{
  "agent_envelope": {
    "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_envelope_agent",
    "envelope_size": 2,
    "expected_in": [
      "review_transfer_request",
      "classify_risk"
    ],
    "expected_out_denied": [
      "approve_transfer",
      "move_assets",
      "grant_authority"
    ],
    "granted_by_delegator": "princ_customer_9",
    "in_set_complete": true,
    "out_set_fully_denied": true,
    "policy": "pol_envelope_agent_v1",
    "principal": "princ_ai_envelope_agent_001",
    "scope_in_envelope": [
      "review_transfer_request",
      "classify_risk"
    ]
  },
  "claim": "The agent's operating boundary — its envelope — is reconstructable from signed canonical events. Every IN-envelope capability appears in the agent's scope; no OUT-of-envelope capability does. The human supervisor retains the OUT capabilities.",
  "determinism_check": {
    "match": true,
    "r1_state_id": "b52fe565185a057fdb69a153756a954469a9bff9c35d6c36f1b430b14cedae66",
    "r2_state_id": "b52fe565185a057fdb69a153756a954469a9bff9c35d6c36f1b430b14cedae66",
    "verify_state_id_self_consistent": true
  },
  "human_supervisor": {
    "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_envelope_supervisor",
    "policy": "pol_envelope_supervisor_v1",
    "principal": "princ_customer_9",
    "retains_capabilities": [
      "supervise_agent",
      "approve_transfer",
      "move_assets",
      "grant_authority"
    ]
  },
  "input": {
    "event_count": 4,
    "replay_until_ms": 1800000000000,
    "tenant_id": "tenant_agent_envelope_44962d9b-25f5-5622-bd9a-98d5580bb8a2",
    "tenant_root": "princ_root_agent_envelope_44962d9b-25f5-5622-bd9a-98d5580bb8a2"
  },
  "proof_id": "first-agent-authority-envelope",
  "regulator_question": {
    "answer": "Exactly these capabilities: [\"review_transfer_request\", \"classify_risk\"]. Not these: [\"approve_transfer\", \"move_assets\", \"grant_authority\"].",
    "question": "What exactly was this agent allowed to do at T?",
    "reconstructable_from": "canonical event log alone (no platform-state trust required)"
  },
  "result": {
    "active_grants": [
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_envelope_agent",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_customer_9",
        "granted_to": "princ_ai_envelope_agent_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_envelope_supervisor",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_root_agent_envelope_44962d9b-25f5-5622-bd9a-98d5580bb8a2",
        "granted_to": "princ_customer_9"
      }
    ],
    "excluded_authorities": [],
    "explanations": [
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_envelope_agent",
        "included": true,
        "reason": "Granted by princ_customer_9 to princ_ai_envelope_agent_001; policy pol_envelope_agent_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_envelope_supervisor",
        "included": true,
        "reason": "Granted by princ_root_agent_envelope_44962d9b-25f5-5622-bd9a-98d5580bb8a2 to princ_customer_9; policy pol_envelope_supervisor_v1; chain to root verified."
      }
    ],
    "state_id": "b52fe565185a057fdb69a153756a954469a9bff9c35d6c36f1b430b14cedae66",
    "verdict": "Valid"
  },
  "use_case": "Agentic management (L2) for tokenization platforms, transfer agents, fund administrators, insurers, and AI governance buyers"
}