67472a3c5d13892a3b64f5d66943b9ec78b",
          "decision": {
            "verdict": "allow"
          },
          "id": "9cb23baf9e9d8aa9b5b854c57c60dd5cbb84bbcffb2f2cd8d5e2fb68fae86fa4",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "75c8d4c7308cb0005d480ed2b8ff1aedc57c21fe84254502e10fa4a132559b97",
              "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                  "operation_id": "098fd16e368bf6813f4bffff2642878854492cc4fbab7150387d679255ce7c60",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "908d4d5249f3cb2b9320499bb09a8e5f7679936fe02a86a3e737a7cc67c9259a",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091347493
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-7c7c-77d3-b697-5f3f37104f23",
            "receipt_context": {
              "request_id": "mcp-edge-req-7a06cc5135824474a39e4694c712d285"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "cd6bf841f3593b3bb17e04bf5ee5f40efe6a1ba786126a1b52e1e8cee080384f6162909f10d0349913e5759850bdb15893f5991f83a1d590c40589fddc31b109",
          "timestamp": 1789091347,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_079c10b451",
              "request_id": "quote_req_197c3b32c0",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "051798951db66bdfaa754a456894b9c5f6a185b11fc2988b77c1459f9713314f",
          "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44",
          "arguments": {
            "request_id": "quote_req_197c3b32c0",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "9df5d9e870b5c74d5396659fc6e2e0babea1e086004f7d3486f8f2c1fbdbef25",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_197c3b32c0",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "c28b90f4aa1b6ca33bf9b0bef98b9b4ebb6049d15b37202f7b08a09a91d87333",
            "decision": {
              "verdict": "allow"
            },
            "id": "051798951db66bdfaa754a456894b9c5f6a185b11fc2988b77c1459f9713314f",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "e02f65f380a9b4025d0b394115058dd39c3f9b8c169e297650316d0f3cedf318",
                "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                    "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "0ab8eea2a546974173f6238a717a23219ec48e33fc44bcac49a98da8c53a81d0",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091348741
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-815c-7a21-99df-7f1d604ac407",
              "receipt_context": {
                "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "a94adad09d94d732b7f09b343e45c90aa64eeedf4c193ef3d2ffabfb9598dca5c4400000b5cc84e1fb9127e94238e6253b859eda2cd8f143ce958b185186480b",
            "timestamp": 1789091348,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "9df5d9e870b5c74d5396659fc6e2e0babea1e086004f7d3486f8f2c1fbdbef25",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_197c3b32c0",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "c28b90f4aa1b6ca33bf9b0bef98b9b4ebb6049d15b37202f7b08a09a91d87333",
          "decision": {
            "verdict": "allow"
          },
          "id": "051798951db66bdfaa754a456894b9c5f6a185b11fc2988b77c1459f9713314f",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "e02f65f380a9b4025d0b394115058dd39c3f9b8c169e297650316d0f3cedf318",
              "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                  "operation_id": "ccef5870b00bc7d9c50940dd939641d9b7b1d87aa61a3bf2bb6338cb42057797",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "0ab8eea2a546974173f6238a717a23219ec48e33fc44bcac49a98da8c53a81d0",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091348741
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-815c-7a21-99df-7f1d604ac407",
            "receipt_context": {
              "request_id": "mcp-edge-req-be842a5e2e754921ade81fcc5466cf44"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "a94adad09d94d732b7f09b343e45c90aa64eeedf4c193ef3d2ffabfb9598dca5c4400000b5cc84e1fb9127e94238e6253b859eda2cd8f143ce958b185186480b",
          "timestamp": 1789091348,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_ce119eacd0",
              "request_id": "quote_req_2a71107508",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "48aafd4ffe3020a1db2aa9e7a15b45f096c18c7fd03a77cb6923508499ab6739",
          "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d",
          "arguments": {
            "request_id": "quote_req_2a71107508",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "84bf1a212dc84a904c47b9ca4a26a43c3dfbf7e7b6e77aceae4b2cf6830039ad",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_2a71107508",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "ab823136e281aa82d6d988ec7422cce4ed3614fe339f47428a1947b41aab4ffd",
            "decision": {
              "verdict": "allow"
            },
            "id": "48aafd4ffe3020a1db2aa9e7a15b45f096c18c7fd03a77cb6923508499ab6739",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "f701beafd1eb89667b38a7bc3ce1c41c5356113a14ed2722261d6d35622cee9b",
                "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                    "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "8285c5bedd77756b3c4fac8892b3e57e467694f472e1f407e2016946969c1bae",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091350040
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-8670-7a11-9546-c7e809591828",
              "receipt_context": {
                "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "4b9a16530f3212cf439e0f62a6b4ea1ddf6331e620d4f617470f38bbb2e12ed1ddb9850bcf68511a6150037caba35d92af839f3a61313b0abfdd3dc10f365a0a",
            "timestamp": 1789091350,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "84bf1a212dc84a904c47b9ca4a26a43c3dfbf7e7b6e77aceae4b2cf6830039ad",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_2a71107508",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "ab823136e281aa82d6d988ec7422cce4ed3614fe339f47428a1947b41aab4ffd",
          "decision": {
            "verdict": "allow"
          },
          "id": "48aafd4ffe3020a1db2aa9e7a15b45f096c18c7fd03a77cb6923508499ab6739",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "f701beafd1eb89667b38a7bc3ce1c41c5356113a14ed2722261d6d35622cee9b",
              "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                  "operation_id": "6e2c82a5d4d9e95a3c1ea336f04b5da9745281f27bcb896e8ab1d9899c7a9d5a",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "8285c5bedd77756b3c4fac8892b3e57e467694f472e1f407e2016946969c1bae",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091350040
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-8670-7a11-9546-c7e809591828",
            "receipt_context": {
              "request_id": "mcp-edge-req-ff9a605aaefb492bb094fb4baa7f771d"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "4b9a16530f3212cf439e0f62a6b4ea1ddf6331e620d4f617470f38bbb2e12ed1ddb9850bcf68511a6150037caba35d92af839f3a61313b0abfdd3dc10f365a0a",
          "timestamp": 1789091350,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_141fa1c3c2",
              "request_id": "quote_req_156b38fb30",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "be2e3d8b16f3ddeecd897bd131b0965f5351cf8151f05e2628cdb39476b6491d",
          "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731",
          "arguments": {
            "request_id": "quote_req_156b38fb30",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "a43a47a4ebd1c1016703f41b52f1a9a73e6b5131cb227b4bb648f184206cce3d",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_156b38fb30",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "1ec28266b3baaed79cad1b99f9be52732bc9ddf4f823bb6e2c576b659ee1bea2",
            "decision": {
              "verdict": "allow"
            },
            "id": "be2e3d8b16f3ddeecd897bd131b0965f5351cf8151f05e2628cdb39476b6491d",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "c829fffcab83ae84f7138239f0a4d3b8bc1873098584d4e7142aca962c0a2971",
                "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                    "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "aaa6484b7d97609677702f5ff64d81151db6ebbdb204a3781e42cefddcfd8ccc",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091351399
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-8bcb-7bd2-9195-1ef14720231b",
              "receipt_context": {
                "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "be799bd6e1141f6d42b4aae8ecabcca171cefa6dfbc698da229755aa9e9c52507c181e200d17d13340df2626c2cb0178562b561a2206558550486faefee5cf0e",
            "timestamp": 1789091351,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "a43a47a4ebd1c1016703f41b52f1a9a73e6b5131cb227b4bb648f184206cce3d",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_156b38fb30",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "1ec28266b3baaed79cad1b99f9be52732bc9ddf4f823bb6e2c576b659ee1bea2",
          "decision": {
            "verdict": "allow"
          },
          "id": "be2e3d8b16f3ddeecd897bd131b0965f5351cf8151f05e2628cdb39476b6491d",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "c829fffcab83ae84f7138239f0a4d3b8bc1873098584d4e7142aca962c0a2971",
              "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                  "operation_id": "a656997c5679056d09c47bdd2cc41f88867c3b51da5b3cdad8e4b55a6f10cae3",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "aaa6484b7d97609677702f5ff64d81151db6ebbdb204a3781e42cefddcfd8ccc",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091351399
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-8bcb-7bd2-9195-1ef14720231b",
            "receipt_context": {
              "request_id": "mcp-edge-req-aca49f5b459f4596a56fad65165f8731"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "be799bd6e1141f6d42b4aae8ecabcca171cefa6dfbc698da229755aa9e9c52507c181e200d17d13340df2626c2cb0178562b561a2206558550486faefee5cf0e",
          "timestamp": 1789091351,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_f05bcf82e2",
              "request_id": "quote_req_04aa377c27",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "4b026798f40a5e24d8fa1d4e44a64e690365d7d13afa8c3fc8ce3799f53a17c3",
          "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7",
          "arguments": {
            "request_id": "quote_req_04aa377c27",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "1fc6987c1e265dc9fb8d97851c0e430aa3f2dd6d5b2b26efd49ab7b3258ad13c",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_04aa377c27",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "d7e71cfe70f00216bc0984f261769a0b3ae81d8699bbae322765065b8078c405",
            "decision": {
              "verdict": "allow"
            },
            "id": "4b026798f40a5e24d8fa1d4e44a64e690365d7d13afa8c3fc8ce3799f53a17c3",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "914982c070d65b4c79ae41d0daa93d9b11d2586230a8d3b343fe1414cb650094",
                "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                    "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "5cd5b7cfbac25671407a47651b4d92c310897d2d3bcce3f563cf6397ade3384f",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091352819
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-914d-7b40-a0bc-6f6793e0711f",
              "receipt_context": {
                "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "f331ccfea4605c73b469200f065b254208476dec7dd2a512412c5148c7909d54808eba2930f5c7ae13e857ad4abc705aa45e63ab986b6ce52c79e0f75b6ea400",
            "timestamp": 1789091352,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "1fc6987c1e265dc9fb8d97851c0e430aa3f2dd6d5b2b26efd49ab7b3258ad13c",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_04aa377c27",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "d7e71cfe70f00216bc0984f261769a0b3ae81d8699bbae322765065b8078c405",
          "decision": {
            "verdict": "allow"
          },
          "id": "4b026798f40a5e24d8fa1d4e44a64e690365d7d13afa8c3fc8ce3799f53a17c3",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "914982c070d65b4c79ae41d0daa93d9b11d2586230a8d3b343fe1414cb650094",
              "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                  "operation_id": "0351dffedd298576f599e8e3b893d0d76dce0e68af051025fdd5b5cb14919bd4",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "5cd5b7cfbac25671407a47651b4d92c310897d2d3bcce3f563cf6397ade3384f",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091352819
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-914d-7b40-a0bc-6f6793e0711f",
            "receipt_context": {
              "request_id": "mcp-edge-req-40ad8d2df10a48ae926d647fca6733d7"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "f331ccfea4605c73b469200f065b254208476dec7dd2a512412c5148c7909d54808eba2930f5c7ae13e857ad4abc705aa45e63ab986b6ce52c79e0f75b6ea400",
          "timestamp": 1789091352,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_e4e28430c0",
              "request_id": "quote_req_c7290cceff",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "ef7a465cd20f37e89cd19e9fa79e65652e59dbbef2a3fc21583366f8844525b4",
          "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba",
          "arguments": {
            "request_id": "quote_req_c7290cceff",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "c554fa4288be897ed7b7062d154ce0c5861af01c05af169cb2f54149b17d959f",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_c7290cceff",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "23434c4124cfe727eb02fad3ee9880c0a46f5b2f58ec9ed8a9fef16b4c993782",
            "decision": {
              "verdict": "allow"
            },
            "id": "ef7a465cd20f37e89cd19e9fa79e65652e59dbbef2a3fc21583366f8844525b4",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "2f076d2beb59fb9fa219e06f19edc65702527435dfc3a1c4e352f2bdfd102576",
                "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                    "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "e4a6dbece9a930b5d1870667cfffbdcdfa0f5823e0dd39c95b902251ebfe6bde",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091354232
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-96d0-7bb2-a9a0-b4c6941b57d2",
              "receipt_context": {
                "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "d364b047bd572e2b5dbb41da7b8ab6dccee8b2171773e4800eefff44b8ade24edfa4d34f34f5c9e938aac64d8066a4bd0d6b4920b3bdc80733286cbbe7219106",
            "timestamp": 1789091354,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "c554fa4288be897ed7b7062d154ce0c5861af01c05af169cb2f54149b17d959f",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_c7290cceff",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "23434c4124cfe727eb02fad3ee9880c0a46f5b2f58ec9ed8a9fef16b4c993782",
          "decision": {
            "verdict": "allow"
          },
          "id": "ef7a465cd20f37e89cd19e9fa79e65652e59dbbef2a3fc21583366f8844525b4",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "2f076d2beb59fb9fa219e06f19edc65702527435dfc3a1c4e352f2bdfd102576",
              "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                  "operation_id": "68ccb8a20dab2b200f6cf1f92a651953efd8591342fd17a883c224b0fe3ebbab",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "e4a6dbece9a930b5d1870667cfffbdcdfa0f5823e0dd39c95b902251ebfe6bde",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091354232
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-96d0-7bb2-a9a0-b4c6941b57d2",
            "receipt_context": {
              "request_id": "mcp-edge-req-20ecde777b24438da1d173964dfd3bba"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "d364b047bd572e2b5dbb41da7b8ab6dccee8b2171773e4800eefff44b8ade24edfa4d34f34f5c9e938aac64d8066a4bd0d6b4920b3bdc80733286cbbe7219106",
          "timestamp": 1789091354,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "request_quote",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "quoted security-review at 45000 USD",
                "type": "text"
              }
            ],
            "structuredContent": {
              "approval_required": false,
              "checks": [
                "python-call-patterns"
              ],
              "currency": "USD",
              "estimated_delivery_hours": 0,
              "max_bytes": 200000,
              "max_files": 10,
              "offer_id": "hotfix-review",
              "price_minor": 45000,
              "pricing_basis": "bounded hotfix-review for payments-api",
              "provider_id": "vanguard-security",
              "quote_id": "quote_5ba7e3db61",
              "request_id": "quote_req_c84570baa6",
              "service_family": "security-review",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "d4c8cc565e0a28fb90e90ba216b13edca865b203068aabf97a688a5e06213f12",
          "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e",
          "arguments": {
            "request_id": "quote_req_c84570baa6",
            "buyer_id": "lattice-platform-security",
            "service_family": "security-review",
            "target": "payments-api",
            "requested_scope": "hotfix-review",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "d222f2345fdd5260489c1de660dbe8d31a5b9d84828307d8bcccd612e2e3f9fb",
              "parameters": {
                "buyer_id": "lattice-platform-security",
                "release_window": null,
                "request_id": "quote_req_c84570baa6",
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "ed7df2fedcd07f17aabc7dc685c7cef768bdc34c49c6f7905298b166541b3410",
            "decision": {
              "verdict": "allow"
            },
            "id": "d4c8cc565e0a28fb90e90ba216b13edca865b203068aabf97a688a5e06213f12",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "9013afa4a1917487f2711040499191cb1aae2f139f8a73ba9c90896746f34baa",
                "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                    "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "f9e3846dd1373b5851d520c7880228d371c89f1686c0af3386a0f1970d1d9c9e",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091355645
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 0,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-9c52-7d83-92d0-c6e2574b9ccc",
              "receipt_context": {
                "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "8ed43bdda49a70db207770099df253cffb982980b0d0390c1a6bc3abf7df6dbf99edc4e63285e4c0252d5e2343a1b21c82fb6f220ceee89f1bc81f689fa7a008",
            "timestamp": 1789091355,
            "tool_name": "request_quote",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "d222f2345fdd5260489c1de660dbe8d31a5b9d84828307d8bcccd612e2e3f9fb",
            "parameters": {
              "buyer_id": "lattice-platform-security",
              "release_window": null,
              "request_id": "quote_req_c84570baa6",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "ed7df2fedcd07f17aabc7dc685c7cef768bdc34c49c6f7905298b166541b3410",
          "decision": {
            "verdict": "allow"
          },
          "id": "d4c8cc565e0a28fb90e90ba216b13edca865b203068aabf97a688a5e06213f12",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "9013afa4a1917487f2711040499191cb1aae2f139f8a73ba9c90896746f34baa",
              "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                  "operation_id": "e49a4b0fe9f0887e453e8b4bc6faa8c030d3299b5e8b37cdb8a640e72e04aff6",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "f9e3846dd1373b5851d520c7880228d371c89f1686c0af3386a0f1970d1d9c9e",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091355645
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 0,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-9c52-7d83-92d0-c6e2574b9ccc",
            "receipt_context": {
              "request_id": "mcp-edge-req-eb507e1e4cc34d49a858f06254a89d8e"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "8ed43bdda49a70db207770099df253cffb982980b0d0390c1a6bc3abf7df6dbf99edc4e63285e4c0252d5e2343a1b21c82fb6f220ceee89f1bc81f689fa7a008",
          "timestamp": 1789091355,
          "tool_name": "request_quote",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_54a383342e",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_54a383342e",
              "input_sha256": "6a329b33101682dfc6c61fcbe2222a1f9b54e6be7ea39c26e10598b36572f26d",
              "job_id": "job_54a383342e",
              "quote_id": "quote_141fa1c3c2",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "3055f73186a8e2028e73230ee8279e4fce835d99aa4037390f619ea218502ae8",
          "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2",
          "arguments": {
            "job_id": "job_54a383342e",
            "quote_id": "quote_141fa1c3c2",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "99c79ee09867f26585857710b9f14fcdad491ea37ff79aeba8365b0912f06a80",
              "parameters": {
                "job_id": "job_54a383342e",
                "quote_id": "quote_141fa1c3c2",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "8323ffefe3b59710403efe882a232ad07f149b088cdb08683a322e4656efb302",
            "decision": {
              "verdict": "allow"
            },
            "id": "3055f73186a8e2028e73230ee8279e4fce835d99aa4037390f619ea218502ae8",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "060faf37cbdcb6bd3f392ff320299b8626cb8e54dd084415578633b88213897c",
                "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                    "operation_id": "c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "4ec7d63c3da2c88a5ccdba50004769694f73768b6fc2eb67ded7e1a607534c01",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091357660
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-a432-73f2-bb98-fc61ccbed236",
              "receipt_context": {
                "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "3cc0c4dfb48191638237b80e9a6e6b953dba3dd3de3e0d209b276300af2d76aae8a843b83e3ee44362f01f9455ccfd2d9d7837ff171e2b0e629887654f03070c",
            "timestamp": 1789091357,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "99c79ee09867f26585857710b9f14fcdad491ea37ff79aeba8365b0912f06a80",
            "parameters": {
              "job_id": "job_54a383342e",
              "quote_id": "quote_141fa1c3c2",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "8323ffefe3b59710403efe882a232ad07f149b088cdb08683a322e4656efb302",
          "decision": {
            "verdict": "allow"
          },
          "id": "3055f73186a8e2028e73230ee8279e4fce835d99aa4037390f619ea218502ae8",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "060faf37cbdcb6bd3f392ff320299b8626cb8e54dd084415578633b88213897c",
              "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                  "operation_id": "c2a225f8c9f40f43f0eebe97e9e21471b40eb3aa811e9a632649c938ccbab8e4",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "4ec7d63c3da2c88a5ccdba50004769694f73768b6fc2eb67ded7e1a607534c01",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091357660
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-a432-73f2-bb98-fc61ccbed236",
            "receipt_context": {
              "request_id": "mcp-edge-req-7f8eb134451b42beba007a13d7f7edf2"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "3cc0c4dfb48191638237b80e9a6e6b953dba3dd3de3e0d209b276300af2d76aae8a843b83e3ee44362f01f9455ccfd2d9d7837ff171e2b0e629887654f03070c",
          "timestamp": 1789091357,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_639d7e82a4",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_639d7e82a4",
              "input_sha256": "b444e924567f1544684b02bcb7388250edfcbcecb1aef442e0af1fec44944f6c",
              "job_id": "job_639d7e82a4",
              "quote_id": "quote_5ba7e3db61",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "77abc6c04ffbbaffc5557211876845acb45ebe5ed2466e9995e5b5b5b9c67308",
          "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5",
          "arguments": {
            "job_id": "job_639d7e82a4",
            "quote_id": "quote_5ba7e3db61",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "613b0d0270d17b283fa66560fc28835ff454cdd233d5570b01c7670385f74bf3",
              "parameters": {
                "job_id": "job_639d7e82a4",
                "quote_id": "quote_5ba7e3db61",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "c89e6e4569720920a510a7b8378320736c720a62ae631018223e629920c622e5",
            "decision": {
              "verdict": "allow"
            },
            "id": "77abc6c04ffbbaffc5557211876845acb45ebe5ed2466e9995e5b5b5b9c67308",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "215e26e5433fc81c772c6e7e88efd3be8d92bcc78a650a6602ee04ed07904237",
                "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                    "operation_id": "f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "83466aec5718f9d4b5f02df756281864367776750de0cf0b80f5867e3cd0f581",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091358774
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-a88e-7c41-9090-10c143b9868b",
              "receipt_context": {
                "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "326afde04ac907027a6eb3d7b8a01c7a083454c77749acb3ebf62672c820ab5e7c3a0afa08d23abb56025e21a64b4292b8c204f6248d4fa79942021950a2640a",
            "timestamp": 1789091358,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "613b0d0270d17b283fa66560fc28835ff454cdd233d5570b01c7670385f74bf3",
            "parameters": {
              "job_id": "job_639d7e82a4",
              "quote_id": "quote_5ba7e3db61",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "c89e6e4569720920a510a7b8378320736c720a62ae631018223e629920c622e5",
          "decision": {
            "verdict": "allow"
          },
          "id": "77abc6c04ffbbaffc5557211876845acb45ebe5ed2466e9995e5b5b5b9c67308",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "215e26e5433fc81c772c6e7e88efd3be8d92bcc78a650a6602ee04ed07904237",
              "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                  "operation_id": "f01d519934c490fe3b28e3c321e5174f552df92b99e4d74008455391ea4e088d",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "83466aec5718f9d4b5f02df756281864367776750de0cf0b80f5867e3cd0f581",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091358774
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-a88e-7c41-9090-10c143b9868b",
            "receipt_context": {
              "request_id": "mcp-edge-req-0ac489a958ba426ca1fc20574f550ab5"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "326afde04ac907027a6eb3d7b8a01c7a083454c77749acb3ebf62672c820ab5e7c3a0afa08d23abb56025e21a64b4292b8c204f6248d4fa79942021950a2640a",
          "timestamp": 1789091358,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_34f8232563",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_34f8232563",
              "input_sha256": "7184999c44ae9e3c78561a4a23fff7b3caab10e8f6b9b621bd8977bd5c93faec",
              "job_id": "job_34f8232563",
              "quote_id": "quote_f1b037137d",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "51fb76189b8afcca2565e202472396889b167a0708f0b84ccc6223f79d705485",
          "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c",
          "arguments": {
            "job_id": "job_34f8232563",
            "quote_id": "quote_f1b037137d",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "67aa324bdb1e5e0f4a0482f94558ad07864ab825cfac9c95117fbe53f04c0121",
              "parameters": {
                "job_id": "job_34f8232563",
                "quote_id": "quote_f1b037137d",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "4a9cf157b4c67dee22adca2419b9dcc04dbde7837639be055631d2666714841b",
            "decision": {
              "verdict": "allow"
            },
            "id": "51fb76189b8afcca2565e202472396889b167a0708f0b84ccc6223f79d705485",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "f2c1894fc5d68b5dcb51b6d21fb116d0f54bacd9bc0b38af03ccb474ff6ee1bd",
                "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                    "operation_id": "4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "3cfe9459c280d217e78d5a906f2224d33cd2b43a092e99ea2836890e498599db",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091359980
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-ad48-7d83-bf6a-8ca3ededf496",
              "receipt_context": {
                "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "99c7d62aeabd5379c1e0fd3a1581eb72c289a1a837e3785d1b13b8a5d2c2cc33743214cf46cdb98a29b1f033fc387faa5a875902959494251b68b33643c2ba00",
            "timestamp": 1789091359,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "67aa324bdb1e5e0f4a0482f94558ad07864ab825cfac9c95117fbe53f04c0121",
            "parameters": {
              "job_id": "job_34f8232563",
              "quote_id": "quote_f1b037137d",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "4a9cf157b4c67dee22adca2419b9dcc04dbde7837639be055631d2666714841b",
          "decision": {
            "verdict": "allow"
          },
          "id": "51fb76189b8afcca2565e202472396889b167a0708f0b84ccc6223f79d705485",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "f2c1894fc5d68b5dcb51b6d21fb116d0f54bacd9bc0b38af03ccb474ff6ee1bd",
              "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                  "operation_id": "4b59f61096b7d4125f4c26c9c1c69283e19daa53726400d3696c30426d50a38c",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "3cfe9459c280d217e78d5a906f2224d33cd2b43a092e99ea2836890e498599db",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091359980
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-ad48-7d83-bf6a-8ca3ededf496",
            "receipt_context": {
              "request_id": "mcp-edge-req-83d46e7176084014bec026ee96ef3f0c"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "99c7d62aeabd5379c1e0fd3a1581eb72c289a1a837e3785d1b13b8a5d2c2cc33743214cf46cdb98a29b1f033fc387faa5a875902959494251b68b33643c2ba00",
          "timestamp": 1789091359,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_05cff51adb",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_05cff51adb",
              "input_sha256": "61671faaf2261be895d2adf50ed7e47d5a04e77f96bf06c57e55886dad92007b",
              "job_id": "job_05cff51adb",
              "quote_id": "quote_079c10b451",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "364f567d89de071d7aa4590de721719633aa8b2eae7ff7c85eb23fc4ac867895",
          "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001",
          "arguments": {
            "job_id": "job_05cff51adb",
            "quote_id": "quote_079c10b451",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "1d60a307dbd191ce765e1d91c4091a5983989b70089b78d86267efbbdf754ffd",
              "parameters": {
                "job_id": "job_05cff51adb",
                "quote_id": "quote_079c10b451",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "8bc1662271e7154f4c962836f92138da6437fc210f84006eee2ebe6cbce65869",
            "decision": {
              "verdict": "allow"
            },
            "id": "364f567d89de071d7aa4590de721719633aa8b2eae7ff7c85eb23fc4ac867895",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "951fe3ee32a6193b8e37e18665605bba847c34155eedc88e5e42718f4c1185cc",
                "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                    "operation_id": "f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "06e89dd30bda4313af8fe63b966f579de68277cf99e5786e1e65f94b65c9aa83",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091361170
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-b1e6-7201-b61f-75ba599c8a9d",
              "receipt_context": {
                "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "663599813ff446667bb92ef474fcef021116c84f908019377f929410fdb8456a4a0e828a304732ec91a43c1660d407dadd652b2ac0761fab749a43678043c809",
            "timestamp": 1789091361,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "1d60a307dbd191ce765e1d91c4091a5983989b70089b78d86267efbbdf754ffd",
            "parameters": {
              "job_id": "job_05cff51adb",
              "quote_id": "quote_079c10b451",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "8bc1662271e7154f4c962836f92138da6437fc210f84006eee2ebe6cbce65869",
          "decision": {
            "verdict": "allow"
          },
          "id": "364f567d89de071d7aa4590de721719633aa8b2eae7ff7c85eb23fc4ac867895",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "951fe3ee32a6193b8e37e18665605bba847c34155eedc88e5e42718f4c1185cc",
              "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                  "operation_id": "f7b3ae395df40c347ea3d89c84ff003de6601ad6cc2d3a801f63b1c4d6fe2eef",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "06e89dd30bda4313af8fe63b966f579de68277cf99e5786e1e65f94b65c9aa83",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091361170
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-b1e6-7201-b61f-75ba599c8a9d",
            "receipt_context": {
              "request_id": "mcp-edge-req-1e670378b421494ba39745cbbce91001"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "663599813ff446667bb92ef474fcef021116c84f908019377f929410fdb8456a4a0e828a304732ec91a43c1660d407dadd652b2ac0761fab749a43678043c809",
          "timestamp": 1789091361,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_1b7ddbde21",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_1b7ddbde21",
              "input_sha256": "9d5d06352c7a549ace3b3e6996cc9d4a4992564401f8a51e26eb81511e9afdc2",
              "job_id": "job_1b7ddbde21",
              "quote_id": "quote_10fe91f8c7",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "7576c26c6ad4f90d1c0fb3f3f3078dce834cc24fd1302adcce9be0e6d0c9ad87",
          "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611",
          "arguments": {
            "job_id": "job_1b7ddbde21",
            "quote_id": "quote_10fe91f8c7",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "8b5a3130ba3d4de4d2be8f009ca3c19b7302276b83eeb3aabc6067ad33882484",
              "parameters": {
                "job_id": "job_1b7ddbde21",
                "quote_id": "quote_10fe91f8c7",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "fbbee0012dbf59b4f002b562d9790dcea6e126ec7c12bb8315494ab5effb6d2d",
            "decision": {
              "verdict": "allow"
            },
            "id": "7576c26c6ad4f90d1c0fb3f3f3078dce834cc24fd1302adcce9be0e6d0c9ad87",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "51d036e76c0f1f520817c403d2bff336826efa72f59f27ba3df9dc6be4f087f1",
                "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                    "operation_id": "2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "188812f78d326e09f7720d7677e3c628564bd2658c70c0a9f0223a1bf3f727d0",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091362403
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-b6b8-7af0-836f-66ec0d0ae0f7",
              "receipt_context": {
                "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "f0b7637b8baa03c3615cd54e5d94911c2bfe9928bc8999c0bc243833f7cccdae8819af4af6998ea4e9d4ab458d81ad05b153557a520c65f33a6554b73f89500b",
            "timestamp": 1789091362,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "8b5a3130ba3d4de4d2be8f009ca3c19b7302276b83eeb3aabc6067ad33882484",
            "parameters": {
              "job_id": "job_1b7ddbde21",
              "quote_id": "quote_10fe91f8c7",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "fbbee0012dbf59b4f002b562d9790dcea6e126ec7c12bb8315494ab5effb6d2d",
          "decision": {
            "verdict": "allow"
          },
          "id": "7576c26c6ad4f90d1c0fb3f3f3078dce834cc24fd1302adcce9be0e6d0c9ad87",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "51d036e76c0f1f520817c403d2bff336826efa72f59f27ba3df9dc6be4f087f1",
              "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                  "operation_id": "2799f0061d5f570e9cd6571192a17e04466f7f7bb4029fce63322e1ab690144b",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "188812f78d326e09f7720d7677e3c628564bd2658c70c0a9f0223a1bf3f727d0",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091362403
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-b6b8-7af0-836f-66ec0d0ae0f7",
            "receipt_context": {
              "request_id": "mcp-edge-req-2591ebd00ea746baacf227db243a8611"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "f0b7637b8baa03c3615cd54e5d94911c2bfe9928bc8999c0bc243833f7cccdae8819af4af6998ea4e9d4ab458d81ad05b153557a520c65f33a6554b73f89500b",
          "timestamp": 1789091362,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_6752f2eb87",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_6752f2eb87",
              "input_sha256": "53fbb4ac1c93674738d54a391fd5a3bd85988508093ecabd8265fe824f24c2a6",
              "job_id": "job_6752f2eb87",
              "quote_id": "quote_ce119eacd0",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "fd8336c9ee17a71381a6bc0fef2da6bd1f8ac81d260229a9ba1cd9fa4d24866c",
          "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc",
          "arguments": {
            "job_id": "job_6752f2eb87",
            "quote_id": "quote_ce119eacd0",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "22efc7a98e127e4497aeb688ef11095fc751c248e54647df7105b3ca68f9fc53",
              "parameters": {
                "job_id": "job_6752f2eb87",
                "quote_id": "quote_ce119eacd0",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "da1d6464bd8b92d439125c111d0551c4465e1fad6775d9e3a13fe054c0061dd1",
            "decision": {
              "verdict": "allow"
            },
            "id": "fd8336c9ee17a71381a6bc0fef2da6bd1f8ac81d260229a9ba1cd9fa4d24866c",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "51fc9b756a460573e43a600f7a6faaad6b40aa3ea9acc405434f50f98ffd1141",
                "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                    "operation_id": "4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "cc7f88d6e2e6862db6a9eb3892d2459aaa9a270378f9d1e970b78b2aaa5153dc",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091363687
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-bbbd-7510-be4f-fb4e9ec6fc84",
              "receipt_context": {
                "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "389b7d2a7b6f94da4cfc824cfe4d936a210905c69108f3bf446e16ebfa977a56b5a5a56a6acad5510393170725e71ccd054c1d9ba8afdfbed2e5576d68251505",
            "timestamp": 1789091363,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "22efc7a98e127e4497aeb688ef11095fc751c248e54647df7105b3ca68f9fc53",
            "parameters": {
              "job_id": "job_6752f2eb87",
              "quote_id": "quote_ce119eacd0",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "da1d6464bd8b92d439125c111d0551c4465e1fad6775d9e3a13fe054c0061dd1",
          "decision": {
            "verdict": "allow"
          },
          "id": "fd8336c9ee17a71381a6bc0fef2da6bd1f8ac81d260229a9ba1cd9fa4d24866c",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "51fc9b756a460573e43a600f7a6faaad6b40aa3ea9acc405434f50f98ffd1141",
              "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                  "operation_id": "4ae59d42ba1d7c22a0909296daf37ce88e119e985b061fbe3bc1c6fd57b4c1d7",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "cc7f88d6e2e6862db6a9eb3892d2459aaa9a270378f9d1e970b78b2aaa5153dc",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091363687
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-bbbd-7510-be4f-fb4e9ec6fc84",
            "receipt_context": {
              "request_id": "mcp-edge-req-d1d0621b7139467188262bf10e49e6dc"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "389b7d2a7b6f94da4cfc824cfe4d936a210905c69108f3bf446e16ebfa977a56b5a5a56a6acad5510393170725e71ccd054c1d9ba8afdfbed2e5576d68251505",
          "timestamp": 1789091363,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      },
      {
        "association": {
          "tool_name": "execute_review",
          "session_id": "c89e81d7d89c53ec2ab851037fd335a110c0f573158084b1a025b58266372445",
          "capability_ids": [
            "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
          ],
          "result": {
            "content": [
              {
                "text": "completed security-review for job job_b4939190b9",
                "type": "text"
              }
            ],
            "structuredContent": {
              "artifacts": [
                {
                  "content": "{\n  \"source\": [\n    {\n      \"path\": \"review_input.py\",\n      \"sha256\": \"e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1\",\n      \"bytes\": 325\n    }\n  ],\n  \"findings\": [\n    {\n      \"rule\": \"dynamic-code\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 8,\n      \"recommendation\": \"Replace dynamic Python execution with a bounded parser or explicit operations.\"\n    },\n    {\n      \"rule\": \"shell-command\",\n      \"severity\": \"high\",\n      \"file\": \"review_input.py\",\n      \"line\": 12,\n      \"recommendation\": \"Pass an argument list with shell=False and validate the executable and inputs.\"\n    },\n    {\n      \"rule\": \"weak-digest\",\n      \"severity\": \"medium\",\n      \"file\": \"review_input.py\",\n      \"line\": 16,\n      \"recommendation\": \"Use a modern digest where collision resistance is required.\"\n    }\n  ]\n}\n",
                  "name": "findings.json",
                  "sha256": "9600923b5bdcbb780710ab1c04d41794f837a91a4e6635424434e224bcb9f736"
                },
                {
                  "content": "# Review of payments-api\n\nChecked 1 files; found 3 matches.\n\nChecks: python-call-patterns. This report describes those checks only.\n",
                  "name": "executive-summary.md",
                  "sha256": "c08d1b680a55ddfe68269b7fd8c7a44b5d7146590f7690e11f4d337db311b741"
                },
                {
                  "content": "# Remediation\n\n- [ ] review_input.py:8: Replace dynamic Python execution with a bounded parser or explicit operations.\n- [ ] review_input.py:12: Pass an argument list with shell=False and validate the executable and inputs.\n- [ ] review_input.py:16: Use a modern digest where collision resistance is required.\n",
                  "name": "remediation-checklist.md",
                  "sha256": "0b01d70df3696e5a5ee0600e43045b08ac25ef44b5951eec868613bc4975b97d"
                }
              ],
              "checks": [
                "python-call-patterns"
              ],
              "deliverables": [
                "findings.json",
                "executive-summary.md",
                "remediation-checklist.md"
              ],
              "fulfillment_id": "fulfillment_job_b4939190b9",
              "input_sha256": "b50acdc9aad230fb088dafb6564da9a79f2f305e2b8eb55eb4c3b515d0085dac",
              "job_id": "job_b4939190b9",
              "quote_id": "quote_f05bcf82e2",
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "severity_summary": {
                "critical": 0,
                "high": 2,
                "low": 0,
                "medium": 1
              },
              "source": [
                {
                  "bytes": 325,
                  "path": "review_input.py",
                  "sha256": "e369e32bb57c5c41d8a08587363149b71ed90a7c8a0823dde006e8c429a8f9e1"
                }
              ],
              "status": "completed_with_findings",
              "target": "payments-api"
            },
            "isError": false
          },
          "receipt_id": "36301f6b7b885e4df662f39b421c916912bbe291bd2f795b42f4a80f397c4b2c",
          "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c",
          "arguments": {
            "job_id": "job_b4939190b9",
            "quote_id": "quote_f05bcf82e2",
            "service_family": "security-review",
            "requested_scope": "hotfix-review",
            "target": "payments-api",
            "release_window": null
          },
          "is_error": false,
          "edge_base_url": "http://127.0.0.1:44539",
          "receipt": {
            "action": {
              "parameter_hash": "04bece28d275d38fe2c3e13b4d37fd91ae9b7857fe752747bc7b800dcc853ce8",
              "parameters": {
                "job_id": "job_b4939190b9",
                "quote_id": "quote_f05bcf82e2",
                "release_window": null,
                "requested_scope": "hotfix-review",
                "service_family": "security-review",
                "target": "payments-api"
              }
            },
            "boundary_class": "prevent",
            "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
            "content_hash": "c079260f73ab69d480488718d666d80504f7c9f82467603517465d40f04b0355",
            "decision": {
              "verdict": "allow"
            },
            "id": "36301f6b7b885e4df662f39b421c916912bbe291bd2f795b42f4a80f397c4b2c",
            "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
            "metadata": {
              "admission_operation": {
                "compensation_status": "not_compensated",
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "operation_id": "bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                "projected_dispatch_state": "terminal",
                "projected_operation_version": 8,
                "projected_state": "completed",
                "request_binding_hash": "3914305a74bcb9752964f614561b3b85078a090ac33ad8ff3bd9ecbb7c27d65d",
                "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c",
                "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
                "retained_dispatch_commit": {
                  "committed_version": 6,
                  "coordinator_lease_epoch": 1,
                  "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "provider_attempt": {
                    "attempt_id": "attempt:bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                    "operation_id": "bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                    "transport_id": "kernel-tool-server:provider-security-review",
                    "transport_key_epoch": 1
                  },
                  "store_fence": {
                    "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                    "owner_epoch": 1,
                    "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                  }
                },
                "schema": "chio.admission-receipt.v1",
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                },
                "tool_outcome_id": "e789c5e7c501db79b53ceace4d4ed5e21508cd615b9b6ef4107d2eae139c3438",
                "tool_outcome_version": 2,
                "trusted_time_unix_ms": 1789091365017
              },
              "attribution": {
                "delegation_depth": 0,
                "grant_index": 1,
                "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
                "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
              },
              "chio_receipt_signing_nonce": "rcpt-01a08e27-c0ef-71c0-b487-634921ca791e",
              "receipt_context": {
                "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c"
              }
            },
            "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
            "receipt_kind": "mediated_decision",
            "redaction_mode": "none",
            "signature": "bc2e2d0638612177830b4dd972b26d1ea0d214b1b9f67c6ee1a29c60588a023da23b70e8f8fbf93eca380e7a2c00f6172b3e8db4deec17260d165946af7bb90f",
            "timestamp": 1789091365,
            "tool_name": "execute_review",
            "tool_origin": "caller_executed",
            "tool_server": "provider-security-review",
            "trust_level": "mediated"
          },
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab"
        },
        "receipt": {
          "action": {
            "parameter_hash": "04bece28d275d38fe2c3e13b4d37fd91ae9b7857fe752747bc7b800dcc853ce8",
            "parameters": {
              "job_id": "job_b4939190b9",
              "quote_id": "quote_f05bcf82e2",
              "release_window": null,
              "requested_scope": "hotfix-review",
              "service_family": "security-review",
              "target": "payments-api"
            }
          },
          "boundary_class": "prevent",
          "capability_id": "cap-01a08e27-54f8-7550-9d12-b424c89778ab",
          "content_hash": "c079260f73ab69d480488718d666d80504f7c9f82467603517465d40f04b0355",
          "decision": {
            "verdict": "allow"
          },
          "id": "36301f6b7b885e4df662f39b421c916912bbe291bd2f795b42f4a80f397c4b2c",
          "kernel_key": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "metadata": {
            "admission_operation": {
              "compensation_status": "not_compensated",
              "coordinator_lease_epoch": 1,
              "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
              "operation_id": "bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
              "projected_dispatch_state": "terminal",
              "projected_operation_version": 8,
              "projected_state": "completed",
              "request_binding_hash": "3914305a74bcb9752964f614561b3b85078a090ac33ad8ff3bd9ecbb7c27d65d",
              "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c",
              "request_namespace_digest": "335aca5ce53248361cca41223598f2a0b904cf5d3a0fb792e65c799d06467930",
              "retained_dispatch_commit": {
                "committed_version": 6,
                "coordinator_lease_epoch": 1,
                "coordinator_lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "provider_attempt": {
                  "attempt_id": "attempt:bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                  "operation_id": "bef741dd580d8cfc6e69e444fe87a5bf3b37e0942ce0d5cfcf5506b7e07d3f64",
                  "transport_id": "kernel-tool-server:provider-security-review",
                  "transport_key_epoch": 1
                },
                "store_fence": {
                  "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                  "owner_epoch": 1,
                  "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
                }
              },
              "schema": "chio.admission-receipt.v1",
              "store_fence": {
                "lease_id": "01a08e27-4d7e-7e33-8262-27e65d7ed514",
                "owner_epoch": 1,
                "store_uuid": "01a08e27-4c04-7e61-a7dc-19dd1ea5b8cc"
              },
              "tool_outcome_id": "e789c5e7c501db79b53ceace4d4ed5e21508cd615b9b6ef4107d2eae139c3438",
              "tool_outcome_version": 2,
              "trusted_time_unix_ms": 1789091365017
            },
            "attribution": {
              "delegation_depth": 0,
              "grant_index": 1,
              "issuer_key": "c78ea039359d4c0b3d7da82df263d09a6be98bd552e69910c910ab5080d177eb",
              "subject_key": "d0e10e416bfa13d77ead2086cf2af2b27a9a404a1af70677775447da67e2d576"
            },
            "chio_receipt_signing_nonce": "rcpt-01a08e27-c0ef-71c0-b487-634921ca791e",
            "receipt_context": {
              "request_id": "mcp-edge-req-e11eccdbef5343019381db65ffbf035c"
            }
          },
          "policy_hash": "92a87c7cedea75a5e4007ae28fc6ac2e9916c7b2586cdc5ef96a462de6fb75ac",
          "receipt_kind": "mediated_decision",
          "redaction_mode": "none",
          "signature": "bc2e2d0638612177830b4dd972b26d1ea0d214b1b9f67c6ee1a29c60588a023da23b70e8f8fbf93eca380e7a2c00f6172b3e8db4deec17260d165946af7bb90f",
          "timestamp": 1789091365,
          "tool_name": "execute_review",
          "tool_origin": "caller_executed",
          "tool_server": "provider-security-review",
          "trust_level": "mediated"
        },
        "verification": {
          "signature_valid": true,
          "parameter_hash_valid": true,
          "receipt_id_valid": true,
          "decision": "allow",
          "receipt_kind": "mediated_decision",
          "boundary_class": "prevent",
          "trust_level": "mediated",
          "result": "Authorized",
          "authorized": true,
          "signer_key_hex": "0a9321ffeeba35691cdb3a280cb74f3b0761817fa62229e9a3753919034d2ce2",
          "signer_trusted": true,
          "ok": true
        }
      }
    ]
  }
}