agents-shipgate/docs/examples/capability-lock-diff.v0.6.example.json at main · ThreeMoonsLab/agents-shipgate · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
{
  "capability_lock_diff_schema_version": "0.6",
  "experimental": false,
  "base": {
    "path": ".agents-shipgate/capabilities.lock.json",
    "capability_lock_schema_version": "0.5",
    "semantic_capability_set_hash": "2222222222222222222222222222222222222222222222222222222222222222",
    "evidence_set_hash": "3333333333333333333333333333333333333333333333333333333333333333",
    "source_set_hash": "4444444444444444444444444444444444444444444444444444444444444444",
    "capability_count": 1
  },
  "head": {
    "path": "agents-shipgate-reports/capabilities.lock.json",
    "capability_lock_schema_version": "0.5",
    "semantic_capability_set_hash": "5555555555555555555555555555555555555555555555555555555555555555",
    "evidence_set_hash": "6666666666666666666666666666666666666666666666666666666666666666",
    "source_set_hash": "4444444444444444444444444444444444444444444444444444444444444444",
    "capability_count": 2
  },
  "summary": {
    "added": 1,
    "removed": 0,
    "reidentified": 0,
    "changed": 0,
    "evidence_changed": 0,
    "unchanged": 1
  },
  "added": [
    {
      "id": "cap_999999999999",
      "identity": {
        "agent_id": "agent:support",
        "tool_id": "tool:refunds.create",
        "tool_name": "refunds.create",
        "provider": "openapi",
        "operation": "financial_write",
        "subject_kind": "action",
        "resource": [
          "refund"
        ],
        "scope": [
          "refunds:write"
        ]
      },
      "effect": {
        "effect": "financial_write",
        "externally_visible": true,
        "handles_sensitive_data": true,
        "financial": true,
        "code_execution": false,
        "reversibility": "irreversible",
        "idempotency_known": false,
        "high_risk": true
      },
      "authority": {
        "auth_type": "oauth2",
        "credential_mode": "delegated",
        "source": "manifest",
        "scopes": [
          "refunds:write"
        ],
        "broad_scopes": []
      },
      "controls": {
        "approval_required": true,
        "approval_threshold": "security",
        "confirmation_required": true,
        "safeguard_idempotency": true,
        "safeguard_audit_log": true,
        "safeguard_rollback": false,
        "safeguard_dry_run": null,
        "evidence_owner": "payments-platform",
        "evidence_runbook": "runbooks/refunds.md",
        "evidence_approval_ticket": null
      },
      "evidence": {
        "source_type": "openapi",
        "source_id": "support_api",
        "source_ref": "tools/support.openapi.yaml",
        "source_location": null,
        "source_path": "tools/support.openapi.yaml",
        "source_start_line": 88,
        "source_end_line": null,
        "source_start_column": null,
        "source_pointer": "/paths/~1refunds/post",
        "provenance_kind": "static_declaration",
        "confidence": "high"
      },
      "semantic_assessment": {
        "conservative_effect": "financial_write",
        "effect": {
          "status": "declared",
          "confidence": "high",
          "claims": [
            {
              "dimension": "effect",
              "value": "financial_write",
              "confidence": "high",
              "provenance_kind": "static_declaration",
              "source": "manifest.action_surface",
              "source_pointer": "/action_surface/actions/0/effect",
              "evidence": {
                "effect": "financial_write"
              }
            }
          ],
          "issues": []
        },
        "authority": {
          "status": "declared",
          "mode": "scoped",
          "auth_type": "oauth2",
          "credential_mode": "delegated",
          "scopes": [
            "refunds:write"
          ],
          "claims": [
            {
              "dimension": "authority",
              "value": "scoped",
              "confidence": "high",
              "provenance_kind": "static_declaration",
              "source": "manifest.action_surface",
              "source_pointer": "/action_surface/actions/0/authority",
              "evidence": {
                "mode": "scoped"
              }
            }
          ],
          "issues": []
        },
        "pass_eligible": true
      },
      "risk_tags": [
        "financial_action",
        "high_impact",
        "write"
      ],
      "hashes": {
        "identity_hash": "9999999999999999999999999999999999999999999999999999999999999999",
        "binding_hash": "abababababababababababababababababababababababababababababababab",
        "effect_hash": "8888888888888888888888888888888888888888888888888888888888888888",
        "authority_hash": "7777777777777777777777777777777777777777777777777777777777777777",
        "control_hash": "6666666666666666666666666666666666666666666666666666666666666666",
        "schema_hash": "5555555555555555555555555555555555555555555555555555555555555555",
        "risk_hash": "4444444444444444444444444444444444444444444444444444444444444444",
        "evidence_hash": "3333333333333333333333333333333333333333333333333333333333333333"
      }
    }
  ],
  "removed": [],
  "reidentified": [],
  "changed": [],
  "evidence_changed": []
}