@odingard/guardian-sdk 0.1.0 → 0.2.0

package/dist-dts/contracts/receipt.d.ts

@@ -0,0 +1,3126 @@
+import { z } from "zod";
+/**
+ * WO-020 portable authority receipt.
+ *
+ * A receipt is a self-contained, signed projection of one governed request:
+ * the canonical action the kernel evaluated, the decision, the human approval
+ * (when required), the issued capability, the execution record and its
+ * verified effect, and the complete evidence chain — all bound by one Ed25519
+ * signature from Guardian's receipt-signing key. An independent verifier needs
+ * only this document and the published verification keys; no Guardian
+ * credential, database, or service access is required.
+ */
+export declare const PORTABLE_RECEIPT_FORMAT = "greceipt.v1";
+export declare const PORTABLE_RECEIPT_DOMAIN = "odingard.guardian.receipt.v1";
+export declare const ReceiptIdSchema: z.core.$ZodBranded<z.ZodString, "ReceiptId", "out">;
+export declare const ReceiptKeyIdSchema: z.ZodString;
+/** RFC 8037 Ed25519 JWK (public parts only) — the published verifier key. */
+export declare const ReceiptVerificationJwkSchema: z.ZodObject<{
+    kty: z.ZodLiteral<"OKP">;
+    crv: z.ZodLiteral<"Ed25519">;
+    kid: z.ZodString;
+    use: z.ZodLiteral<"sig">;
+    alg: z.ZodLiteral<"EdDSA">;
+    x: z.ZodString;
+}, z.core.$strict>;
+export declare const ReceiptVerificationKeySetSchema: z.ZodObject<{
+    keys: z.ZodArray<z.ZodObject<{
+        kty: z.ZodLiteral<"OKP">;
+        crv: z.ZodLiteral<"Ed25519">;
+        kid: z.ZodString;
+        use: z.ZodLiteral<"sig">;
+        alg: z.ZodLiteral<"EdDSA">;
+        x: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const ReceiptSubjectSchema: z.ZodObject<{
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+    agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+}, z.core.$strict>;
+/**
+ * The runtime the governed request executed on. Today's authority model binds
+ * the agent's declared transport interface and the requested adapter; the
+ * adapter that actually executed is recorded once execution begins.
+ */
+export declare const ReceiptRuntimeSchema: z.ZodObject<{
+    interface: z.ZodEnum<{
+        mcp: "mcp";
+        rest: "rest";
+        internal: "internal";
+    }>;
+    requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+    adapterId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "AdapterId", "out">>;
+}, z.core.$strict>;
+/**
+ * Projection of the chain's decision event: DECISION_RECORDED for kernel
+ * decisions, REQUEST_DENIED for requests denied before the kernel ran
+ * (its requestDeniedDigest fills actionDecisionDigest). Denies outside
+ * the kernel carry gate/failure codes, so DENY admits the full failure
+ * code space, not only the kernel's closed deny enum.
+ */
+export declare const ReceiptDecisionSchema: z.ZodObject<{
+    decision: z.ZodEnum<{
+        ALLOW: "ALLOW";
+        ASK: "ASK";
+        DENY: "DENY";
+    }>;
+    reasonCode: z.ZodUnion<readonly [z.ZodLiteral<"AUTHORIZED">, z.ZodLiteral<"APPROVAL_REQUIRED">, z.ZodEnum<{
+        MALFORMED_INPUT: "MALFORMED_INPUT";
+        TENANT_MISMATCH: "TENANT_MISMATCH";
+        PRINCIPAL_MISMATCH: "PRINCIPAL_MISMATCH";
+        PRINCIPAL_NOT_ACTIVE: "PRINCIPAL_NOT_ACTIVE";
+        AGENT_TENANT_MISMATCH: "AGENT_TENANT_MISMATCH";
+        AGENT_OWNER_MISMATCH: "AGENT_OWNER_MISMATCH";
+        AGENT_MISMATCH: "AGENT_MISMATCH";
+        AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
+        INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
+        AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
+        AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
+        DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
+        GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
+        GRANT_PRINCIPAL_MISMATCH: "GRANT_PRINCIPAL_MISMATCH";
+        GRANT_AGENT_MISMATCH: "GRANT_AGENT_MISMATCH";
+        GRANT_NOT_ACTIVE: "GRANT_NOT_ACTIVE";
+        GRANT_REVOKED: "GRANT_REVOKED";
+        GRANT_NOT_YET_VALID: "GRANT_NOT_YET_VALID";
+        GRANT_EXPIRED: "GRANT_EXPIRED";
+        INVALID_PARENT_LINK: "INVALID_PARENT_LINK";
+        DELEGATION_NOT_ALLOWED: "DELEGATION_NOT_ALLOWED";
+        AUTHORITY_AMPLIFICATION: "AUTHORITY_AMPLIFICATION";
+        ACTION_NOT_ALLOWED: "ACTION_NOT_ALLOWED";
+        RESOURCE_NOT_ALLOWED: "RESOURCE_NOT_ALLOWED";
+        ADAPTER_NOT_ALLOWED: "ADAPTER_NOT_ALLOWED";
+        VALUE_LIMIT_EXCEEDED: "VALUE_LIMIT_EXCEEDED";
+        USE_LIMIT_EXCEEDED: "USE_LIMIT_EXCEEDED";
+        MERCHANT_NOT_ALLOWED: "MERCHANT_NOT_ALLOWED";
+        CATEGORY_NOT_ALLOWED: "CATEGORY_NOT_ALLOWED";
+        RECURRENCE_NOT_ALLOWED: "RECURRENCE_NOT_ALLOWED";
+        BUDGET_NOT_FOUND: "BUDGET_NOT_FOUND";
+        BUDGET_SCOPE_MISMATCH: "BUDGET_SCOPE_MISMATCH";
+        BUDGET_NOT_ACTIVE: "BUDGET_NOT_ACTIVE";
+        BUDGET_EXPIRED: "BUDGET_EXPIRED";
+        BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+        TRANSACTION_LIMIT_EXCEEDED: "TRANSACTION_LIMIT_EXCEEDED";
+    }>, z.ZodString]>;
+    actionDecisionDigest: z.ZodString;
+    decidedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const ReceiptApprovalSchema: z.ZodObject<{
+    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+    state: z.ZodEnum<{
+        revoked: "revoked";
+        pending: "pending";
+        expired: "expired";
+        approved: "approved";
+        denied: "denied";
+        superseded: "superseded";
+        consumed: "consumed";
+    }>;
+    version: z.ZodNumber;
+    approvalDigest: z.ZodString;
+    record: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        binding: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+            tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+            principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+            requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+            correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+            actionDigest: z.ZodString;
+            actionDecisionRecordDigest: z.ZodString;
+            askDecisionDigest: z.ZodString;
+            adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+            presentationDigest: z.ZodString;
+            requestedAtEpochMs: z.ZodNumber;
+            expiresAtEpochMs: z.ZodNumber;
+            eligiblePrincipalIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            requiredFactor: z.ZodOptional<z.ZodEnum<{
+                tap: "tap";
+                passkey: "passkey";
+                biometric: "biometric";
+                "second-device": "second-device";
+                "multi-approver": "multi-approver";
+            }>>;
+            requiredApprovals: z.ZodOptional<z.ZodNumber>;
+            scopeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+            structures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                schema: z.ZodLiteral<"guardian.multiparty.v1">;
+                structureId: z.ZodString;
+                members: z.ZodArray<z.ZodObject<{
+                    memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strict>>;
+                requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"single">;
+                    memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"nOfM">;
+                    n: z.ZodNumber;
+                    members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"unanimous">;
+                    members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"roleQuorum">;
+                    role: z.ZodString;
+                    n: z.ZodNumber;
+                    m: z.ZodNumber;
+                }, z.core.$strict>], "kind">;
+                specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                separationOfDuties: z.ZodOptional<z.ZodObject<{
+                    mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+                }, z.core.$strict>>;
+                temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    expiresAtEpochMs: z.ZodNumber;
+                }, z.core.$strict>>>;
+                delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                }, z.core.$strict>>>;
+                emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                coolingPeriod: z.ZodOptional<z.ZodObject<{
+                    seconds: z.ZodNumber;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>>;
+        }, z.core.$strict>;
+        state: z.ZodEnum<{
+            revoked: "revoked";
+            pending: "pending";
+            expired: "expired";
+            approved: "approved";
+            denied: "denied";
+            superseded: "superseded";
+            consumed: "consumed";
+        }>;
+        version: z.ZodNumber;
+        updatedAtEpochMs: z.ZodNumber;
+        decidedByPrincipalId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+        endorsements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            factor: z.ZodEnum<{
+                tap: "tap";
+                passkey: "passkey";
+                biometric: "biometric";
+                "second-device": "second-device";
+            }>;
+            atEpochMs: z.ZodNumber;
+        }, z.core.$strict>>>;
+        structureApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            decision: z.ZodEnum<{
+                veto: "veto";
+                approve: "approve";
+                deny: "deny";
+            }>;
+            atEpochMs: z.ZodNumber;
+            via: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            emergency: z.ZodOptional<z.ZodLiteral<true>>;
+        }, z.core.$strict>>>;
+        cooling: z.ZodOptional<z.ZodObject<{
+            startedAtEpochMs: z.ZodNumber;
+            endsAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const ReceiptCapabilitySchema: z.ZodObject<{
+    capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+    claims: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        actionDigest: z.ZodString;
+        actionNonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+        audience: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        policy: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+            version: z.ZodNumber;
+        }, z.core.$strict>;
+        evaluatedGrants: z.ZodArray<z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+            version: z.ZodNumber;
+        }, z.core.$strict>>;
+        issuedAtEpochMs: z.ZodNumber;
+        expiresAtEpochMs: z.ZodNumber;
+        maxUses: z.ZodLiteral<1>;
+        keyId: z.core.$ZodBranded<z.ZodString, "CapabilityKeyId", "out">;
+        algorithm: z.ZodLiteral<"HS256">;
+    }, z.core.$strict>;
+    claimsDigest: z.ZodString;
+    state: z.ZodEnum<{
+        revoked: "revoked";
+        expired: "expired";
+        issued: "issued";
+        used: "used";
+    }>;
+}, z.core.$strict>;
+export declare const ReceiptEffectSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        none: "none";
+        failed: "failed";
+        verified: "verified";
+        "outcome-pending": "outcome-pending";
+    }>;
+    terminalEvent: z.ZodNullable<z.ZodEnum<{
+        EXECUTION_ABORTED: "EXECUTION_ABORTED";
+        EFFECT_VERIFIED: "EFFECT_VERIFIED";
+        EXECUTION_FAILED: "EXECUTION_FAILED";
+    }>>;
+    failureCode: z.ZodNullable<z.ZodString>;
+    effectDigest: z.ZodNullable<z.ZodString>;
+    failureDigest: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const ReceiptEvidenceSchema: z.ZodObject<{
+    chain: z.ZodArray<z.ZodObject<{
+        recordHash: z.ZodString;
+        event: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            eventType: z.ZodLiteral<"AUTHENTICATION_RECORDED">;
+            payload: z.ZodObject<{
+                interface: z.ZodEnum<{
+                    mcp: "mcp";
+                    rest: "rest";
+                    internal: "internal";
+                }>;
+                outcome: z.ZodEnum<{
+                    rejected: "rejected";
+                    authenticated: "authenticated";
+                }>;
+                credentialReference: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"ADAPTER_AUTHENTICATION_RECORDED">;
+            payload: z.ZodObject<{
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                outcome: z.ZodLiteral<"authenticated">;
+                credentialReference: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"REQUEST_RECEIVED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"ACTION_NORMALIZED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"DECISION_RECORDED">;
+            payload: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                actionDigest: z.ZodString;
+                actionDecisionDigest: z.ZodString;
+                decision: z.ZodLiteral<"ALLOW">;
+                reasonCode: z.ZodLiteral<"AUTHORIZED">;
+            }, z.core.$strict>, z.ZodObject<{
+                actionDigest: z.ZodString;
+                actionDecisionDigest: z.ZodString;
+                decision: z.ZodLiteral<"ASK">;
+                reasonCode: z.ZodLiteral<"APPROVAL_REQUIRED">;
+            }, z.core.$strict>, z.ZodObject<{
+                actionDigest: z.ZodString;
+                actionDecisionDigest: z.ZodString;
+                decision: z.ZodLiteral<"DENY">;
+                reasonCode: z.ZodEnum<{
+                    MALFORMED_INPUT: "MALFORMED_INPUT";
+                    TENANT_MISMATCH: "TENANT_MISMATCH";
+                    PRINCIPAL_MISMATCH: "PRINCIPAL_MISMATCH";
+                    PRINCIPAL_NOT_ACTIVE: "PRINCIPAL_NOT_ACTIVE";
+                    AGENT_TENANT_MISMATCH: "AGENT_TENANT_MISMATCH";
+                    AGENT_OWNER_MISMATCH: "AGENT_OWNER_MISMATCH";
+                    AGENT_MISMATCH: "AGENT_MISMATCH";
+                    AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
+                    INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
+                    AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
+                    AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
+                    DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
+                    GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
+                    GRANT_PRINCIPAL_MISMATCH: "GRANT_PRINCIPAL_MISMATCH";
+                    GRANT_AGENT_MISMATCH: "GRANT_AGENT_MISMATCH";
+                    GRANT_NOT_ACTIVE: "GRANT_NOT_ACTIVE";
+                    GRANT_REVOKED: "GRANT_REVOKED";
+                    GRANT_NOT_YET_VALID: "GRANT_NOT_YET_VALID";
+                    GRANT_EXPIRED: "GRANT_EXPIRED";
+                    INVALID_PARENT_LINK: "INVALID_PARENT_LINK";
+                    DELEGATION_NOT_ALLOWED: "DELEGATION_NOT_ALLOWED";
+                    AUTHORITY_AMPLIFICATION: "AUTHORITY_AMPLIFICATION";
+                    ACTION_NOT_ALLOWED: "ACTION_NOT_ALLOWED";
+                    RESOURCE_NOT_ALLOWED: "RESOURCE_NOT_ALLOWED";
+                    ADAPTER_NOT_ALLOWED: "ADAPTER_NOT_ALLOWED";
+                    VALUE_LIMIT_EXCEEDED: "VALUE_LIMIT_EXCEEDED";
+                    USE_LIMIT_EXCEEDED: "USE_LIMIT_EXCEEDED";
+                    MERCHANT_NOT_ALLOWED: "MERCHANT_NOT_ALLOWED";
+                    CATEGORY_NOT_ALLOWED: "CATEGORY_NOT_ALLOWED";
+                    RECURRENCE_NOT_ALLOWED: "RECURRENCE_NOT_ALLOWED";
+                    BUDGET_NOT_FOUND: "BUDGET_NOT_FOUND";
+                    BUDGET_SCOPE_MISMATCH: "BUDGET_SCOPE_MISMATCH";
+                    BUDGET_NOT_ACTIVE: "BUDGET_NOT_ACTIVE";
+                    BUDGET_EXPIRED: "BUDGET_EXPIRED";
+                    BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                    TRANSACTION_LIMIT_EXCEEDED: "TRANSACTION_LIMIT_EXCEEDED";
+                }>;
+            }, z.core.$strict>], "decision">;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"REQUEST_DENIED">;
+            payload: z.ZodObject<{
+                decision: z.ZodLiteral<"DENY">;
+                actionDigest: z.ZodNullable<z.ZodString>;
+                requestDeniedDigest: z.ZodString;
+                reasonCode: z.ZodString;
+                decidedAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"APPROVAL_STATE_REFERENCED">;
+            payload: z.ZodObject<{
+                approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                version: z.ZodNumber;
+                state: z.ZodEnum<{
+                    revoked: "revoked";
+                    pending: "pending";
+                    expired: "expired";
+                    approved: "approved";
+                    denied: "denied";
+                    superseded: "superseded";
+                    consumed: "consumed";
+                }>;
+                approvalDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"APPROVAL_PRESENTED">;
+            payload: z.ZodObject<{
+                approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                presentationDigest: z.ZodString;
+                viewerReference: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"APPROVAL_DECISION_RECORDED">;
+            payload: z.ZodObject<{
+                approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                version: z.ZodNumber;
+                decision: z.ZodEnum<{
+                    veto: "veto";
+                    approve: "approve";
+                    deny: "deny";
+                    revoke: "revoke";
+                    endorse: "endorse";
+                    dissent: "dissent";
+                    mature: "mature";
+                }>;
+                actorPrincipalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                actorReference: z.ZodString;
+                presentationDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"APPROVAL_REJECTED">;
+            payload: z.ZodObject<{
+                approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                reasonCode: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"CAPABILITY_STATE_REFERENCED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+                state: z.ZodEnum<{
+                    revoked: "revoked";
+                    expired: "expired";
+                    issued: "issued";
+                    used: "used";
+                }>;
+                capabilityDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"CAPABILITY_REJECTED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                reasonCode: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EXECUTION_ATTEMPTED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+                idempotencyDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EXECUTION_ABORTED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+                reasonCode: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EFFECT_PREPARED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+                preparedDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EFFECT_COMMIT_AUTHORIZED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+                actionDecisionDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EFFECT_OUTCOME_UNKNOWN">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+                reasonCode: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EFFECT_UNRESOLVED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EFFECT_VERIFIED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+                effectDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"EXECUTION_FAILED">;
+            payload: z.ZodObject<{
+                actionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                attemptReference: z.ZodString;
+                failureCode: z.ZodString;
+                failureDigest: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            eventType: z.ZodLiteral<"AUTHORITY_REVOKED">;
+            payload: z.ZodObject<{
+                grantId: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                grantVersion: z.ZodNumber;
+                revocationDigest: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>], "eventType">;
+        sequence: z.ZodNumber;
+        previousRecordHash: z.ZodNullable<z.ZodString>;
+        payloadDigest: z.ZodString;
+        schemaVersion: z.ZodLiteral<1>;
+        id: z.core.$ZodBranded<z.ZodString, "EvidenceId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        eventTimeEpochMs: z.ZodNumber;
+    }, z.core.$strict>>;
+    recordCount: z.ZodNumber;
+    headRecordHash: z.ZodString;
+}, z.core.$strict>;
+export declare const ReceiptProofSchema: z.ZodObject<{
+    algorithm: z.ZodLiteral<"Ed25519">;
+    canonicalization: z.ZodLiteral<"guardian-canonical-json.v1">;
+    domain: z.ZodLiteral<"odingard.guardian.receipt.v1">;
+    keyId: z.ZodString;
+    signature: z.ZodString;
+}, z.core.$strict>;
+/** Everything the signature covers; the proof is the only unsigned field. */
+export declare const PortableReceiptBodySchema: z.ZodObject<{
+    format: z.ZodLiteral<"greceipt.v1">;
+    schemaVersion: z.ZodLiteral<1>;
+    receiptId: z.core.$ZodBranded<z.ZodString, "ReceiptId", "out">;
+    issuedAtEpochMs: z.ZodNumber;
+    subject: z.ZodObject<{
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+    }, z.core.$strict>;
+    runtime: z.ZodObject<{
+        interface: z.ZodEnum<{
+            mcp: "mcp";
+            rest: "rest";
+            internal: "internal";
+        }>;
+        requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        adapterId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "AdapterId", "out">>;
+    }, z.core.$strict>;
+    action: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
+        resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
+        interface: z.ZodEnum<{
+            mcp: "mcp";
+            rest: "rest";
+            internal: "internal";
+        }>;
+        valueCents: z.ZodOptional<z.ZodNumber>;
+        merchantId: z.ZodOptional<z.ZodString>;
+        merchantCategory: z.ZodOptional<z.ZodString>;
+        recurring: z.ZodOptional<z.ZodBoolean>;
+        taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
+        intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
+        planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
+        obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
+        }, z.core.$strict>>>;
+        obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            obligationType: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
+                PENDING_POST_ACTION: "PENDING_POST_ACTION";
+                PENDING_TIME: "PENDING_TIME";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
+                COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
+                RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
+                OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+            dueEpochMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            prerequisiteType: z.ZodString;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
+                MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
+                BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
+                CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
+                ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
+                PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
+                PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
+        sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
+        sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            ruleId: z.ZodString;
+            effect: z.ZodEnum<{
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            matchedActionRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
+            effectiveClassification: z.ZodEnum<{
+                financial: "financial";
+                internal: "internal";
+                public: "public";
+                pii: "pii";
+                phi: "phi";
+                credential: "credential";
+                confidential: "confidential";
+            }>;
+            effect: z.ZodEnum<{
+                allowed: "allowed";
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            expired: z.ZodBoolean;
+        }, z.core.$strict>>>;
+        runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
+            T0_UNKNOWN: "T0_UNKNOWN";
+            T1_IDENTIFIED: "T1_IDENTIFIED";
+            T2_VERIFIED: "T2_VERIFIED";
+            T3_ATTESTED: "T3_ATTESTED";
+            T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+        }>>;
+        enforcementAssurance: z.ZodOptional<z.ZodEnum<{
+            G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+            G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+            G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+            G0_OBSERVED: "G0_OBSERVED";
+            G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+        }>>;
+        approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.multiparty.v1">;
+            structureId: z.ZodString;
+            members: z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"single">;
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"nOfM">;
+                n: z.ZodNumber;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"unanimous">;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"roleQuorum">;
+                role: z.ZodString;
+                n: z.ZodNumber;
+                m: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            separationOfDuties: z.ZodOptional<z.ZodObject<{
+                mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                expiresAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>>>;
+            emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            coolingPeriod: z.ZodOptional<z.ZodObject<{
+                seconds: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
+            applied: z.ZodArray<z.ZodString>;
+            constraints: z.ZodObject<{
+                allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
+                allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    mcp: "mcp";
+                    rest: "rest";
+                    internal: "internal";
+                }>>>;
+                maxValueCents: z.ZodOptional<z.ZodNumber>;
+                maxUses: z.ZodOptional<z.ZodNumber>;
+                minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
+                    T0_UNKNOWN: "T0_UNKNOWN";
+                    T1_IDENTIFIED: "T1_IDENTIFIED";
+                    T2_VERIFIED: "T2_VERIFIED";
+                    T3_ATTESTED: "T3_ATTESTED";
+                    T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+                }>>;
+                minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
+                    G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+                    G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+                    G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+                    G0_OBSERVED: "G0_OBSERVED";
+                    G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        transaction: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.transaction.v1">;
+            stages: z.ZodArray<z.ZodEnum<{
+                PROPOSE: "PROPOSE";
+                PREPARE: "PREPARE";
+                AUTHORIZE: "AUTHORIZE";
+                LOCK: "LOCK";
+                COMMIT: "COMMIT";
+                VERIFY: "VERIFY";
+                SETTLE: "SETTLE";
+            }>>;
+            deadlineMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        compensates: z.ZodOptional<z.ZodObject<{
+            transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
+        }, z.core.$strict>>;
+        physicalFacts: z.ZodOptional<z.ZodObject<{
+            zone: z.ZodOptional<z.ZodString>;
+            speed: z.ZodOptional<z.ZodNumber>;
+            force: z.ZodOptional<z.ZodNumber>;
+            payload: z.ZodOptional<z.ZodNumber>;
+            atEpochMs: z.ZodOptional<z.ZodNumber>;
+            humanDistance: z.ZodOptional<z.ZodNumber>;
+            environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            supervised: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
+            envelopeDigest: z.ZodString;
+            satisfied: z.ZodBoolean;
+            violations: z.ZodArray<z.ZodEnum<{
+                OUT_OF_ZONE: "OUT_OF_ZONE";
+                FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
+                OVER_SPEED: "OVER_SPEED";
+                OVER_FORCE: "OVER_FORCE";
+                OVER_PAYLOAD: "OVER_PAYLOAD";
+                OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
+                PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
+                ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
+                SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
+            }>>;
+            emergencyStopped: z.ZodBoolean;
+            failSafeApplied: z.ZodBoolean;
+        }, z.core.$strict>>;
+        uses: z.ZodNumber;
+        materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, import("./canonical-json.js").CanonicalJsonValue>>, unknown>>;
+        initiatingContext: z.ZodEnum<{
+            agent: "agent";
+            user: "user";
+            scheduled: "scheduled";
+            "external-event": "external-event";
+        }>;
+        authority: z.ZodObject<{
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        issuedAtEpochMs: z.ZodNumber;
+        expiresAtEpochMs: z.ZodNumber;
+        nonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+        requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        purpose: z.ZodString;
+        materialDigest: z.ZodString;
+    }, z.core.$strict>;
+    delegationChain: z.ZodArray<z.ZodObject<{
+        grantId: z.ZodString;
+        version: z.ZodNumber;
+    }, z.core.$strict>>;
+    decision: z.ZodObject<{
+        decision: z.ZodEnum<{
+            ALLOW: "ALLOW";
+            ASK: "ASK";
+            DENY: "DENY";
+        }>;
+        reasonCode: z.ZodUnion<readonly [z.ZodLiteral<"AUTHORIZED">, z.ZodLiteral<"APPROVAL_REQUIRED">, z.ZodEnum<{
+            MALFORMED_INPUT: "MALFORMED_INPUT";
+            TENANT_MISMATCH: "TENANT_MISMATCH";
+            PRINCIPAL_MISMATCH: "PRINCIPAL_MISMATCH";
+            PRINCIPAL_NOT_ACTIVE: "PRINCIPAL_NOT_ACTIVE";
+            AGENT_TENANT_MISMATCH: "AGENT_TENANT_MISMATCH";
+            AGENT_OWNER_MISMATCH: "AGENT_OWNER_MISMATCH";
+            AGENT_MISMATCH: "AGENT_MISMATCH";
+            AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
+            INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
+            AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
+            AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
+            DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
+            GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
+            GRANT_PRINCIPAL_MISMATCH: "GRANT_PRINCIPAL_MISMATCH";
+            GRANT_AGENT_MISMATCH: "GRANT_AGENT_MISMATCH";
+            GRANT_NOT_ACTIVE: "GRANT_NOT_ACTIVE";
+            GRANT_REVOKED: "GRANT_REVOKED";
+            GRANT_NOT_YET_VALID: "GRANT_NOT_YET_VALID";
+            GRANT_EXPIRED: "GRANT_EXPIRED";
+            INVALID_PARENT_LINK: "INVALID_PARENT_LINK";
+            DELEGATION_NOT_ALLOWED: "DELEGATION_NOT_ALLOWED";
+            AUTHORITY_AMPLIFICATION: "AUTHORITY_AMPLIFICATION";
+            ACTION_NOT_ALLOWED: "ACTION_NOT_ALLOWED";
+            RESOURCE_NOT_ALLOWED: "RESOURCE_NOT_ALLOWED";
+            ADAPTER_NOT_ALLOWED: "ADAPTER_NOT_ALLOWED";
+            VALUE_LIMIT_EXCEEDED: "VALUE_LIMIT_EXCEEDED";
+            USE_LIMIT_EXCEEDED: "USE_LIMIT_EXCEEDED";
+            MERCHANT_NOT_ALLOWED: "MERCHANT_NOT_ALLOWED";
+            CATEGORY_NOT_ALLOWED: "CATEGORY_NOT_ALLOWED";
+            RECURRENCE_NOT_ALLOWED: "RECURRENCE_NOT_ALLOWED";
+            BUDGET_NOT_FOUND: "BUDGET_NOT_FOUND";
+            BUDGET_SCOPE_MISMATCH: "BUDGET_SCOPE_MISMATCH";
+            BUDGET_NOT_ACTIVE: "BUDGET_NOT_ACTIVE";
+            BUDGET_EXPIRED: "BUDGET_EXPIRED";
+            BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+            TRANSACTION_LIMIT_EXCEEDED: "TRANSACTION_LIMIT_EXCEEDED";
+        }>, z.ZodString]>;
+        actionDecisionDigest: z.ZodString;
+        decidedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>;
+    approval: z.ZodNullable<z.ZodObject<{
+        approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+        state: z.ZodEnum<{
+            revoked: "revoked";
+            pending: "pending";
+            expired: "expired";
+            approved: "approved";
+            denied: "denied";
+            superseded: "superseded";
+            consumed: "consumed";
+        }>;
+        version: z.ZodNumber;
+        approvalDigest: z.ZodString;
+        record: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            binding: z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+                principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+                requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+                correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+                actionDigest: z.ZodString;
+                actionDecisionRecordDigest: z.ZodString;
+                askDecisionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                policy: z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                    version: z.ZodNumber;
+                }, z.core.$strict>;
+                evaluatedGrants: z.ZodArray<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                    version: z.ZodNumber;
+                }, z.core.$strict>>;
+                presentationDigest: z.ZodString;
+                requestedAtEpochMs: z.ZodNumber;
+                expiresAtEpochMs: z.ZodNumber;
+                eligiblePrincipalIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                requiredFactor: z.ZodOptional<z.ZodEnum<{
+                    tap: "tap";
+                    passkey: "passkey";
+                    biometric: "biometric";
+                    "second-device": "second-device";
+                    "multi-approver": "multi-approver";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+                scopeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+                structures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    schema: z.ZodLiteral<"guardian.multiparty.v1">;
+                    structureId: z.ZodString;
+                    members: z.ZodArray<z.ZodObject<{
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    }, z.core.$strict>>;
+                    requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"single">;
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"nOfM">;
+                        n: z.ZodNumber;
+                        members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"unanimous">;
+                        members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"roleQuorum">;
+                        role: z.ZodString;
+                        n: z.ZodNumber;
+                        m: z.ZodNumber;
+                    }, z.core.$strict>], "kind">;
+                    specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                    veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                    separationOfDuties: z.ZodOptional<z.ZodObject<{
+                        mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+                    }, z.core.$strict>>;
+                    temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                        expiresAtEpochMs: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                        delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    }, z.core.$strict>>>;
+                    emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                    coolingPeriod: z.ZodOptional<z.ZodObject<{
+                        seconds: z.ZodNumber;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>;
+            state: z.ZodEnum<{
+                revoked: "revoked";
+                pending: "pending";
+                expired: "expired";
+                approved: "approved";
+                denied: "denied";
+                superseded: "superseded";
+                consumed: "consumed";
+            }>;
+            version: z.ZodNumber;
+            updatedAtEpochMs: z.ZodNumber;
+            decidedByPrincipalId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            endorsements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                factor: z.ZodEnum<{
+                    tap: "tap";
+                    passkey: "passkey";
+                    biometric: "biometric";
+                    "second-device": "second-device";
+                }>;
+                atEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            structureApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                decision: z.ZodEnum<{
+                    veto: "veto";
+                    approve: "approve";
+                    deny: "deny";
+                }>;
+                atEpochMs: z.ZodNumber;
+                via: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                emergency: z.ZodOptional<z.ZodLiteral<true>>;
+            }, z.core.$strict>>>;
+            cooling: z.ZodOptional<z.ZodObject<{
+                startedAtEpochMs: z.ZodNumber;
+                endsAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    capability: z.ZodNullable<z.ZodObject<{
+        capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+        claims: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+            tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+            principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+            requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+            actionDigest: z.ZodString;
+            actionNonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+            audience: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+            issuedAtEpochMs: z.ZodNumber;
+            expiresAtEpochMs: z.ZodNumber;
+            maxUses: z.ZodLiteral<1>;
+            keyId: z.core.$ZodBranded<z.ZodString, "CapabilityKeyId", "out">;
+            algorithm: z.ZodLiteral<"HS256">;
+        }, z.core.$strict>;
+        claimsDigest: z.ZodString;
+        state: z.ZodEnum<{
+            revoked: "revoked";
+            expired: "expired";
+            issued: "issued";
+            used: "used";
+        }>;
+    }, z.core.$strict>>;
+    execution: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        attemptId: z.core.$ZodBranded<z.ZodString, "AttemptId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+        actionDigest: z.ZodString;
+        adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        provider: z.ZodEnum<{
+            api: "api";
+            tool: "tool";
+            local: "local";
+            guardian: "guardian";
+            gmail: "gmail";
+            gcalendar: "gcalendar";
+            file: "file";
+            protected_data: "protected_data";
+            graph: "graph";
+            clawlink: "clawlink";
+            "payment-sandbox": "payment-sandbox";
+        }>;
+        profile: z.ZodEnum<{
+            "guardian-agent-v1": "guardian-agent-v1";
+            "gmail-split-compose-metadata": "gmail-split-compose-metadata";
+            "gmail-compose-readonly": "gmail-compose-readonly";
+            "graph-readwrite-send": "graph-readwrite-send";
+            "api-bearer-request": "api-bearer-request";
+            "tool-mcp-server": "tool-mcp-server";
+            "gcalendar-events-v1": "gcalendar-events-v1";
+            "payment-sandbox-charge": "payment-sandbox-charge";
+            "file-local-store": "file-local-store";
+            "protected-data-store": "protected-data-store";
+            "local-agent-runtime": "local-agent-runtime";
+            "clawlink-executions": "clawlink-executions";
+        }>;
+        effectKey: z.ZodString;
+        expectedProjectionDigest: z.ZodString;
+        expectedEnvelopeDigest: z.ZodString;
+        state: z.ZodEnum<{
+            unknown: "unknown";
+            verified: "verified";
+            mismatch: "mismatch";
+            "commit-rejected": "commit-rejected";
+            aborted: "aborted";
+            reserved: "reserved";
+            redeemed: "redeemed";
+            preparing: "preparing";
+            prepared: "prepared";
+            committing: "committing";
+            unresolved: "unresolved";
+        }>;
+        version: z.ZodNumber;
+        reservedAtEpochMs: z.ZodNumber;
+        updatedAtEpochMs: z.ZodNumber;
+        commitDeadlineEpochMs: z.ZodNumber;
+        commitLeaseDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+        reconcileDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+        lateReconcileDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+        commitLeaseIssued: z.ZodBoolean;
+        providerObjectRef: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"gmail-draft">;
+            draftId: z.ZodString;
+            messageId: z.ZodString;
+            threadId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"graph-message">;
+            immutableId: z.ZodString;
+            internetMessageId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api-request">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool-call">;
+            callDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gcalendar-plan">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"payment-order">;
+            orderId: z.ZodString;
+            intentId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"file-request">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"protected_data-op">;
+            operationDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-call">;
+            callDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        sentRef: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"gmail-message">;
+            messageId: z.ZodString;
+            threadId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"graph-message">;
+            immutableId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api-response">;
+            status: z.ZodNumber;
+            bodyBytes: z.ZodNumber;
+            headersDigest: z.ZodString;
+            bodyDigest: z.ZodString;
+            bodyPreview: z.ZodString;
+            truncated: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool-response">;
+            operation: z.ZodEnum<{
+                enable: "enable";
+                install: "install";
+                invoke: "invoke";
+            }>;
+            toolName: z.ZodString;
+            status: z.ZodNullable<z.ZodNumber>;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gcalendar-event">;
+            eventId: z.ZodString;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                confirmed: "confirmed";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"payment-charge">;
+            chargeId: z.ZodString;
+            amountCents: z.ZodNumber;
+            currency: z.ZodString;
+            status: z.ZodEnum<{
+                succeeded: "succeeded";
+                refunded: "refunded";
+                returned: "returned";
+                voided: "voided";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"file-effect">;
+            operation: z.ZodEnum<{
+                share: "share";
+                delete: "delete";
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            contentDigest: z.ZodNullable<z.ZodString>;
+            bytes: z.ZodNumber;
+            shareId: z.ZodNullable<z.ZodString>;
+            grantee: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"protected_data-effect">;
+            operation: z.ZodEnum<{
+                view: "view";
+                use: "use";
+                disclose: "disclose";
+                persist: "persist";
+            }>;
+            fieldRef: z.ZodString;
+            valueDigest: z.ZodString;
+            counterparty: z.ZodNullable<z.ZodString>;
+            maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        orphanDraftPossible: z.ZodBoolean;
+        pendingOutcome: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"verified">;
+            sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"gmail-message">;
+                messageId: z.ZodString;
+                threadId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"graph-message">;
+                immutableId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"api-response">;
+                status: z.ZodNumber;
+                bodyBytes: z.ZodNumber;
+                headersDigest: z.ZodString;
+                bodyDigest: z.ZodString;
+                bodyPreview: z.ZodString;
+                truncated: z.ZodBoolean;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"tool-response">;
+                operation: z.ZodEnum<{
+                    enable: "enable";
+                    install: "install";
+                    invoke: "invoke";
+                }>;
+                toolName: z.ZodString;
+                status: z.ZodNullable<z.ZodNumber>;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"gcalendar-event">;
+                eventId: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    confirmed: "confirmed";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"payment-charge">;
+                chargeId: z.ZodString;
+                amountCents: z.ZodNumber;
+                currency: z.ZodString;
+                status: z.ZodEnum<{
+                    succeeded: "succeeded";
+                    refunded: "refunded";
+                    returned: "returned";
+                    voided: "voided";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"file-effect">;
+                operation: z.ZodEnum<{
+                    share: "share";
+                    delete: "delete";
+                    read: "read";
+                    write: "write";
+                }>;
+                path: z.ZodString;
+                contentDigest: z.ZodNullable<z.ZodString>;
+                bytes: z.ZodNumber;
+                shareId: z.ZodNullable<z.ZodString>;
+                grantee: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"protected_data-effect">;
+                operation: z.ZodEnum<{
+                    view: "view";
+                    use: "use";
+                    disclose: "disclose";
+                    persist: "persist";
+                }>;
+                fieldRef: z.ZodString;
+                valueDigest: z.ZodString;
+                counterparty: z.ZodNullable<z.ZodString>;
+                maskedPreview: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"guardian-effect">;
+                operation: z.ZodString;
+                subject: z.ZodNullable<z.ZodString>;
+                status: z.ZodString;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"clawlink-execution">;
+                executionId: z.ZodString;
+                executionStatus: z.ZodLiteral<"succeeded">;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>], "kind">;
+            observedDigest: z.ZodString;
+            effectDigest: z.ZodString;
+            level: z.ZodEnum<{
+                "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+                "post-commit-content": "post-commit-content";
+            }>;
+            observedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mismatch">;
+            code: z.ZodEnum<{
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            observedDigest: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"commit-rejected">;
+            providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+            confirmedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unknown">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"aborted">;
+            code: z.ZodEnum<{
+                SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+                CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+                PREPARE_REJECTED: "PREPARE_REJECTED";
+                PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+                READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+                PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+                COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+                AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+                COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+                ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+                COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+                COMMIT_REJECTED: "COMMIT_REJECTED";
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            orphanDraftPossible: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unresolved">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>], "kind">>;
+        outcome: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"verified">;
+            sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"gmail-message">;
+                messageId: z.ZodString;
+                threadId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"graph-message">;
+                immutableId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"api-response">;
+                status: z.ZodNumber;
+                bodyBytes: z.ZodNumber;
+                headersDigest: z.ZodString;
+                bodyDigest: z.ZodString;
+                bodyPreview: z.ZodString;
+                truncated: z.ZodBoolean;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"tool-response">;
+                operation: z.ZodEnum<{
+                    enable: "enable";
+                    install: "install";
+                    invoke: "invoke";
+                }>;
+                toolName: z.ZodString;
+                status: z.ZodNullable<z.ZodNumber>;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"gcalendar-event">;
+                eventId: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    confirmed: "confirmed";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"payment-charge">;
+                chargeId: z.ZodString;
+                amountCents: z.ZodNumber;
+                currency: z.ZodString;
+                status: z.ZodEnum<{
+                    succeeded: "succeeded";
+                    refunded: "refunded";
+                    returned: "returned";
+                    voided: "voided";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"file-effect">;
+                operation: z.ZodEnum<{
+                    share: "share";
+                    delete: "delete";
+                    read: "read";
+                    write: "write";
+                }>;
+                path: z.ZodString;
+                contentDigest: z.ZodNullable<z.ZodString>;
+                bytes: z.ZodNumber;
+                shareId: z.ZodNullable<z.ZodString>;
+                grantee: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"protected_data-effect">;
+                operation: z.ZodEnum<{
+                    view: "view";
+                    use: "use";
+                    disclose: "disclose";
+                    persist: "persist";
+                }>;
+                fieldRef: z.ZodString;
+                valueDigest: z.ZodString;
+                counterparty: z.ZodNullable<z.ZodString>;
+                maskedPreview: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"guardian-effect">;
+                operation: z.ZodString;
+                subject: z.ZodNullable<z.ZodString>;
+                status: z.ZodString;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"clawlink-execution">;
+                executionId: z.ZodString;
+                executionStatus: z.ZodLiteral<"succeeded">;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>], "kind">;
+            observedDigest: z.ZodString;
+            effectDigest: z.ZodString;
+            level: z.ZodEnum<{
+                "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+                "post-commit-content": "post-commit-content";
+            }>;
+            observedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mismatch">;
+            code: z.ZodEnum<{
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            observedDigest: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"commit-rejected">;
+            providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+            confirmedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unknown">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"aborted">;
+            code: z.ZodEnum<{
+                SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+                CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+                PREPARE_REJECTED: "PREPARE_REJECTED";
+                PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+                READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+                PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+                COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+                AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+                COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+                ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+                COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+                COMMIT_REJECTED: "COMMIT_REJECTED";
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            orphanDraftPossible: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unresolved">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>>;
+    effect: z.ZodObject<{
+        kind: z.ZodEnum<{
+            none: "none";
+            failed: "failed";
+            verified: "verified";
+            "outcome-pending": "outcome-pending";
+        }>;
+        terminalEvent: z.ZodNullable<z.ZodEnum<{
+            EXECUTION_ABORTED: "EXECUTION_ABORTED";
+            EFFECT_VERIFIED: "EFFECT_VERIFIED";
+            EXECUTION_FAILED: "EXECUTION_FAILED";
+        }>>;
+        failureCode: z.ZodNullable<z.ZodString>;
+        effectDigest: z.ZodNullable<z.ZodString>;
+        failureDigest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    evidence: z.ZodObject<{
+        chain: z.ZodArray<z.ZodObject<{
+            recordHash: z.ZodString;
+            event: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                eventType: z.ZodLiteral<"AUTHENTICATION_RECORDED">;
+                payload: z.ZodObject<{
+                    interface: z.ZodEnum<{
+                        mcp: "mcp";
+                        rest: "rest";
+                        internal: "internal";
+                    }>;
+                    outcome: z.ZodEnum<{
+                        rejected: "rejected";
+                        authenticated: "authenticated";
+                    }>;
+                    credentialReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"ADAPTER_AUTHENTICATION_RECORDED">;
+                payload: z.ZodObject<{
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    outcome: z.ZodLiteral<"authenticated">;
+                    credentialReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"REQUEST_RECEIVED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"ACTION_NORMALIZED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"DECISION_RECORDED">;
+                payload: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                    decision: z.ZodLiteral<"ALLOW">;
+                    reasonCode: z.ZodLiteral<"AUTHORIZED">;
+                }, z.core.$strict>, z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                    decision: z.ZodLiteral<"ASK">;
+                    reasonCode: z.ZodLiteral<"APPROVAL_REQUIRED">;
+                }, z.core.$strict>, z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                    decision: z.ZodLiteral<"DENY">;
+                    reasonCode: z.ZodEnum<{
+                        MALFORMED_INPUT: "MALFORMED_INPUT";
+                        TENANT_MISMATCH: "TENANT_MISMATCH";
+                        PRINCIPAL_MISMATCH: "PRINCIPAL_MISMATCH";
+                        PRINCIPAL_NOT_ACTIVE: "PRINCIPAL_NOT_ACTIVE";
+                        AGENT_TENANT_MISMATCH: "AGENT_TENANT_MISMATCH";
+                        AGENT_OWNER_MISMATCH: "AGENT_OWNER_MISMATCH";
+                        AGENT_MISMATCH: "AGENT_MISMATCH";
+                        AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
+                        INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
+                        AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
+                        AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
+                        DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
+                        GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
+                        GRANT_PRINCIPAL_MISMATCH: "GRANT_PRINCIPAL_MISMATCH";
+                        GRANT_AGENT_MISMATCH: "GRANT_AGENT_MISMATCH";
+                        GRANT_NOT_ACTIVE: "GRANT_NOT_ACTIVE";
+                        GRANT_REVOKED: "GRANT_REVOKED";
+                        GRANT_NOT_YET_VALID: "GRANT_NOT_YET_VALID";
+                        GRANT_EXPIRED: "GRANT_EXPIRED";
+                        INVALID_PARENT_LINK: "INVALID_PARENT_LINK";
+                        DELEGATION_NOT_ALLOWED: "DELEGATION_NOT_ALLOWED";
+                        AUTHORITY_AMPLIFICATION: "AUTHORITY_AMPLIFICATION";
+                        ACTION_NOT_ALLOWED: "ACTION_NOT_ALLOWED";
+                        RESOURCE_NOT_ALLOWED: "RESOURCE_NOT_ALLOWED";
+                        ADAPTER_NOT_ALLOWED: "ADAPTER_NOT_ALLOWED";
+                        VALUE_LIMIT_EXCEEDED: "VALUE_LIMIT_EXCEEDED";
+                        USE_LIMIT_EXCEEDED: "USE_LIMIT_EXCEEDED";
+                        MERCHANT_NOT_ALLOWED: "MERCHANT_NOT_ALLOWED";
+                        CATEGORY_NOT_ALLOWED: "CATEGORY_NOT_ALLOWED";
+                        RECURRENCE_NOT_ALLOWED: "RECURRENCE_NOT_ALLOWED";
+                        BUDGET_NOT_FOUND: "BUDGET_NOT_FOUND";
+                        BUDGET_SCOPE_MISMATCH: "BUDGET_SCOPE_MISMATCH";
+                        BUDGET_NOT_ACTIVE: "BUDGET_NOT_ACTIVE";
+                        BUDGET_EXPIRED: "BUDGET_EXPIRED";
+                        BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                        TRANSACTION_LIMIT_EXCEEDED: "TRANSACTION_LIMIT_EXCEEDED";
+                    }>;
+                }, z.core.$strict>], "decision">;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"REQUEST_DENIED">;
+                payload: z.ZodObject<{
+                    decision: z.ZodLiteral<"DENY">;
+                    actionDigest: z.ZodNullable<z.ZodString>;
+                    requestDeniedDigest: z.ZodString;
+                    reasonCode: z.ZodString;
+                    decidedAtEpochMs: z.ZodNumber;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_STATE_REFERENCED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    version: z.ZodNumber;
+                    state: z.ZodEnum<{
+                        revoked: "revoked";
+                        pending: "pending";
+                        expired: "expired";
+                        approved: "approved";
+                        denied: "denied";
+                        superseded: "superseded";
+                        consumed: "consumed";
+                    }>;
+                    approvalDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_PRESENTED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    presentationDigest: z.ZodString;
+                    viewerReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_DECISION_RECORDED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    version: z.ZodNumber;
+                    decision: z.ZodEnum<{
+                        veto: "veto";
+                        approve: "approve";
+                        deny: "deny";
+                        revoke: "revoke";
+                        endorse: "endorse";
+                        dissent: "dissent";
+                        mature: "mature";
+                    }>;
+                    actorPrincipalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    actorReference: z.ZodString;
+                    presentationDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_REJECTED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"CAPABILITY_STATE_REFERENCED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+                    state: z.ZodEnum<{
+                        revoked: "revoked";
+                        expired: "expired";
+                        issued: "issued";
+                        used: "used";
+                    }>;
+                    capabilityDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"CAPABILITY_REJECTED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EXECUTION_ATTEMPTED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    idempotencyDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EXECUTION_ABORTED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_PREPARED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    preparedDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_COMMIT_AUTHORIZED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_OUTCOME_UNKNOWN">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_UNRESOLVED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_VERIFIED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    effectDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EXECUTION_FAILED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    failureCode: z.ZodString;
+                    failureDigest: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"AUTHORITY_REVOKED">;
+                payload: z.ZodObject<{
+                    grantId: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                    grantVersion: z.ZodNumber;
+                    revocationDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>], "eventType">;
+            sequence: z.ZodNumber;
+            previousRecordHash: z.ZodNullable<z.ZodString>;
+            payloadDigest: z.ZodString;
+            schemaVersion: z.ZodLiteral<1>;
+            id: z.core.$ZodBranded<z.ZodString, "EvidenceId", "out">;
+            tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+            principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+            requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+            correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+            eventTimeEpochMs: z.ZodNumber;
+        }, z.core.$strict>>;
+        recordCount: z.ZodNumber;
+        headRecordHash: z.ZodString;
+    }, z.core.$strict>;
+    generatedBy: z.ZodLiteral<"guardian-control-plane">;
+}, z.core.$strict>;
+export declare const PortableAuthorityReceiptSchema: z.ZodObject<{
+    format: z.ZodLiteral<"greceipt.v1">;
+    schemaVersion: z.ZodLiteral<1>;
+    receiptId: z.core.$ZodBranded<z.ZodString, "ReceiptId", "out">;
+    issuedAtEpochMs: z.ZodNumber;
+    subject: z.ZodObject<{
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+    }, z.core.$strict>;
+    runtime: z.ZodObject<{
+        interface: z.ZodEnum<{
+            mcp: "mcp";
+            rest: "rest";
+            internal: "internal";
+        }>;
+        requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        adapterId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "AdapterId", "out">>;
+    }, z.core.$strict>;
+    action: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
+        resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
+        interface: z.ZodEnum<{
+            mcp: "mcp";
+            rest: "rest";
+            internal: "internal";
+        }>;
+        valueCents: z.ZodOptional<z.ZodNumber>;
+        merchantId: z.ZodOptional<z.ZodString>;
+        merchantCategory: z.ZodOptional<z.ZodString>;
+        recurring: z.ZodOptional<z.ZodBoolean>;
+        taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
+        intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
+        planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
+        obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
+        }, z.core.$strict>>>;
+        obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            obligationType: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
+                PENDING_POST_ACTION: "PENDING_POST_ACTION";
+                PENDING_TIME: "PENDING_TIME";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
+                COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
+                RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
+                OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+            dueEpochMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            prerequisiteType: z.ZodString;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
+                MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
+                BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
+                CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
+                ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
+                PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
+                PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
+        sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
+        sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            ruleId: z.ZodString;
+            effect: z.ZodEnum<{
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            matchedActionRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
+            effectiveClassification: z.ZodEnum<{
+                financial: "financial";
+                internal: "internal";
+                public: "public";
+                pii: "pii";
+                phi: "phi";
+                credential: "credential";
+                confidential: "confidential";
+            }>;
+            effect: z.ZodEnum<{
+                allowed: "allowed";
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            expired: z.ZodBoolean;
+        }, z.core.$strict>>>;
+        runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
+            T0_UNKNOWN: "T0_UNKNOWN";
+            T1_IDENTIFIED: "T1_IDENTIFIED";
+            T2_VERIFIED: "T2_VERIFIED";
+            T3_ATTESTED: "T3_ATTESTED";
+            T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+        }>>;
+        enforcementAssurance: z.ZodOptional<z.ZodEnum<{
+            G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+            G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+            G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+            G0_OBSERVED: "G0_OBSERVED";
+            G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+        }>>;
+        approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.multiparty.v1">;
+            structureId: z.ZodString;
+            members: z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"single">;
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"nOfM">;
+                n: z.ZodNumber;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"unanimous">;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"roleQuorum">;
+                role: z.ZodString;
+                n: z.ZodNumber;
+                m: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            separationOfDuties: z.ZodOptional<z.ZodObject<{
+                mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                expiresAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>>>;
+            emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            coolingPeriod: z.ZodOptional<z.ZodObject<{
+                seconds: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
+            applied: z.ZodArray<z.ZodString>;
+            constraints: z.ZodObject<{
+                allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
+                allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    mcp: "mcp";
+                    rest: "rest";
+                    internal: "internal";
+                }>>>;
+                maxValueCents: z.ZodOptional<z.ZodNumber>;
+                maxUses: z.ZodOptional<z.ZodNumber>;
+                minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
+                    T0_UNKNOWN: "T0_UNKNOWN";
+                    T1_IDENTIFIED: "T1_IDENTIFIED";
+                    T2_VERIFIED: "T2_VERIFIED";
+                    T3_ATTESTED: "T3_ATTESTED";
+                    T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+                }>>;
+                minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
+                    G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+                    G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+                    G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+                    G0_OBSERVED: "G0_OBSERVED";
+                    G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        transaction: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.transaction.v1">;
+            stages: z.ZodArray<z.ZodEnum<{
+                PROPOSE: "PROPOSE";
+                PREPARE: "PREPARE";
+                AUTHORIZE: "AUTHORIZE";
+                LOCK: "LOCK";
+                COMMIT: "COMMIT";
+                VERIFY: "VERIFY";
+                SETTLE: "SETTLE";
+            }>>;
+            deadlineMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        compensates: z.ZodOptional<z.ZodObject<{
+            transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
+        }, z.core.$strict>>;
+        physicalFacts: z.ZodOptional<z.ZodObject<{
+            zone: z.ZodOptional<z.ZodString>;
+            speed: z.ZodOptional<z.ZodNumber>;
+            force: z.ZodOptional<z.ZodNumber>;
+            payload: z.ZodOptional<z.ZodNumber>;
+            atEpochMs: z.ZodOptional<z.ZodNumber>;
+            humanDistance: z.ZodOptional<z.ZodNumber>;
+            environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            supervised: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
+            envelopeDigest: z.ZodString;
+            satisfied: z.ZodBoolean;
+            violations: z.ZodArray<z.ZodEnum<{
+                OUT_OF_ZONE: "OUT_OF_ZONE";
+                FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
+                OVER_SPEED: "OVER_SPEED";
+                OVER_FORCE: "OVER_FORCE";
+                OVER_PAYLOAD: "OVER_PAYLOAD";
+                OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
+                PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
+                ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
+                SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
+            }>>;
+            emergencyStopped: z.ZodBoolean;
+            failSafeApplied: z.ZodBoolean;
+        }, z.core.$strict>>;
+        uses: z.ZodNumber;
+        materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, import("./canonical-json.js").CanonicalJsonValue>>, unknown>>;
+        initiatingContext: z.ZodEnum<{
+            agent: "agent";
+            user: "user";
+            scheduled: "scheduled";
+            "external-event": "external-event";
+        }>;
+        authority: z.ZodObject<{
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        issuedAtEpochMs: z.ZodNumber;
+        expiresAtEpochMs: z.ZodNumber;
+        nonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+        requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        purpose: z.ZodString;
+        materialDigest: z.ZodString;
+    }, z.core.$strict>;
+    delegationChain: z.ZodArray<z.ZodObject<{
+        grantId: z.ZodString;
+        version: z.ZodNumber;
+    }, z.core.$strict>>;
+    decision: z.ZodObject<{
+        decision: z.ZodEnum<{
+            ALLOW: "ALLOW";
+            ASK: "ASK";
+            DENY: "DENY";
+        }>;
+        reasonCode: z.ZodUnion<readonly [z.ZodLiteral<"AUTHORIZED">, z.ZodLiteral<"APPROVAL_REQUIRED">, z.ZodEnum<{
+            MALFORMED_INPUT: "MALFORMED_INPUT";
+            TENANT_MISMATCH: "TENANT_MISMATCH";
+            PRINCIPAL_MISMATCH: "PRINCIPAL_MISMATCH";
+            PRINCIPAL_NOT_ACTIVE: "PRINCIPAL_NOT_ACTIVE";
+            AGENT_TENANT_MISMATCH: "AGENT_TENANT_MISMATCH";
+            AGENT_OWNER_MISMATCH: "AGENT_OWNER_MISMATCH";
+            AGENT_MISMATCH: "AGENT_MISMATCH";
+            AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
+            INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
+            AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
+            AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
+            DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
+            GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
+            GRANT_PRINCIPAL_MISMATCH: "GRANT_PRINCIPAL_MISMATCH";
+            GRANT_AGENT_MISMATCH: "GRANT_AGENT_MISMATCH";
+            GRANT_NOT_ACTIVE: "GRANT_NOT_ACTIVE";
+            GRANT_REVOKED: "GRANT_REVOKED";
+            GRANT_NOT_YET_VALID: "GRANT_NOT_YET_VALID";
+            GRANT_EXPIRED: "GRANT_EXPIRED";
+            INVALID_PARENT_LINK: "INVALID_PARENT_LINK";
+            DELEGATION_NOT_ALLOWED: "DELEGATION_NOT_ALLOWED";
+            AUTHORITY_AMPLIFICATION: "AUTHORITY_AMPLIFICATION";
+            ACTION_NOT_ALLOWED: "ACTION_NOT_ALLOWED";
+            RESOURCE_NOT_ALLOWED: "RESOURCE_NOT_ALLOWED";
+            ADAPTER_NOT_ALLOWED: "ADAPTER_NOT_ALLOWED";
+            VALUE_LIMIT_EXCEEDED: "VALUE_LIMIT_EXCEEDED";
+            USE_LIMIT_EXCEEDED: "USE_LIMIT_EXCEEDED";
+            MERCHANT_NOT_ALLOWED: "MERCHANT_NOT_ALLOWED";
+            CATEGORY_NOT_ALLOWED: "CATEGORY_NOT_ALLOWED";
+            RECURRENCE_NOT_ALLOWED: "RECURRENCE_NOT_ALLOWED";
+            BUDGET_NOT_FOUND: "BUDGET_NOT_FOUND";
+            BUDGET_SCOPE_MISMATCH: "BUDGET_SCOPE_MISMATCH";
+            BUDGET_NOT_ACTIVE: "BUDGET_NOT_ACTIVE";
+            BUDGET_EXPIRED: "BUDGET_EXPIRED";
+            BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+            TRANSACTION_LIMIT_EXCEEDED: "TRANSACTION_LIMIT_EXCEEDED";
+        }>, z.ZodString]>;
+        actionDecisionDigest: z.ZodString;
+        decidedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>;
+    approval: z.ZodNullable<z.ZodObject<{
+        approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+        state: z.ZodEnum<{
+            revoked: "revoked";
+            pending: "pending";
+            expired: "expired";
+            approved: "approved";
+            denied: "denied";
+            superseded: "superseded";
+            consumed: "consumed";
+        }>;
+        version: z.ZodNumber;
+        approvalDigest: z.ZodString;
+        record: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            binding: z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+                principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+                requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+                correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+                actionDigest: z.ZodString;
+                actionDecisionRecordDigest: z.ZodString;
+                askDecisionDigest: z.ZodString;
+                adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                policy: z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                    version: z.ZodNumber;
+                }, z.core.$strict>;
+                evaluatedGrants: z.ZodArray<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                    version: z.ZodNumber;
+                }, z.core.$strict>>;
+                presentationDigest: z.ZodString;
+                requestedAtEpochMs: z.ZodNumber;
+                expiresAtEpochMs: z.ZodNumber;
+                eligiblePrincipalIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                requiredFactor: z.ZodOptional<z.ZodEnum<{
+                    tap: "tap";
+                    passkey: "passkey";
+                    biometric: "biometric";
+                    "second-device": "second-device";
+                    "multi-approver": "multi-approver";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+                scopeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+                structures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    schema: z.ZodLiteral<"guardian.multiparty.v1">;
+                    structureId: z.ZodString;
+                    members: z.ZodArray<z.ZodObject<{
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    }, z.core.$strict>>;
+                    requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"single">;
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"nOfM">;
+                        n: z.ZodNumber;
+                        members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"unanimous">;
+                        members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"roleQuorum">;
+                        role: z.ZodString;
+                        n: z.ZodNumber;
+                        m: z.ZodNumber;
+                    }, z.core.$strict>], "kind">;
+                    specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                    veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                    separationOfDuties: z.ZodOptional<z.ZodObject<{
+                        mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+                    }, z.core.$strict>>;
+                    temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                        expiresAtEpochMs: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                        delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    }, z.core.$strict>>>;
+                    emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+                    coolingPeriod: z.ZodOptional<z.ZodObject<{
+                        seconds: z.ZodNumber;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>;
+            state: z.ZodEnum<{
+                revoked: "revoked";
+                pending: "pending";
+                expired: "expired";
+                approved: "approved";
+                denied: "denied";
+                superseded: "superseded";
+                consumed: "consumed";
+            }>;
+            version: z.ZodNumber;
+            updatedAtEpochMs: z.ZodNumber;
+            decidedByPrincipalId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            endorsements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                factor: z.ZodEnum<{
+                    tap: "tap";
+                    passkey: "passkey";
+                    biometric: "biometric";
+                    "second-device": "second-device";
+                }>;
+                atEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            structureApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                decision: z.ZodEnum<{
+                    veto: "veto";
+                    approve: "approve";
+                    deny: "deny";
+                }>;
+                atEpochMs: z.ZodNumber;
+                via: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+                emergency: z.ZodOptional<z.ZodLiteral<true>>;
+            }, z.core.$strict>>>;
+            cooling: z.ZodOptional<z.ZodObject<{
+                startedAtEpochMs: z.ZodNumber;
+                endsAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    capability: z.ZodNullable<z.ZodObject<{
+        capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+        claims: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+            tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+            principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+            requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+            actionDigest: z.ZodString;
+            actionNonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+            audience: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+            issuedAtEpochMs: z.ZodNumber;
+            expiresAtEpochMs: z.ZodNumber;
+            maxUses: z.ZodLiteral<1>;
+            keyId: z.core.$ZodBranded<z.ZodString, "CapabilityKeyId", "out">;
+            algorithm: z.ZodLiteral<"HS256">;
+        }, z.core.$strict>;
+        claimsDigest: z.ZodString;
+        state: z.ZodEnum<{
+            revoked: "revoked";
+            expired: "expired";
+            issued: "issued";
+            used: "used";
+        }>;
+    }, z.core.$strict>>;
+    execution: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        attemptId: z.core.$ZodBranded<z.ZodString, "AttemptId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+        actionDigest: z.ZodString;
+        adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+        provider: z.ZodEnum<{
+            api: "api";
+            tool: "tool";
+            local: "local";
+            guardian: "guardian";
+            gmail: "gmail";
+            gcalendar: "gcalendar";
+            file: "file";
+            protected_data: "protected_data";
+            graph: "graph";
+            clawlink: "clawlink";
+            "payment-sandbox": "payment-sandbox";
+        }>;
+        profile: z.ZodEnum<{
+            "guardian-agent-v1": "guardian-agent-v1";
+            "gmail-split-compose-metadata": "gmail-split-compose-metadata";
+            "gmail-compose-readonly": "gmail-compose-readonly";
+            "graph-readwrite-send": "graph-readwrite-send";
+            "api-bearer-request": "api-bearer-request";
+            "tool-mcp-server": "tool-mcp-server";
+            "gcalendar-events-v1": "gcalendar-events-v1";
+            "payment-sandbox-charge": "payment-sandbox-charge";
+            "file-local-store": "file-local-store";
+            "protected-data-store": "protected-data-store";
+            "local-agent-runtime": "local-agent-runtime";
+            "clawlink-executions": "clawlink-executions";
+        }>;
+        effectKey: z.ZodString;
+        expectedProjectionDigest: z.ZodString;
+        expectedEnvelopeDigest: z.ZodString;
+        state: z.ZodEnum<{
+            unknown: "unknown";
+            verified: "verified";
+            mismatch: "mismatch";
+            "commit-rejected": "commit-rejected";
+            aborted: "aborted";
+            reserved: "reserved";
+            redeemed: "redeemed";
+            preparing: "preparing";
+            prepared: "prepared";
+            committing: "committing";
+            unresolved: "unresolved";
+        }>;
+        version: z.ZodNumber;
+        reservedAtEpochMs: z.ZodNumber;
+        updatedAtEpochMs: z.ZodNumber;
+        commitDeadlineEpochMs: z.ZodNumber;
+        commitLeaseDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+        reconcileDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+        lateReconcileDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+        commitLeaseIssued: z.ZodBoolean;
+        providerObjectRef: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"gmail-draft">;
+            draftId: z.ZodString;
+            messageId: z.ZodString;
+            threadId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"graph-message">;
+            immutableId: z.ZodString;
+            internetMessageId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api-request">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool-call">;
+            callDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gcalendar-plan">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"payment-order">;
+            orderId: z.ZodString;
+            intentId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"file-request">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"protected_data-op">;
+            operationDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-call">;
+            callDigest: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            requestDigest: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        sentRef: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"gmail-message">;
+            messageId: z.ZodString;
+            threadId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"graph-message">;
+            immutableId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api-response">;
+            status: z.ZodNumber;
+            bodyBytes: z.ZodNumber;
+            headersDigest: z.ZodString;
+            bodyDigest: z.ZodString;
+            bodyPreview: z.ZodString;
+            truncated: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool-response">;
+            operation: z.ZodEnum<{
+                enable: "enable";
+                install: "install";
+                invoke: "invoke";
+            }>;
+            toolName: z.ZodString;
+            status: z.ZodNullable<z.ZodNumber>;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gcalendar-event">;
+            eventId: z.ZodString;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                confirmed: "confirmed";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"payment-charge">;
+            chargeId: z.ZodString;
+            amountCents: z.ZodNumber;
+            currency: z.ZodString;
+            status: z.ZodEnum<{
+                succeeded: "succeeded";
+                refunded: "refunded";
+                returned: "returned";
+                voided: "voided";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"file-effect">;
+            operation: z.ZodEnum<{
+                share: "share";
+                delete: "delete";
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            contentDigest: z.ZodNullable<z.ZodString>;
+            bytes: z.ZodNumber;
+            shareId: z.ZodNullable<z.ZodString>;
+            grantee: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"protected_data-effect">;
+            operation: z.ZodEnum<{
+                view: "view";
+                use: "use";
+                disclose: "disclose";
+                persist: "persist";
+            }>;
+            fieldRef: z.ZodString;
+            valueDigest: z.ZodString;
+            counterparty: z.ZodNullable<z.ZodString>;
+            maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        orphanDraftPossible: z.ZodBoolean;
+        pendingOutcome: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"verified">;
+            sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"gmail-message">;
+                messageId: z.ZodString;
+                threadId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"graph-message">;
+                immutableId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"api-response">;
+                status: z.ZodNumber;
+                bodyBytes: z.ZodNumber;
+                headersDigest: z.ZodString;
+                bodyDigest: z.ZodString;
+                bodyPreview: z.ZodString;
+                truncated: z.ZodBoolean;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"tool-response">;
+                operation: z.ZodEnum<{
+                    enable: "enable";
+                    install: "install";
+                    invoke: "invoke";
+                }>;
+                toolName: z.ZodString;
+                status: z.ZodNullable<z.ZodNumber>;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"gcalendar-event">;
+                eventId: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    confirmed: "confirmed";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"payment-charge">;
+                chargeId: z.ZodString;
+                amountCents: z.ZodNumber;
+                currency: z.ZodString;
+                status: z.ZodEnum<{
+                    succeeded: "succeeded";
+                    refunded: "refunded";
+                    returned: "returned";
+                    voided: "voided";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"file-effect">;
+                operation: z.ZodEnum<{
+                    share: "share";
+                    delete: "delete";
+                    read: "read";
+                    write: "write";
+                }>;
+                path: z.ZodString;
+                contentDigest: z.ZodNullable<z.ZodString>;
+                bytes: z.ZodNumber;
+                shareId: z.ZodNullable<z.ZodString>;
+                grantee: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"protected_data-effect">;
+                operation: z.ZodEnum<{
+                    view: "view";
+                    use: "use";
+                    disclose: "disclose";
+                    persist: "persist";
+                }>;
+                fieldRef: z.ZodString;
+                valueDigest: z.ZodString;
+                counterparty: z.ZodNullable<z.ZodString>;
+                maskedPreview: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"guardian-effect">;
+                operation: z.ZodString;
+                subject: z.ZodNullable<z.ZodString>;
+                status: z.ZodString;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"clawlink-execution">;
+                executionId: z.ZodString;
+                executionStatus: z.ZodLiteral<"succeeded">;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>], "kind">;
+            observedDigest: z.ZodString;
+            effectDigest: z.ZodString;
+            level: z.ZodEnum<{
+                "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+                "post-commit-content": "post-commit-content";
+            }>;
+            observedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mismatch">;
+            code: z.ZodEnum<{
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            observedDigest: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"commit-rejected">;
+            providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+            confirmedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unknown">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"aborted">;
+            code: z.ZodEnum<{
+                SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+                CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+                PREPARE_REJECTED: "PREPARE_REJECTED";
+                PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+                READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+                PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+                COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+                AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+                COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+                ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+                COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+                COMMIT_REJECTED: "COMMIT_REJECTED";
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            orphanDraftPossible: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unresolved">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>], "kind">>;
+        outcome: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"verified">;
+            sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"gmail-message">;
+                messageId: z.ZodString;
+                threadId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"graph-message">;
+                immutableId: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"api-response">;
+                status: z.ZodNumber;
+                bodyBytes: z.ZodNumber;
+                headersDigest: z.ZodString;
+                bodyDigest: z.ZodString;
+                bodyPreview: z.ZodString;
+                truncated: z.ZodBoolean;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"tool-response">;
+                operation: z.ZodEnum<{
+                    enable: "enable";
+                    install: "install";
+                    invoke: "invoke";
+                }>;
+                toolName: z.ZodString;
+                status: z.ZodNullable<z.ZodNumber>;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"gcalendar-event">;
+                eventId: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    confirmed: "confirmed";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"payment-charge">;
+                chargeId: z.ZodString;
+                amountCents: z.ZodNumber;
+                currency: z.ZodString;
+                status: z.ZodEnum<{
+                    succeeded: "succeeded";
+                    refunded: "refunded";
+                    returned: "returned";
+                    voided: "voided";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"file-effect">;
+                operation: z.ZodEnum<{
+                    share: "share";
+                    delete: "delete";
+                    read: "read";
+                    write: "write";
+                }>;
+                path: z.ZodString;
+                contentDigest: z.ZodNullable<z.ZodString>;
+                bytes: z.ZodNumber;
+                shareId: z.ZodNullable<z.ZodString>;
+                grantee: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"protected_data-effect">;
+                operation: z.ZodEnum<{
+                    view: "view";
+                    use: "use";
+                    disclose: "disclose";
+                    persist: "persist";
+                }>;
+                fieldRef: z.ZodString;
+                valueDigest: z.ZodString;
+                counterparty: z.ZodNullable<z.ZodString>;
+                maskedPreview: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"guardian-effect">;
+                operation: z.ZodString;
+                subject: z.ZodNullable<z.ZodString>;
+                status: z.ZodString;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"clawlink-execution">;
+                executionId: z.ZodString;
+                executionStatus: z.ZodLiteral<"succeeded">;
+                resultDigest: z.ZodString;
+                detail: z.ZodString;
+            }, z.core.$strict>], "kind">;
+            observedDigest: z.ZodString;
+            effectDigest: z.ZodString;
+            level: z.ZodEnum<{
+                "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+                "post-commit-content": "post-commit-content";
+            }>;
+            observedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mismatch">;
+            code: z.ZodEnum<{
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            observedDigest: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"commit-rejected">;
+            providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+            confirmedAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unknown">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"aborted">;
+            code: z.ZodEnum<{
+                SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+                CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+                PREPARE_REJECTED: "PREPARE_REJECTED";
+                PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+                READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+                PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+                COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+                AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+                COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+                ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+                COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+                COMMIT_REJECTED: "COMMIT_REJECTED";
+                EFFECT_MISMATCH: "EFFECT_MISMATCH";
+                DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+            }>;
+            orphanDraftPossible: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unresolved">;
+            reason: z.ZodEnum<{
+                COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+                COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+                COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+                COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+                COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+                COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+                REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+                AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+                VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+            }>;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>>;
+    effect: z.ZodObject<{
+        kind: z.ZodEnum<{
+            none: "none";
+            failed: "failed";
+            verified: "verified";
+            "outcome-pending": "outcome-pending";
+        }>;
+        terminalEvent: z.ZodNullable<z.ZodEnum<{
+            EXECUTION_ABORTED: "EXECUTION_ABORTED";
+            EFFECT_VERIFIED: "EFFECT_VERIFIED";
+            EXECUTION_FAILED: "EXECUTION_FAILED";
+        }>>;
+        failureCode: z.ZodNullable<z.ZodString>;
+        effectDigest: z.ZodNullable<z.ZodString>;
+        failureDigest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    evidence: z.ZodObject<{
+        chain: z.ZodArray<z.ZodObject<{
+            recordHash: z.ZodString;
+            event: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                eventType: z.ZodLiteral<"AUTHENTICATION_RECORDED">;
+                payload: z.ZodObject<{
+                    interface: z.ZodEnum<{
+                        mcp: "mcp";
+                        rest: "rest";
+                        internal: "internal";
+                    }>;
+                    outcome: z.ZodEnum<{
+                        rejected: "rejected";
+                        authenticated: "authenticated";
+                    }>;
+                    credentialReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"ADAPTER_AUTHENTICATION_RECORDED">;
+                payload: z.ZodObject<{
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    outcome: z.ZodLiteral<"authenticated">;
+                    credentialReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"REQUEST_RECEIVED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"ACTION_NORMALIZED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"DECISION_RECORDED">;
+                payload: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                    decision: z.ZodLiteral<"ALLOW">;
+                    reasonCode: z.ZodLiteral<"AUTHORIZED">;
+                }, z.core.$strict>, z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                    decision: z.ZodLiteral<"ASK">;
+                    reasonCode: z.ZodLiteral<"APPROVAL_REQUIRED">;
+                }, z.core.$strict>, z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                    decision: z.ZodLiteral<"DENY">;
+                    reasonCode: z.ZodEnum<{
+                        MALFORMED_INPUT: "MALFORMED_INPUT";
+                        TENANT_MISMATCH: "TENANT_MISMATCH";
+                        PRINCIPAL_MISMATCH: "PRINCIPAL_MISMATCH";
+                        PRINCIPAL_NOT_ACTIVE: "PRINCIPAL_NOT_ACTIVE";
+                        AGENT_TENANT_MISMATCH: "AGENT_TENANT_MISMATCH";
+                        AGENT_OWNER_MISMATCH: "AGENT_OWNER_MISMATCH";
+                        AGENT_MISMATCH: "AGENT_MISMATCH";
+                        AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
+                        INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
+                        AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
+                        AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
+                        DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
+                        GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
+                        GRANT_PRINCIPAL_MISMATCH: "GRANT_PRINCIPAL_MISMATCH";
+                        GRANT_AGENT_MISMATCH: "GRANT_AGENT_MISMATCH";
+                        GRANT_NOT_ACTIVE: "GRANT_NOT_ACTIVE";
+                        GRANT_REVOKED: "GRANT_REVOKED";
+                        GRANT_NOT_YET_VALID: "GRANT_NOT_YET_VALID";
+                        GRANT_EXPIRED: "GRANT_EXPIRED";
+                        INVALID_PARENT_LINK: "INVALID_PARENT_LINK";
+                        DELEGATION_NOT_ALLOWED: "DELEGATION_NOT_ALLOWED";
+                        AUTHORITY_AMPLIFICATION: "AUTHORITY_AMPLIFICATION";
+                        ACTION_NOT_ALLOWED: "ACTION_NOT_ALLOWED";
+                        RESOURCE_NOT_ALLOWED: "RESOURCE_NOT_ALLOWED";
+                        ADAPTER_NOT_ALLOWED: "ADAPTER_NOT_ALLOWED";
+                        VALUE_LIMIT_EXCEEDED: "VALUE_LIMIT_EXCEEDED";
+                        USE_LIMIT_EXCEEDED: "USE_LIMIT_EXCEEDED";
+                        MERCHANT_NOT_ALLOWED: "MERCHANT_NOT_ALLOWED";
+                        CATEGORY_NOT_ALLOWED: "CATEGORY_NOT_ALLOWED";
+                        RECURRENCE_NOT_ALLOWED: "RECURRENCE_NOT_ALLOWED";
+                        BUDGET_NOT_FOUND: "BUDGET_NOT_FOUND";
+                        BUDGET_SCOPE_MISMATCH: "BUDGET_SCOPE_MISMATCH";
+                        BUDGET_NOT_ACTIVE: "BUDGET_NOT_ACTIVE";
+                        BUDGET_EXPIRED: "BUDGET_EXPIRED";
+                        BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                        TRANSACTION_LIMIT_EXCEEDED: "TRANSACTION_LIMIT_EXCEEDED";
+                    }>;
+                }, z.core.$strict>], "decision">;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"REQUEST_DENIED">;
+                payload: z.ZodObject<{
+                    decision: z.ZodLiteral<"DENY">;
+                    actionDigest: z.ZodNullable<z.ZodString>;
+                    requestDeniedDigest: z.ZodString;
+                    reasonCode: z.ZodString;
+                    decidedAtEpochMs: z.ZodNumber;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_STATE_REFERENCED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    version: z.ZodNumber;
+                    state: z.ZodEnum<{
+                        revoked: "revoked";
+                        pending: "pending";
+                        expired: "expired";
+                        approved: "approved";
+                        denied: "denied";
+                        superseded: "superseded";
+                        consumed: "consumed";
+                    }>;
+                    approvalDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_PRESENTED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    presentationDigest: z.ZodString;
+                    viewerReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_DECISION_RECORDED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    version: z.ZodNumber;
+                    decision: z.ZodEnum<{
+                        veto: "veto";
+                        approve: "approve";
+                        deny: "deny";
+                        revoke: "revoke";
+                        endorse: "endorse";
+                        dissent: "dissent";
+                        mature: "mature";
+                    }>;
+                    actorPrincipalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                    actorReference: z.ZodString;
+                    presentationDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"APPROVAL_REJECTED">;
+                payload: z.ZodObject<{
+                    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"CAPABILITY_STATE_REFERENCED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+                    state: z.ZodEnum<{
+                        revoked: "revoked";
+                        expired: "expired";
+                        issued: "issued";
+                        used: "used";
+                    }>;
+                    capabilityDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"CAPABILITY_REJECTED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EXECUTION_ATTEMPTED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    idempotencyDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EXECUTION_ABORTED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_PREPARED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    preparedDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_COMMIT_AUTHORIZED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    actionDecisionDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_OUTCOME_UNKNOWN">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    reasonCode: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_UNRESOLVED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EFFECT_VERIFIED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    effectDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"EXECUTION_FAILED">;
+                payload: z.ZodObject<{
+                    actionDigest: z.ZodString;
+                    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+                    attemptReference: z.ZodString;
+                    failureCode: z.ZodString;
+                    failureDigest: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                eventType: z.ZodLiteral<"AUTHORITY_REVOKED">;
+                payload: z.ZodObject<{
+                    grantId: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                    grantVersion: z.ZodNumber;
+                    revocationDigest: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>], "eventType">;
+            sequence: z.ZodNumber;
+            previousRecordHash: z.ZodNullable<z.ZodString>;
+            payloadDigest: z.ZodString;
+            schemaVersion: z.ZodLiteral<1>;
+            id: z.core.$ZodBranded<z.ZodString, "EvidenceId", "out">;
+            tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+            principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+            requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+            correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+            eventTimeEpochMs: z.ZodNumber;
+        }, z.core.$strict>>;
+        recordCount: z.ZodNumber;
+        headRecordHash: z.ZodString;
+    }, z.core.$strict>;
+    generatedBy: z.ZodLiteral<"guardian-control-plane">;
+    proof: z.ZodObject<{
+        algorithm: z.ZodLiteral<"Ed25519">;
+        canonicalization: z.ZodLiteral<"guardian-canonical-json.v1">;
+        domain: z.ZodLiteral<"odingard.guardian.receipt.v1">;
+        keyId: z.ZodString;
+        signature: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** Canonical bytes an Ed25519 verifier signs/verifies for a receipt body. */
+export declare function portableReceiptSigningInput(body: z.infer<typeof PortableReceiptBodySchema>): Uint8Array;
+export type ReceiptKeyId = z.infer<typeof ReceiptKeyIdSchema>;
+export type ReceiptVerificationJwk = z.infer<typeof ReceiptVerificationJwkSchema>;
+export type ReceiptVerificationKeySet = z.infer<typeof ReceiptVerificationKeySetSchema>;
+export type PortableReceiptBody = z.infer<typeof PortableReceiptBodySchema>;
+export type PortableAuthorityReceipt = z.infer<typeof PortableAuthorityReceiptSchema>;