{
  "recorded_at": "2026-09-24T02:49:16.983396+00:00",
  "source_commit": "fae09e76a6e81f12f63ea971760f56f274417f44",
  "environment": "isolated local integration; in-process gateway and settlement; real loopback provider HTTP; ephemeral databases and keys",
  "real_components": [
    "gateway request signature, grants, scopes, budget and replay enforcement",
    "key revocation admin API",
    "settlement ledger and reserve/capture/release",
    "http_json target adapter and real sample-provider HTTP endpoint",
    "receipt signing and standalone verification"
  ],
  "fixtures": [
    "policy response",
    "trust score",
    "provenance confidence",
    "15-cent price",
    "fictional provider dataset",
    "injected HTTP 503 for provider failure"
  ],
  "limitations": [
    "No staging execution or real provider integration demonstrated",
    "No customer/row/field entitlement enforcement demonstrated",
    "No production money or credentials used",
    "Provider-call counter observes only this isolated route",
    "Missing-completion behavior is covered separately by focused tests, not this execute flow"
  ],
  "checks": [
    {
      "case": "allowed",
      "passed": true,
      "http_status": 200,
      "execution_status": "EXECUTED",
      "reason": "test rule",
      "verification_status": "VERIFIED",
      "request_id": "receipt-rallowed",
      "provider_calls": 1,
      "settlement": "CAPTURED",
      "receipt_source": "execute response"
    },
    {
      "case": "replayed",
      "passed": true,
      "http_status": 200,
      "execution_status": "DENIED",
      "reason": "Replay blocked: request_id or nonce already used",
      "verification_status": "REPLAY_BLOCKED",
      "request_id": "receipt-rallowed",
      "provider_calls": 0,
      "settlement": null,
      "receipt_source": null
    },
    {
      "case": "over-budget",
      "passed": true,
      "http_status": 200,
      "execution_status": "DENIED",
      "reason": "Price exceeds max_price_cents",
      "verification_status": "VERIFIED",
      "request_id": "receipt-rover-budget",
      "provider_calls": 0,
      "settlement": "NOT_RESERVED",
      "receipt_source": "execute response"
    },
    {
      "case": "wrong-scope",
      "passed": true,
      "http_status": 200,
      "execution_status": "DENIED",
      "reason": "Contract scope gate: missing ['dataset:read']",
      "verification_status": "VERIFIED",
      "request_id": "receipt-rwrong-scope",
      "provider_calls": 0,
      "settlement": "NOT_RESERVED",
      "receipt_source": "execute response"
    },
    {
      "case": "provider-failed",
      "passed": true,
      "http_status": 502,
      "execution_status": "FAILED",
      "reason": null,
      "verification_status": null,
      "request_id": "receipt-rprovider-failed",
      "provider_calls": 1,
      "settlement": "RELEASED",
      "receipt_source": "subsequent admin receipt lookup"
    },
    {
      "case": "before-revocation",
      "passed": true,
      "http_status": 200,
      "execution_status": "EXECUTED",
      "reason": "test rule",
      "verification_status": "VERIFIED",
      "request_id": "receipt-rbefore-revocation",
      "provider_calls": 1,
      "settlement": "CAPTURED",
      "receipt_source": "execute response"
    },
    {
      "case": "revoked",
      "passed": true,
      "http_status": 200,
      "execution_status": "DENIED",
      "reason": "GateCoreAI Key has been revoked",
      "verification_status": "REVOKED",
      "request_id": "receipt-rrevoked",
      "provider_calls": 0,
      "settlement": "NOT_RESERVED",
      "receipt_source": "execute response"
    },
    {
      "case": "verified",
      "passed": true,
      "exit_code": 0,
      "verification": {
        "computed_payload_sha256": "5cab12dcf77e59f6f18819822f13e283b550ef71b683590405e56c787f51205d",
        "key_found": true,
        "key_id": "receipt-test",
        "payload_hash_match": true,
        "reasons": [],
        "receipt_version": 3,
        "request_binding": {
          "agent_signature_valid": true,
          "computed_request_sha256": "981939acf4d5a52f0e0aa945660648c2901f298beec470aa55c1cc8661af30ab",
          "expected_request_sha256": "981939acf4d5a52f0e0aa945660648c2901f298beec470aa55c1cc8661af30ab",
          "matched": true,
          "reasons": []
        },
        "signature_valid": true,
        "valid": true
      }
    },
    {
      "case": "tamper-detected",
      "passed": true,
      "exit_code": 1,
      "verification": {
        "computed_payload_sha256": "88ffde18c6d01208823be42cfbffb26827c1eee422fbb1feafc161ae20b1b998",
        "key_found": true,
        "key_id": "receipt-test",
        "payload_hash_match": false,
        "reasons": [
          "PAYLOAD_HASH_MISMATCH",
          "SIGNATURE_INVALID"
        ],
        "receipt_version": 3,
        "request_binding": {
          "agent_signature_valid": true,
          "computed_request_sha256": "981939acf4d5a52f0e0aa945660648c2901f298beec470aa55c1cc8661af30ab",
          "expected_request_sha256": "981939acf4d5a52f0e0aa945660648c2901f298beec470aa55c1cc8661af30ab",
          "matched": true,
          "reasons": []
        },
        "signature_valid": false,
        "valid": false
      }
    }
  ],
  "passed": true
}