{
  "schema_version": "pipelock.replay_manifest.v0",
  "scenario_id": "allowed-safe-read",
  "title": "Allowed: a safe read passes",
  "category": "Allowed by policy",
  "bench_case_id": "url-benign-api-call-001",
  "transport": "fetch",
  "destination_class": "read-only lab documentation endpoint",
  "decisive_verdict": "allow",
  "without": "A bare agent fetches a harmless page. Nothing watches the request.",
  "with": "Pipelock scans the request, finds no secret, injection, or unsafe target, and allows it — then signs a receipt recording the allow decision.",
  "pipelock_version": "3.3.0",
  "policy_hash": "sha256:442b8977b202f99d989520446a43643eebb6e1e06f37db4eae3e3c2ccd8d04f8",
  "signer_key": "91dfb23882a8acf28f624985030ca1798a3efbbcee2bb8bdda8f452612eb755a",
  "captured_at": "2026-08-05T01:16:25Z",
  "packet": {
    "path": "packet.json",
    "sha256": "0ee12eb13a3c5eb629f19f3321d83d97ce063b0b8ece3ccf259cfb3d3ceea881",
    "root_hash": "b6fad7bb5c53a7ce68503ed913de5244cce35428e5bc1b98e53158c956823c5e",
    "receipt_count": 2,
    "final_seq": 1
  },
  "receipts": [
    {
      "chain_seq": 0,
      "action_id": "019fcf7e-41e9-7903-b517-0f7eb47d377f",
      "action_type": "unclassified",
      "verdict": "allow",
      "transport": "receipt_session",
      "target_redacted": "pipelock://session/open"
    },
    {
      "chain_seq": 1,
      "action_id": "019fcf7e-41ee-7856-8025-bb5f2143c779",
      "action_type": "read",
      "verdict": "allow",
      "transport": "fetch",
      "method": "GET",
      "target_redacted": "http://docs.fixture.test:32961/docs/readme"
    }
  ],
  "verifier_command": "pipelock-verifier audit-packet . --key 91dfb23882a8acf28f624985030ca1798a3efbbcee2bb8bdda8f452612eb755a",
  "completeness_note": "A verified chain proves the included mediated decisions were signed by the mediator and untampered. It does NOT prove session completeness, that no event was missed, that the agent was sandboxed, or that traffic could not bypass Pipelock. The prompts and responses shown are unsigned playback metadata; only the receipt chain of decisions is signed."
}