{"agentActionEvents":[{"actorRef":"user:local","agentRef":"codex:deploy-check","confidence":0.86,"evidenceRefs":["runtime-codex-thread-9f1a","usage:codex:deploy-check"],"id":"action-codex-deploy-1","operationClass":"execute_command","outcome":"denied","privacyClass":"metadata","projectRef":"\/Users\/demo\/projects\/example","provenance":{"collectedAt":"2026-07-31T17:40:05Z","collectorId":"beproof.codex-history","collectorVersion":"1.0.4","contentHash":"sha256:8fd7efba54f81889a9973f42dbd16eb95ec75ca8fbb0f6ce1f2e2f090c8bc002","deviceOrRuntimeRef":"device:local-mac","ingestedAt":"2026-07-31T17:41:00Z","sourceProduct":"codex","sourceRecordId":"thread-9f1a","transformationChain":["read_local_history","redact_secrets","normalize_agent_action_event"]},"runtimeInstanceRef":"device:local-mac","sourceEventId":"thread-9f1a","sourceProduct":"codex","sourceType":"local_history","targetRef":"repo:example\/deploy","timestamp":"2026-07-31T17:40:00Z","toolRef":"shell"}],"appVersion":"0.1.0","contractVersion":"v0.2.7","coverageGaps":[],"enforcementEvents":[{"actionEventRef":"action-codex-deploy-1","confidence":0.95,"enforcedBy":"external-control:example-gateway","evidenceRefs":["external:enforcement:enf-77"],"id":"enf-1","policyDecisionRef":"policy-dec-1","provenance":{"collectedAt":"2026-07-31T17:40:03Z","collectorId":"beproof.external-control-adapter","collectorVersion":"0.1.0","deviceOrRuntimeRef":"device:local-mac","ingestedAt":"2026-07-31T17:41:12Z","sourceProduct":"example-gateway","sourceRecordId":"enf-77","transformationChain":["ingest_external_enforcement","normalize_enforcement_event"]},"result":"succeeded","timestamp":"2026-07-31T17:40:02Z"}],"evidenceLinks":[{"confidence":0.9,"fromRef":"action-codex-deploy-1","fromRole":"action","id":"link-action-policy-codex-block","linkClass":"causal","provenance":{"collectedAt":"2026-07-31T17:41:10Z","collectorId":"beproof.external-control-adapter","collectorVersion":"0.1.0","ingestedAt":"2026-07-31T17:41:12Z","sourceProduct":"example-gateway","sourceRecordId":"pd-77","transformationChain":["ingest_external_policy_decision","link_shared_action_event_ref"]},"reason":"Shared actionEventRef between action and policy decision","toRef":"policy-dec-1","toRole":"policy_decision"},{"confidence":0.95,"fromRef":"policy-dec-1","fromRole":"policy_decision","id":"link-policy-enforcement-codex-block","linkClass":"causal","provenance":{"collectedAt":"2026-07-31T17:40:03Z","collectorId":"beproof.external-control-adapter","collectorVersion":"0.1.0","ingestedAt":"2026-07-31T17:41:12Z","sourceProduct":"example-gateway","sourceRecordId":"enf-77","transformationChain":["ingest_external_enforcement","link_policy_decision_ref"]},"reason":"Linked policyDecisionRef between decision and enforcement","toRef":"enf-1","toRole":"enforcement"}],"generatedAt":"2026-07-31T18:00:00Z","incidentRef":"action-codex-deploy-1","manifest":{"appVersion":"0.1.0","artifactSHA256":"8127375c7707a74bfde02f431159e2dd37aba893f6d758bb6d43189893d7a12a","contractVersion":"v0.2.7","generatedAt":"2026-08-03T12:00:00Z","incidentRef":"action-codex-deploy-1","manifestHash":"0908b2b65f42703f834a76f92a0b744444bba145e9734a2a39bce4ad30df9adb","policyPackVersion":"1.2.2","signature":"SIe3OUdPiwl3LwYMOgvifUTRMGjANT3RKYrt8zCyjPEZz\/lwmIGVbM+wsWI1k3MNgnIKbT1BkMkd8diDxpQNAw==","signatureAlgorithm":"ed25519-v1","signingKeyId":"9ad87613db74e013ba423b66050b0cd9","signingPublicKey":"tHSQ09GJvW8f2+F62g8NCUc8hGMtf0H\/8I+HFSEpPog=","version":"1.0"},"payloadKind":"incident_evidence_bundle","policyDecisionEvents":[{"actionEventRef":"action-codex-deploy-1","confidence":0.9,"decidedBy":"external-control:example-gateway","decision":"deny","evidenceRefs":["external:policy-decision:pd-77"],"id":"policy-dec-1","policyRef":"policy:external-dlp-write","provenance":{"collectedAt":"2026-07-31T17:40:02Z","collectorId":"beproof.external-control-adapter","collectorVersion":"0.1.0","deviceOrRuntimeRef":"device:local-mac","ingestedAt":"2026-07-31T17:41:10Z","sourceProduct":"example-gateway","sourceRecordId":"pd-77","transformationChain":["ingest_external_policy_decision","normalize_policy_decision_event"]},"timestamp":"2026-07-31T17:40:01Z"}],"policyPackVersion":"1.2.2","sourceInventory":[{"collectorId":"beproof.codex-history","collectorVersion":"0.1.0","detail":"Local Codex action evidence collected.","freshness":"recent","lastAttemptAt":"2026-07-31T17:41:00Z","lastSuccessfulCollectionAt":"2026-07-31T17:41:00Z","sourceProduct":"codex","status":"healthy"},{"collectorId":"beproof.external-control-adapter","collectorVersion":"0.1.0","detail":"External control fixture imported.","freshness":"recent","lastAttemptAt":"2026-07-31T17:41:12Z","lastSuccessfulCollectionAt":"2026-07-31T17:41:12Z","sourceProduct":"example-gateway","status":"healthy"}],"transformationChain":["read_local_history","redact_secrets","normalize_agent_action_event","ingest_external_policy_decision","normalize_policy_decision_event","ingest_external_enforcement","normalize_enforcement_event","link_shared_action_event_ref","link_policy_decision_ref"]}