{
  "asl_query_suite": {
    "agents_with_approve_transfer": {
      "count": 1,
      "q": "agents_with_capability(\"approve_transfer\")",
      "result": [
        "princ_customer_9"
      ],
      "significance": "Only the human supervisor holds the highest-authority capability."
    },
    "agents_with_classify_market_risk": {
      "count": 1,
      "q": "agents_with_capability(\"classify_market_risk\")",
      "result": [
        "princ_market_risk_sub_001"
      ]
    },
    "agents_with_compliance_policy": {
      "count": 2,
      "q": "agents_with_policy(\"pol_compliance_hierarchy_v1\")",
      "result": [
        "princ_compliance_agent_001",
        "princ_kyc_sub_agent_001"
      ]
    },
    "agents_with_review_policy": {
      "count": 2,
      "q": "agents_with_policy(\"pol_reviewer_hierarchy_v1\")",
      "result": [
        "princ_reviewer_agent_001",
        "princ_sub_reviewer_agent_001"
      ]
    },
    "agents_with_review_transfer_request": {
      "count": 1,
      "q": "agents_with_capability(\"review_transfer_request\")",
      "result": [
        "princ_reviewer_agent_001"
      ]
    },
    "agents_with_risk_policy": {
      "count": 3,
      "q": "agents_with_policy(\"pol_risk_hierarchy_v1\")",
      "result": [
        "princ_credit_risk_sub_001",
        "princ_market_risk_sub_001",
        "princ_risk_agent_001"
      ]
    },
    "authority_path_from_kyc": {
      "depth": 5,
      "q": "authority_path(princ_kyc_sub_agent_001)",
      "result": [
        "princ_kyc_sub_agent_001",
        "princ_compliance_agent_001",
        "princ_agent_coordinator_001",
        "princ_customer_9",
        "princ_root_hierarchy_44962d9b-25f5-5622-bd9a-98d5580bb8a2"
      ]
    },
    "authority_path_from_market_risk": {
      "depth": 5,
      "q": "authority_path(princ_market_risk_sub_001)",
      "result": [
        "princ_market_risk_sub_001",
        "princ_risk_agent_001",
        "princ_agent_coordinator_001",
        "princ_customer_9",
        "princ_root_hierarchy_44962d9b-25f5-5622-bd9a-98d5580bb8a2"
      ]
    },
    "blast_radius_of_coordinator": {
      "q": "blast_radius(princ_agent_coordinator_001)",
      "result": {
        "origin": "princ_agent_coordinator_001",
        "reachable_agents": [
          "princ_compliance_agent_001",
          "princ_credit_risk_sub_001",
          "princ_kyc_sub_agent_001",
          "princ_market_risk_sub_001",
          "princ_reviewer_agent_001",
          "princ_risk_agent_001",
          "princ_sub_reviewer_agent_001"
        ],
        "reachable_capabilities": [
          "aggregate_risk_score",
          "classify_credit_risk",
          "classify_market_risk",
          "delegate_specialized_review",
          "request_credit_risk_analysis",
          "request_kyc_check",
          "request_market_risk_analysis",
          "review_high_value_transfer",
          "review_transfer_request",
          "score_counterparty_credit",
          "score_market_volatility",
          "verify_identity_documents",
          "verify_jurisdictional_compliance",
          "verify_kyc_status"
        ],
        "reachable_policies": [
          "pol_compliance_hierarchy_v1",
          "pol_reviewer_hierarchy_v1",
          "pol_risk_hierarchy_v1"
        ]
      },
      "significance": "If the coordinator is compromised, the attacker reaches 7 agents and their capabilities — but NOT approve_transfer (held by the human upstream)."
    },
    "blast_radius_of_risk_agent": {
      "q": "blast_radius(princ_risk_agent_001)",
      "result": {
        "origin": "princ_risk_agent_001",
        "reachable_agents": [
          "princ_credit_risk_sub_001",
          "princ_market_risk_sub_001"
        ],
        "reachable_capabilities": [
          "classify_credit_risk",
          "classify_market_risk",
          "score_counterparty_credit",
          "score_market_volatility"
        ],
        "reachable_policies": [
          "pol_risk_hierarchy_v1"
        ]
      },
      "significance": "Risk agent compromise reaches only the two specialized risk sub-agents."
    },
    "descendants_of_compliance": {
      "count": 1,
      "q": "descendants(princ_compliance_agent_001)",
      "result": [
        "princ_kyc_sub_agent_001"
      ]
    },
    "descendants_of_human": {
      "count": 8,
      "q": "descendants(princ_customer_9)",
      "result": [
        "princ_agent_coordinator_001",
        "princ_compliance_agent_001",
        "princ_credit_risk_sub_001",
        "princ_kyc_sub_agent_001",
        "princ_market_risk_sub_001",
        "princ_reviewer_agent_001",
        "princ_risk_agent_001",
        "princ_sub_reviewer_agent_001"
      ]
    },
    "descendants_of_risk_agent": {
      "count": 2,
      "q": "descendants(princ_risk_agent_001)",
      "result": [
        "princ_credit_risk_sub_001",
        "princ_market_risk_sub_001"
      ]
    },
    "leaves": {
      "count": 4,
      "q": "leaves()",
      "result": [
        "princ_credit_risk_sub_001",
        "princ_kyc_sub_agent_001",
        "princ_market_risk_sub_001",
        "princ_sub_reviewer_agent_001"
      ]
    }
  },
  "asl_surface_v1": [
    "descendants(p)",
    "leaves()",
    "agents_with_capability(cap)",
    "agents_with_policy(pol)",
    "authority_path(p)",
    "blast_radius(p)"
  ],
  "claim": "A tenant-scoped agent hierarchy of arbitrary depth is reconstructable from signed canonical events, and the authority graph is searchable through Authority Search Language v1 — descendants, leaves, capability lookup, policy lookup, authority path, and blast radius.",
  "determinism_check": {
    "match": true,
    "r1_state_id": "2a4bf5f6832962b0879ad228a1126042e976b8ec28d85ad43d7b90fbb3aa6217",
    "r2_state_id": "2a4bf5f6832962b0879ad228a1126042e976b8ec28d85ad43d7b90fbb3aa6217"
  },
  "hierarchy_invariants": {
    "all_leaves_have_no_descendants": true,
    "approve_transfer_uniquely_held_by_human": true,
    "every_chain_terminates_at_tenant_root": true,
    "no_agent_escapes_delegated_capability": true,
    "no_agent_escapes_tenant": true
  },
  "hierarchy_tree": {
    "leaves": [
      "princ_sub_reviewer_agent_001",
      "princ_market_risk_sub_001",
      "princ_credit_risk_sub_001",
      "princ_kyc_sub_agent_001"
    ],
    "level_0_tenant_root": "princ_root_hierarchy_44962d9b-25f5-5622-bd9a-98d5580bb8a2",
    "level_1_human": {
      "children": [
        "princ_agent_coordinator_001"
      ],
      "principal": "princ_customer_9"
    },
    "level_2_coordinator": {
      "children": [
        "princ_reviewer_agent_001",
        "princ_risk_agent_001",
        "princ_compliance_agent_001"
      ],
      "principal": "princ_agent_coordinator_001"
    },
    "level_3_compliance": {
      "children": [
        "princ_kyc_sub_agent_001"
      ],
      "principal": "princ_compliance_agent_001"
    },
    "level_3_reviewer": {
      "children": [
        "princ_sub_reviewer_agent_001"
      ],
      "principal": "princ_reviewer_agent_001"
    },
    "level_3_risk": {
      "children": [
        "princ_market_risk_sub_001",
        "princ_credit_risk_sub_001"
      ],
      "principal": "princ_risk_agent_001"
    }
  },
  "input": {
    "event_count": 14,
    "leaf_count": 4,
    "max_chain_depth": 5,
    "principal_count": 9,
    "replay_until_ms": 1800000000000,
    "tenant_id": "tenant_hierarchy_44962d9b-25f5-5622-bd9a-98d5580bb8a2",
    "tenant_root": "princ_root_hierarchy_44962d9b-25f5-5622-bd9a-98d5580bb8a2"
  },
  "proof_id": "first-tenant-scoped-agent-hierarchy",
  "result": {
    "active_grants": [
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_compliance",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_agent_coordinator_001",
        "granted_to": "princ_compliance_agent_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_coordinator",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_customer_9",
        "granted_to": "princ_agent_coordinator_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_credit_risk",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_risk_agent_001",
        "granted_to": "princ_credit_risk_sub_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_kyc",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_compliance_agent_001",
        "granted_to": "princ_kyc_sub_agent_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_market_risk",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_risk_agent_001",
        "granted_to": "princ_market_risk_sub_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_reviewer",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_agent_coordinator_001",
        "granted_to": "princ_reviewer_agent_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_risk",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_agent_coordinator_001",
        "granted_to": "princ_risk_agent_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_sub_reviewer",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_reviewer_agent_001",
        "granted_to": "princ_sub_reviewer_agent_001"
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_supervisor",
        "effective_expiry_at_ms": 1812016000000,
        "granted_by": "princ_root_hierarchy_44962d9b-25f5-5622-bd9a-98d5580bb8a2",
        "granted_to": "princ_customer_9"
      }
    ],
    "explanations": [
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_compliance",
        "included": true,
        "reason": "Granted by princ_agent_coordinator_001 to princ_compliance_agent_001; policy pol_compliance_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_coordinator",
        "included": true,
        "reason": "Granted by princ_customer_9 to princ_agent_coordinator_001; policy pol_coordinator_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_credit_risk",
        "included": true,
        "reason": "Granted by princ_risk_agent_001 to princ_credit_risk_sub_001; policy pol_risk_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_kyc",
        "included": true,
        "reason": "Granted by princ_compliance_agent_001 to princ_kyc_sub_agent_001; policy pol_compliance_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_market_risk",
        "included": true,
        "reason": "Granted by princ_risk_agent_001 to princ_market_risk_sub_001; policy pol_risk_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_reviewer",
        "included": true,
        "reason": "Granted by princ_agent_coordinator_001 to princ_reviewer_agent_001; policy pol_reviewer_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_risk",
        "included": true,
        "reason": "Granted by princ_agent_coordinator_001 to princ_risk_agent_001; policy pol_risk_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_sub_reviewer",
        "included": true,
        "reason": "Granted by princ_reviewer_agent_001 to princ_sub_reviewer_agent_001; policy pol_reviewer_hierarchy_v1; chain to root verified."
      },
      {
        "authority_id": "auth_44962d9b-25f5-5622-bd9a-98d5580bb8a2_h_supervisor",
        "included": true,
        "reason": "Granted by princ_root_hierarchy_44962d9b-25f5-5622-bd9a-98d5580bb8a2 to princ_customer_9; policy pol_supervisor_hierarchy_v1; chain to root verified."
      }
    ],
    "state_id": "2a4bf5f6832962b0879ad228a1126042e976b8ec28d85ad43d7b90fbb3aa6217",
    "verdict": "Valid"
  }
}