Every field in a record exists for a specific forensic reason. Click any field in the JSON to see what it proves and why it matters. Toggle between decorator and auto-instrument capture layers. Run the simulated verification CLI.
org:acme-lending, no real applicant. It carries no RFC 3161 token, so it evidences content rather than time. The design-partner substrate signs in software; production signs inside a FIPS 140-2 Level 3 HSM, with the same algorithm and the same schema.Click any highlighted field to see what it proves →
Every field in the record schema exists for a specific forensic reason. None are padding. Each maps to at least one named regulatory control.
| Field | Type / Value | Forensic purpose |
|---|---|---|
| 01record_id | UUID string | Globally unique identifier for this artifact. |
| 02record_version | semver | Schema version of this record. |
| 03evidence_tier | TIER-A / B / C | Evidence grade: TIER-A, TIER-B or TIER-C. |
| 04decision_kind | enum | What kind of decision this record describes. |
| 05capture_layer | BUSINESS_LAYER / LLM_LAYER | Where in the call stack this was captured. |
| 06consequential | boolean | Whether this is a regulated consequential decision. |
| 07deployment_mode | enum | Trust model this artifact was produced under. |
| 08created_at | RFC 3339 UTC | When the substrate sealed this record. |
| 09principal_identity | string | The actor the substrate recorded as deciding. |
| 10action_type | string | The declared class of action. |
| 11authorization_token_id | UUID string | The single-use token issued before execution. |
| 12input_hash | SHA3-256 | SHA3-256 over the canonical form of the agent's input. |
| 13availability_policy | enum | What happens if the evidence service is unreachable. |
| 14policy_version_hash | SHA3-256 | Hash of the policy in force at decision time. |
| 15model_name | string | The model as identified by the provider. |
| 16model_provider | string | Who served the model. |
| 17model_version_hash | SHA3-256 | Hash pinning the model version actually used. |
| 18full_prompt_snapshot | string | The prompt as the model received it. |
| 19output_pre_postprocess | string | The model's raw output, before any post-processing. |
| 20execution_result | string | The outcome that was acted on. |
| 21causality_chain_hash | SHA3-256 | Binding over this record's provenance envelope. |
| 22provenance | envelope | Envelope: where this record sits in a workflow. |
| 23governance_context | envelope | Envelope: who is accountable and under what regime. |
| 24execution_context | envelope | Envelope: how the decision was actually produced. |
| 25tool_call_log | array | Every tool the agent invoked, in order. |
| 26rag_evidence_bundle | array | The retrieved material the decision drew on. |
| 27instrumentation_coverage | number | Fraction of the run that was instrumented. |
| 28lock_verification_latency_ms | number | Time to confirm the WORM lock. |
| 29registry_validation_status | enum | Whether the agent was in the registry at seal. |
| 30sdk_binary_sha3 | SHA3-256 | Hash of the SDK binary that produced this record. |
| 31sdk_hash_layer | enum | Where that SDK hash was established. |
| 32signing_key_id | hex(64) | Fingerprint of the Ed25519 public key that signed this. |
| 33signing_attestation | hex(128) | The Ed25519 signature over the other 32 fields. |
Every field above is in the sample record you can download and verify.