{
  "bundle_version": "v0.2",
  "bundle_id": "bundle-ecosystem-82c7eb67041b4a494d3a7016ee549cac",
  "bundle_hash_sha3_384": "504fb87ca6bde1b2d4555869cab65131c12e7a0190e4d6e198c29e559298db28fa983a3cf59854911d5460227572d6db",
  "cryptographic_profile": "commercial",
  "issued_at_ns": 1717496132000000000,
  "issuer_role_id": "h33-ecosystem-orchestrator-prod-key-1",
  "model_identity_ref": {
    "publisher_key_fingerprint": "66577a9963e1e89042fc60ce40f69c5ce66cba7daf1db7042df9d508c9b8a01d"
  },
  "query": {
    "query_id": "q-cloud-cost-reduction-q2-2026",
    "agent_name": "AI Agent Ecosystem Orchestrator",
    "agent_version": "v2.0.4",
    "agent_intent": "execute_cloud_spend_reduction_plan",
    "trigger_event": "ceo_quarterly_objective_set",
    "agent_count_participating": 8,
    "human_count_participating": 7,
    "system_count_participating": 4,
    "vendor_count_participating": 2
  },
  "answer": {
    "result_text": "Approved and executed 12% cloud spend reduction plan for Q2 2026. Outcome validated at 13% actual reduction across the quarter.",
    "result_text_hash_sha3_256": "12010ef046597f1f5f7ec7661da6ef238e87f193158d92502801dec8d567b49e",
    "decision_type": "approved_ecosystem_outcome",
    "business_objective": "Reduce cloud spend by 12% in Q2",
    "realized_outcome": "13% reduction validated"
  },
  "authorities": [
    {
      "authority_id": "policy-ceo-quarterly-objective-q2-2026",
      "holder_role_id": "h33-ecosystem-orchestrator-prod-key-1",
      "holder_pubkey_fingerprint": "226a969f334f4aaaabd0971cc5831e46ad3d63173607cfdd55a2355485b16fb1",
      "valid_from_ns": 1714521600000000000,
      "valid_until_ns": 1730419200000000000,
      "scope_hash": "73767042d4a5322b3fac3f7d35431d88ecbf10ba4515cef2a03d069f2b8e58f8",
      "authority_capability_signature": {
        "algorithm": "ML-DSA-65",
        "key_id": "h33-eco-orchestrator-prod-auth-key-1",
        "bytes_hex": "preview-authority-signature-bytes"
      }
    }
  ],
  "corpus_pin": {
    "corpus_id": "enterprise-cloud-infrastructure-q2-2026",
    "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
    "corpus_pin_receipt_id": "r-corpus-eco-001",
    "corpus_authority_pubkey_fingerprint": "b92926128b5dadaf44d2447f6808bdef86586098d7293859eafcc7d82e18d0b3"
  },
  "decisions": [
    {
      "decision_id": "d-eco-cloud-spend-reduction-001",
      "decision_kind": "approved_ecosystem_outcome",
      "execution_ns": 1717496132000000000,
      "authority_binding": {
        "authority_id_used": "policy-ceo-quarterly-objective-q2-2026",
        "authority_check_receipt_id": "r-auth-eco-001"
      },
      "policy_bind": {
        "policy_hash": "2681110ac1366d78b5903561331a8e0cfdc22d63faa57d18406bf39f0049d0c2",
        "policy_commitment_ns": 1717496131900000000,
        "model_invocation_id": "miv-eco-orchestrator-2026-q2",
        "commitment_receipt_id": "r-policy-commit-eco-001",
        "commitment_signature": {
          "algorithm": "ML-DSA-65",
          "key_id": "h33-eco-policy-commit-key-1",
          "bytes_hex": "preview-policy-commitment-signature-bytes"
        }
      },
      "pipeline_dag": {
        "policy_required_stages": [
          {
            "stage_name": "ceo_agent_objective",
            "stage_hash": "stage-ceo-objective-v1"
          },
          {
            "stage_name": "finance_agent_budget_policy",
            "stage_hash": "stage-finance-budget-v1"
          },
          {
            "stage_name": "procurement_agent_vendor_changes",
            "stage_hash": "stage-procurement-vendors-v1"
          },
          {
            "stage_name": "security_agent_vendor_review",
            "stage_hash": "stage-security-review-v1"
          },
          {
            "stage_name": "compliance_agent_policy_check",
            "stage_hash": "stage-compliance-check-v1"
          },
          {
            "stage_name": "human_approver_signoff",
            "stage_hash": "stage-human-signoff-v1"
          },
          {
            "stage_name": "execution_agent_apply_changes",
            "stage_hash": "stage-execution-apply-v1"
          },
          {
            "stage_name": "monitoring_agent_validate_outcome",
            "stage_hash": "stage-monitoring-validate-v1"
          }
        ],
        "actual_stage_receipts": [
          {
            "stage_name": "ceo_agent_objective",
            "stage_hash": "stage-ceo-objective-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1001,
              "receipt_id": "r-eco-1001"
            },
            "ts_ns": 1717496132100000000,
            "stage_input_hash": "in-quarter-budget-target",
            "stage_output_hash": "out-objective-reduce-cloud-12pct",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-ceo-agent-key",
              "bytes_hex": "preview-stage-ceo_agent_objective-signature-bytes"
            }
          },
          {
            "stage_name": "finance_agent_budget_policy",
            "stage_hash": "stage-finance-budget-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1002,
              "receipt_id": "r-eco-1002"
            },
            "ts_ns": 1717496132200000000,
            "stage_input_hash": "out-objective-reduce-cloud-12pct",
            "stage_output_hash": "out-finance-budget-policy-q2",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-finance-agent-key",
              "bytes_hex": "preview-stage-finance_agent_budget_policy-signature-bytes"
            }
          },
          {
            "stage_name": "procurement_agent_vendor_changes",
            "stage_hash": "stage-procurement-vendors-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1003,
              "receipt_id": "r-eco-1003"
            },
            "ts_ns": 1717496132300000000,
            "stage_input_hash": "out-finance-budget-policy-q2",
            "stage_output_hash": "out-vendor-change-proposal",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-procurement-agent-key",
              "bytes_hex": "preview-stage-procurement_agent_vendor_changes-signature-bytes"
            }
          },
          {
            "stage_name": "security_agent_vendor_review",
            "stage_hash": "stage-security-review-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1004,
              "receipt_id": "r-eco-1004"
            },
            "ts_ns": 1717496132400000000,
            "stage_input_hash": "out-vendor-change-proposal",
            "stage_output_hash": "out-security-cleared",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-security-agent-key",
              "bytes_hex": "preview-stage-security_agent_vendor_review-signature-bytes"
            }
          },
          {
            "stage_name": "compliance_agent_policy_check",
            "stage_hash": "stage-compliance-check-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1005,
              "receipt_id": "r-eco-1005"
            },
            "ts_ns": 1717496132500000000,
            "stage_input_hash": "out-security-cleared",
            "stage_output_hash": "out-compliance-passed",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-compliance-agent-key",
              "bytes_hex": "preview-stage-compliance_agent_policy_check-signature-bytes"
            }
          },
          {
            "stage_name": "human_approver_signoff",
            "stage_hash": "stage-human-signoff-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1006,
              "receipt_id": "r-eco-1006"
            },
            "ts_ns": 1717496132600000000,
            "stage_input_hash": "out-compliance-passed",
            "stage_output_hash": "out-human-approved-by-cto-cfo",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-human-approval-key",
              "bytes_hex": "preview-stage-human_approver_signoff-signature-bytes"
            }
          },
          {
            "stage_name": "execution_agent_apply_changes",
            "stage_hash": "stage-execution-apply-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1007,
              "receipt_id": "r-eco-1007"
            },
            "ts_ns": 1717496132700000000,
            "stage_input_hash": "out-human-approved-by-cto-cfo",
            "stage_output_hash": "out-changes-applied",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-execution-agent-key",
              "bytes_hex": "preview-stage-execution_agent_apply_changes-signature-bytes"
            }
          },
          {
            "stage_name": "monitoring_agent_validate_outcome",
            "stage_hash": "stage-monitoring-validate-v1",
            "receipt_id": {
              "chain_id": "h33-ecosystem-prod",
              "global_count": 1008,
              "receipt_id": "r-eco-1008"
            },
            "ts_ns": 1717496132800000000,
            "stage_input_hash": "out-changes-applied",
            "stage_output_hash": "out-outcome-validated-13pct",
            "stage_signature": {
              "algorithm": "ML-DSA-65",
              "key_id": "h33-eco-monitoring-agent-key",
              "bytes_hex": "preview-stage-monitoring_agent_validate_outcome-signature-bytes"
            }
          }
        ],
        "dag_root_signature": {
          "algorithm": "ML-DSA-65",
          "key_id": "h33-eco-dag-root-key",
          "bytes_hex": "preview-dag-root-signature-bytes"
        }
      },
      "model_fingerprint": {
        "model_id": "eco-orchestrator-v2.0.4",
        "model_version": "2.0.4",
        "weights_hash_algorithm": "SHA3-256",
        "weights_hash": "cf547b95f4b9ac295a5a7d59620931b126ba241c15bd619e5724951989ac78d2",
        "weights_hash_provenance": "publisher_attested",
        "inference_endpoint_hash": "c98f84f31a4d938e3117a1442e5a5bc164a06dc2ef5e8dd1c8267a2810890b05"
      },
      "evidence_attestation": {
        "evidence_set": [
          {
            "evidence_id": "e1",
            "evidence_kind": "ceo_objective",
            "evidence_description": "CEO Q2 objective: Reduce cloud spend by 12%. Set 2026-04-01.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "ceo-q2-obj-001"
            },
            "retrieval_method_config_hash": "81abfa2b3c8b4c209a72cccf94450eb1987ed32251e29ee7014642b67ea8de9c"
          },
          {
            "evidence_id": "e2",
            "evidence_kind": "finance_budget_policy",
            "evidence_description": "Finance Agent produced Q2 budget policy: ceiling $4.2M, vendor-mix rebalanced toward 60/40 reserved/on-demand.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "fin-policy-q2-001"
            },
            "retrieval_method_config_hash": "7f90689dbfa5ad60d332f0634bf6b71822375e2cd16327f31c8aec40cfb6dadb"
          },
          {
            "evidence_id": "e3",
            "evidence_kind": "procurement_vendor_proposal",
            "evidence_description": "Procurement Agent identified 3 vendor changes: increase reserved capacity with Vendor A, shift workload from Vendor B to Vendor C.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "proc-vendor-proposal-q2"
            },
            "retrieval_method_config_hash": "345017532d4659e82eb23de591d2b18103e6900723168aea1b0ef86040e72680"
          },
          {
            "evidence_id": "e4",
            "evidence_kind": "security_vendor_review",
            "evidence_description": "Security Agent reviewed all 3 vendors: SOC 2 Type 2 current, ISO 27001 valid, breach history clean. Cleared for deployment.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "sec-vendor-review-q2"
            },
            "retrieval_method_config_hash": "a19dccf5ed93914783013d82137a6aa13c23847eab52ed118fe6bb1d68e57fb2"
          },
          {
            "evidence_id": "e5",
            "evidence_kind": "compliance_policy_check",
            "evidence_description": "Compliance Agent validated changes against data-residency policy, regulator-required disclosure policy, and quarterly board-approval policy. All passed.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "comp-check-q2-001"
            },
            "retrieval_method_config_hash": "f3ae5ada0d6dc464782b6bcd2eac70b92fb845eef16d121ec0c75b85bb34c418"
          },
          {
            "evidence_id": "e6",
            "evidence_kind": "human_approval",
            "evidence_description": "Human approval #1 of 2: Marcus Webb (CFO), approved 2026-04-15T14:22Z, MFA-verified, per quarterly board-approval policy.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "human-approval-cfo"
            },
            "retrieval_method_config_hash": "362caeccaa4c594af5d3e6e2ab8e84733af8b1916598a2ac4109694576c041de"
          },
          {
            "evidence_id": "e7",
            "evidence_kind": "human_approval",
            "evidence_description": "Human approval #2 of 2: Sarah Chen (CTO), approved 2026-04-15T14:38Z, MFA-verified, per quarterly board-approval policy.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "human-approval-cto"
            },
            "retrieval_method_config_hash": "362caeccaa4c594af5d3e6e2ab8e84733af8b1916598a2ac4109694576c041de"
          },
          {
            "evidence_id": "e8",
            "evidence_kind": "execution_outcome",
            "evidence_description": "Execution Agent applied vendor changes across 4 systems (compute, storage, networking, observability). Monitoring Agent validated 13% actual cloud spend reduction over Q2.",
            "corpus_item_pointer": {
              "corpus_state_hash": "b246f693fc5512d14043e5ca5b4fe0abb17c814d8175c3039b006c9d16e2dfaa",
              "item_id": "exec-outcome-q2-validated"
            },
            "retrieval_method_config_hash": "8ecdc6ef5d44cb7d2d479c4b074b334cbf74ae5cfe541f402c70e0ebfccd5270"
          }
        ],
        "evidence_set_signature": {
          "algorithm": "ML-DSA-65",
          "key_id": "h33-eco-evidence-key",
          "bytes_hex": "preview-evidence-set-signature-bytes"
        }
      },
      "result_citation_bind": {
        "result_text_hash": "12010ef046597f1f5f7ec7661da6ef238e87f193158d92502801dec8d567b49e",
        "citation_set": {
          "citation_set": [
            {
              "citation_id": "c1",
              "cited_evidence_id": "e1",
              "cited_evidence_doc_name": "ceo-q2-obj-001",
              "cited_span": {
                "start_byte": 0,
                "end_byte": 80
              },
              "answer_span": {
                "start_byte": 0,
                "end_byte": 50
              },
              "citation_strength": "direct_quote",
              "citation_signature": {
                "algorithm": "ML-DSA-65",
                "key_id": "h33-eco-citation-key",
                "bytes_hex": "preview-c1-signature-bytes"
              }
            },
            {
              "citation_id": "c2",
              "cited_evidence_id": "e2",
              "cited_evidence_doc_name": "fin-policy-q2-001",
              "cited_span": {
                "start_byte": 0,
                "end_byte": 120
              },
              "answer_span": {
                "start_byte": 50,
                "end_byte": 100
              },
              "citation_strength": "paraphrase",
              "citation_signature": {
                "algorithm": "ML-DSA-65",
                "key_id": "h33-eco-citation-key",
                "bytes_hex": "preview-c2-signature-bytes"
              }
            },
            {
              "citation_id": "c3",
              "cited_evidence_id": "e8",
              "cited_evidence_doc_name": "exec-outcome-q2-validated",
              "cited_span": {
                "start_byte": 0,
                "end_byte": 100
              },
              "answer_span": {
                "start_byte": 100,
                "end_byte": 180
              },
              "citation_strength": "direct_quote",
              "citation_signature": {
                "algorithm": "ML-DSA-65",
                "key_id": "h33-eco-citation-key",
                "bytes_hex": "preview-c3-signature-bytes"
              }
            }
          ]
        },
        "claim_decomposition": [
          {
            "claim_id": "cl1",
            "claim_text": "Objective was set",
            "supporting_citation_ids": [
              "c1"
            ]
          },
          {
            "claim_id": "cl2",
            "claim_text": "Budget policy was followed",
            "supporting_citation_ids": [
              "c2"
            ]
          },
          {
            "claim_id": "cl3",
            "claim_text": "Outcome was validated",
            "supporting_citation_ids": [
              "c3"
            ]
          }
        ],
        "coverage_mode": "claim_level_coverage",
        "coverage_assertion_signature": {
          "algorithm": "ML-DSA-65",
          "key_id": "h33-eco-coverage-key",
          "bytes_hex": "preview-coverage-signature-bytes"
        }
      },
      "calibrated_abstention_bind": {
        "abstention_decision": "did_not_abstain",
        "confidence_signal_present": true,
        "model_confidence_calibration_ref": {
          "calibration_id": "eco-orchestrator-calibration-q2",
          "provenance": "vendor_self_attested"
        },
        "confidence_signature": {
          "algorithm": "ML-DSA-65",
          "key_id": "h33-eco-confidence-key",
          "bytes_hex": "preview-confidence-signature-bytes"
        }
      }
    }
  ],
  "envelope_signatures": [
    {
      "algorithm": "ML-DSA-65",
      "key_id": "h33-eco-envelope-key-1",
      "bytes_hex": "preview-envelope-mldsa-signature-bytes"
    },
    {
      "algorithm": "FALCON-512",
      "key_id": "h33-eco-envelope-key-1",
      "bytes_hex": "preview-envelope-falcon"
    },
    {
      "algorithm": "SLH-DSA-SHA2-128f",
      "key_id": "h33-eco-envelope-key-1",
      "bytes_hex": "preview-envelope-slhdsa"
    }
  ],
  "_preview_metadata": {
    "preview_label": "v0.2 preview AI Agent Ecosystem bundle \u2014 multi-agent governance demo. One outcome, 8 agents, 7 humans, 4 systems, 2 vendors, ecosystem-wide stats. Signatures preview-grade until R1 ceremony.",
    "ecosystem_stats": {
      "agents_total": 37,
      "agents_participating_in_this_outcome": 8,
      "actions_quarter_to_date": 14293,
      "human_approvals_quarter_to_date": 119,
      "human_approvals_in_this_outcome": 2,
      "policies_enforced_quarter_to_date": 87,
      "policies_evaluated_in_this_outcome": 3,
      "evidence_artifacts_quarter_to_date": 31884,
      "evidence_artifacts_in_this_outcome": 8,
      "verification_status": "verified"
    },
    "participant_breakdown": {
      "ai_agents": [
        {
          "name": "CEO Agent",
          "role": "Sets quarterly objective"
        },
        {
          "name": "Finance Agent",
          "role": "Produces budget policy"
        },
        {
          "name": "Procurement Agent",
          "role": "Identifies vendor changes"
        },
        {
          "name": "Security Agent",
          "role": "Validates vendor security posture"
        },
        {
          "name": "Compliance Agent",
          "role": "Checks policy alignment"
        },
        {
          "name": "Execution Agent",
          "role": "Applies approved changes"
        },
        {
          "name": "Monitoring Agent",
          "role": "Validates outcome"
        },
        {
          "name": "Orchestrator Agent",
          "role": "Coordinates the chain"
        }
      ],
      "humans": [
        {
          "name": "Marcus Webb (CFO)",
          "role": "Approval point 1"
        },
        {
          "name": "Sarah Chen (CTO)",
          "role": "Approval point 2"
        },
        {
          "name": "Anna Reyes (Board Chair)",
          "role": "Receives quarterly report"
        },
        {
          "name": "Jamal Patterson (Audit)",
          "role": "Reviews evidence chain"
        },
        {
          "name": "Priya Singh (Compliance Officer)",
          "role": "Policy-question escalation"
        },
        {
          "name": "David Liu (Security Lead)",
          "role": "Vendor escalation"
        },
        {
          "name": "Elena Kovac (Finance Director)",
          "role": "Budget escalation"
        }
      ],
      "systems": [
        {
          "name": "Compute (AWS EC2 + reserved instances)",
          "role": "Workload host"
        },
        {
          "name": "Storage (S3 + Glacier)",
          "role": "Object store"
        },
        {
          "name": "Networking (CloudFront + VPC)",
          "role": "Edge + interconnect"
        },
        {
          "name": "Observability (Datadog + CloudWatch)",
          "role": "Cost telemetry"
        }
      ],
      "vendors": [
        {
          "name": "Vendor A \u2014 reserved-capacity expansion",
          "role": "Cost-tier shift"
        },
        {
          "name": "Vendor C \u2014 workload migration target",
          "role": "Cost-tier shift"
        }
      ]
    },
    "ask_the_evidence_seed_questions": [
      "Why was the 12% cloud spend reduction approved?",
      "Which agents participated in this outcome?",
      "Which humans approved?",
      "Which policies were evaluated?",
      "What was the actual realized outcome?",
      "Did any agent escalate to a human?"
    ],
    "h33_root_authority_tree": {
      "spec_version": "h33-authority-root-v0.1",
      "spec_doc": "planning/h33-authority-root-build-spec-v0.1.md",
      "root_instruction": {
        "instruction_text": "Reduce cloud spend by 12% in Q2 2026 without degrading production security posture or violating vendor policy.",
        "human_principal": "Anna Reyes (Board Chair) + Marcus Webb (CFO) + Sarah Chen (CTO)",
        "organization": "ExampleCorp",
        "objective": "12% cloud spend reduction",
        "allowed_action_classes": [
          "vendor_substitution",
          "reserved_capacity_purchase",
          "workload_migration",
          "monitoring_configuration_change"
        ],
        "prohibited_action_classes": [
          "security_control_weakening",
          "data_residency_change",
          "compliance_bypass",
          "customer_data_export"
        ],
        "policy_references": [
          "vendor-security-floor-v2026-q1",
          "data-residency-v2026",
          "quarterly-board-approval-v2026"
        ],
        "budget_limits": {
          "ceiling_usd": 4200000,
          "reduction_target_usd": 4200000
        },
        "time_window": {
          "valid_from_ns": 1714521600000000000,
          "valid_until_ns": 1730419200000000000
        },
        "required_approvals": [
          "CFO_OR_BOARD_CHAIR_above_1M_USD",
          "CTO_for_security_impacted_changes"
        ],
        "agent_scope": [
          "finance_agent",
          "procurement_agent",
          "security_agent",
          "compliance_agent",
          "execution_agent",
          "monitoring_agent"
        ],
        "data_access_scope": {
          "plaintext_allowed_for": [
            "vendor_list",
            "po_database"
          ],
          "encrypted_only_for": [
            "customer_data",
            "payroll",
            "patient_records"
          ],
          "metadata_only_for": [
            "internal_security_telemetry"
          ]
        },
        "revocation_rules": {
          "can_revoke": [
            "Board Chair",
            "CFO",
            "CTO"
          ],
          "auto_revoke_on": [
            "objective_drift_detected",
            "scope_exceeded",
            "policy_violation"
          ]
        },
        "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
        "q_sign_signature": {
          "scheme": "threshold_q_sign",
          "threshold": "2_of_3",
          "signers": [
            "Anna Reyes (Board Chair)",
            "Marcus Webb (CFO)",
            "Sarah Chen (CTO)"
          ],
          "algorithm_set": [
            "ML-DSA-65",
            "SLH-DSA-SHA2-128f",
            "FALCON-512"
          ],
          "preview_bytes_hex": "preview-q-sign-root-authorization"
        },
        "h33_74_receipt": {
          "chain_id": "h33-authority-prod",
          "global_count": 1000,
          "receipt_id": "r-root-1000"
        }
      },
      "nodes": [
        {
          "node_id": "n-ceo-objective",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "node_hash": "eea82b0234ab6e35e35f83a549798e0a0fbbde5ec80f488d550623703ee7d1d0cf0eed6d8dfe468b2eb785187e21490d",
          "issuing_agent": "CEO Agent",
          "receiving_agent": "Finance Agent",
          "permitted_action": "translate_objective_to_budget_policy",
          "delegation_scope": {
            "budget_authority_usd_max": 4200000,
            "vendor_classes_allowed": [
              "existing_approved_vendors",
              "vetted_alternatives"
            ]
          },
          "data_access_mode": "metadata_only",
          "policy_constraints": [
            "budget-ceiling-4.2M",
            "vendor-security-floor-v2026-q1"
          ],
          "evidence_requirements": [
            "explicit_budget_ceiling_record"
          ],
          "expiry_ns": 1730419200000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1001,
            "receipt_id": "r-auth-1001"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-ceo-objective-key",
            "bytes_hex": "preview-authority-n-ceo-objective-signature"
          }
        },
        {
          "node_id": "n-finance-budget",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "eea82b0234ab6e35e35f83a549798e0a0fbbde5ec80f488d550623703ee7d1d0cf0eed6d8dfe468b2eb785187e21490d",
          "node_hash": "bedc3229b7ba71090769b61a1ca7e5164e4042b8d013c9826d440e12f509c695c5834a3c6580877b00b672e49bbdfe3a",
          "issuing_agent": "Finance Agent",
          "receiving_agent": "Procurement Agent",
          "permitted_action": "identify_vendor_changes",
          "delegation_scope": {
            "vendor_changes_max": 5,
            "amount_per_change_usd_max": 1500000
          },
          "data_access_mode": "plaintext",
          "policy_constraints": [
            "vendor-security-floor-v2026-q1",
            "data-residency-v2026"
          ],
          "evidence_requirements": [
            "per_vendor_security_attestation"
          ],
          "expiry_ns": 1722470400000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1002,
            "receipt_id": "r-auth-1002"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-finance-budget-key",
            "bytes_hex": "preview-authority-n-finance-budget-signature"
          }
        },
        {
          "node_id": "n-procurement-proposal",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "bedc3229b7ba71090769b61a1ca7e5164e4042b8d013c9826d440e12f509c695c5834a3c6580877b00b672e49bbdfe3a",
          "node_hash": "f5be06db01157b37552fbbd53b23bfb0942f8defd77844a37383761876bcbdff46fa84901b6e68e1081cab0adf627647",
          "issuing_agent": "Procurement Agent",
          "receiving_agent": "Security Agent",
          "permitted_action": "validate_vendor_security_posture",
          "delegation_scope": {
            "vendors_to_review": [
              "Vendor A",
              "Vendor C"
            ]
          },
          "data_access_mode": "plaintext",
          "policy_constraints": [
            "vendor-security-floor-v2026-q1"
          ],
          "evidence_requirements": [
            "SOC2_attestation_current",
            "breach_history_clean_3y"
          ],
          "expiry_ns": 1719964800000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1003,
            "receipt_id": "r-auth-1003"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-procurement-proposal-key",
            "bytes_hex": "preview-authority-n-procurement-proposal-signature"
          }
        },
        {
          "node_id": "n-security-clear",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "f5be06db01157b37552fbbd53b23bfb0942f8defd77844a37383761876bcbdff46fa84901b6e68e1081cab0adf627647",
          "node_hash": "3ce0fdb58034c87580a89e876c6c632434f2f3c4fcfd52e1b492017171173b76f4394cc32e1ed2e3374186fde8640563",
          "issuing_agent": "Security Agent",
          "receiving_agent": "Compliance Agent",
          "permitted_action": "validate_policy_compliance",
          "delegation_scope": {
            "policies_to_validate": [
              "data-residency-v2026",
              "disclosure-v2026",
              "board-approval-v2026"
            ]
          },
          "data_access_mode": "metadata_only",
          "policy_constraints": [
            "data-residency-v2026",
            "quarterly-board-approval-v2026"
          ],
          "evidence_requirements": [
            "per_policy_pass_record"
          ],
          "expiry_ns": 1719964800000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1004,
            "receipt_id": "r-auth-1004"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-security-clear-key",
            "bytes_hex": "preview-authority-n-security-clear-signature"
          }
        },
        {
          "node_id": "n-compliance-pass",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "3ce0fdb58034c87580a89e876c6c632434f2f3c4fcfd52e1b492017171173b76f4394cc32e1ed2e3374186fde8640563",
          "node_hash": "f1ce99f57c708755ed406ea820ba7531daab24fa7b9852b9afe3f93c0d1ea134c6f613a772e2eeebe4304ef0159cb430",
          "issuing_agent": "Compliance Agent",
          "receiving_agent": "CFO + CTO (human)",
          "permitted_action": "request_human_approval",
          "delegation_scope": {
            "approval_authority_required": [
              "CFO",
              "CTO"
            ],
            "policy_basis": "quarterly-board-approval-v2026"
          },
          "data_access_mode": "metadata_only",
          "policy_constraints": [
            "quarterly-board-approval-v2026"
          ],
          "evidence_requirements": [
            "mfa_verified_approval_record_per_human"
          ],
          "expiry_ns": 1719964800000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1005,
            "receipt_id": "r-auth-1005"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-compliance-pass-key",
            "bytes_hex": "preview-authority-n-compliance-pass-signature"
          }
        },
        {
          "node_id": "n-human-approval",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "f1ce99f57c708755ed406ea820ba7531daab24fa7b9852b9afe3f93c0d1ea134c6f613a772e2eeebe4304ef0159cb430",
          "node_hash": "f495494e01d9194c23d7443c807d29c19ba308ad704b650c8652b11fc98aabdec935fc98bb18826055df7cdcc567b00c",
          "issuing_agent": "CFO + CTO (human)",
          "receiving_agent": "Execution Agent",
          "permitted_action": "apply_vendor_changes",
          "delegation_scope": {
            "systems_in_scope": [
              "compute",
              "storage",
              "networking",
              "observability"
            ]
          },
          "data_access_mode": "plaintext",
          "policy_constraints": [
            "vendor-security-floor-v2026-q1",
            "data-residency-v2026"
          ],
          "evidence_requirements": [
            "per_system_change_signature"
          ],
          "expiry_ns": 1722470400000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1006,
            "receipt_id": "r-auth-1006"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-human-approval-key",
            "bytes_hex": "preview-authority-n-human-approval-signature"
          }
        },
        {
          "node_id": "n-execution",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "f495494e01d9194c23d7443c807d29c19ba308ad704b650c8652b11fc98aabdec935fc98bb18826055df7cdcc567b00c",
          "node_hash": "63b52cf896d985fb016b8620e32471c925375d96dde5fdfbbb41db8ec57987c9d7927023bfe7a35759c0a88c5c8a789c",
          "issuing_agent": "Execution Agent",
          "receiving_agent": "Monitoring Agent",
          "permitted_action": "validate_outcome",
          "delegation_scope": {
            "metrics_in_scope": [
              "cloud_spend_usd",
              "vendor_change_completion",
              "policy_violation_count"
            ]
          },
          "data_access_mode": "encrypted",
          "policy_constraints": [
            "data-residency-v2026"
          ],
          "evidence_requirements": [
            "per_metric_attestation",
            "fhe_iq_routing_record"
          ],
          "expiry_ns": 1730419200000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1007,
            "receipt_id": "r-auth-1007"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-execution-key",
            "bytes_hex": "preview-authority-n-execution-signature"
          }
        },
        {
          "node_id": "n-monitoring",
          "root_hash": "37c9409283dbd70101a507f62db924a15228a2edc710968c87f6782c89f0ef116576c4a5ec75cf0070b32f8523cad33a",
          "parent_hash": "63b52cf896d985fb016b8620e32471c925375d96dde5fdfbbb41db8ec57987c9d7927023bfe7a35759c0a88c5c8a789c",
          "node_hash": "38eb13cce36a92ae1799820fbec6db2d7236d6e631c65ecf46884ccf7a34b891cabb6802caac26c12209c5378f04f9d4",
          "issuing_agent": "Monitoring Agent",
          "receiving_agent": "(quarter-end report)",
          "permitted_action": "emit_outcome_attestation",
          "delegation_scope": {
            "report_destination": "board_quarterly_review"
          },
          "data_access_mode": "encrypted",
          "policy_constraints": [
            "data-residency-v2026"
          ],
          "evidence_requirements": [
            "signed_outcome_attestation",
            "fhe_iq_aggregate_signature"
          ],
          "expiry_ns": 1730419200000000000,
          "execution_gate_verdict": "PERMIT",
          "execution_gate_checks": {
            "root_exists": true,
            "parent_exists": true,
            "parent_authorized_delegation": true,
            "action_within_scope": true,
            "time_window_valid": true,
            "policy_constraints_satisfied": true,
            "required_human_approval_present": true,
            "sensitive_data_rules_satisfied": true,
            "revocation_registry_clean": true,
            "q_sign_threshold_valid": true,
            "h33_74_receipt_generated": true
          },
          "verification_receipt": {
            "chain_id": "h33-authority-prod",
            "global_count": 1008,
            "receipt_id": "r-auth-1008"
          },
          "signature": {
            "algorithm": "ML-DSA-65",
            "key_id": "h33-authority-n-monitoring-key",
            "bytes_hex": "preview-authority-n-monitoring-signature"
          }
        }
      ],
      "tree_invariant": "Every node verifies root_hash + parent_hash + node_hash against the authorized tree before its action is permitted. No root, no action. No valid parent, no action.",
      "data_access_mode_summary": {
        "plaintext": [
          "n-finance-budget",
          "n-procurement-proposal",
          "n-human-approval"
        ],
        "encrypted": [
          "n-execution",
          "n-monitoring"
        ],
        "metadata_only": [
          "n-ceo-objective",
          "n-security-clear",
          "n-compliance-pass"
        ]
      },
      "execution_gate_summary": {
        "total_nodes": 8,
        "permitted": 8,
        "rejected": 0
      }
    }
  }
}