@opensoha/contracts 0.1.4

package/connectors/connector-event-envelope.schema.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.opensoha.dev/connectors/connector-event-envelope.schema.json",
+  "title": "OpenSoha Connector Event Batch Envelope",
+  "description": "Batch wrapper posted by connector runtimes to the OpenSoha core connector event sink.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["connectorId", "events"],
+  "properties": {
+    "connectorId": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^[a-z][a-z0-9-]*$",
+      "description": "Connector runtime ID that produced the batch."
+    },
+    "events": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "$ref": "#/$defs/ConnectorEvent"
+      },
+      "description": "Connector events normalized by the runtime."
+    }
+  },
+  "$defs": {
+    "ConnectorEvent": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "type", "source", "occurredAt", "payload"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Provider event ID when available, otherwise a deterministic idempotency key generated by the connector."
+        },
+        "type": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Provider event type normalized into the connector manifest event namespace, for example im.message.receive_v1."
+        },
+        "source": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9-]*$",
+          "description": "Connector ID that produced the event."
+        },
+        "occurredAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "Provider event timestamp in RFC 3339 date-time format, or runtime receipt time when the provider timestamp is unavailable."
+        },
+        "subject": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Optional provider resource identifier used by Soha for routing, correlation, or audit display."
+        },
+        "payload": {
+          "type": "object",
+          "additionalProperties": true,
+          "description": "Provider-specific normalized payload. Connectors must keep secrets and raw credentials out of this object."
+        }
+      }
+    }
+  }
+}

package/evaluation/evaluation-dataset.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation-dataset.schema.json",
+  "title": "Evaluation Dataset",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "name", "version", "samples", "createdAt"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-dataset/v1" },
+    "id": { "type": "string", "pattern": "^[a-z][a-z0-9._-]{1,127}$" },
+    "name": { "type": "string", "minLength": 1, "maxLength": 160 },
+    "version": { "type": "string", "minLength": 1, "maxLength": 64 },
+    "samples": {
+      "type": "array", "minItems": 1, "maxItems": 10000,
+      "items": {
+        "type": "object", "additionalProperties": false, "required": ["id", "input"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1, "maxLength": 128 },
+          "input": { "type": "string", "minLength": 1, "maxLength": 65536 },
+          "expectedSources": { "type": "array", "maxItems": 256, "items": { "type": "string", "maxLength": 512 } },
+          "expectedFacts": { "type": "array", "maxItems": 256, "items": { "type": "string", "maxLength": 4096 } },
+          "forbiddenActions": { "type": "array", "maxItems": 128, "items": { "type": "string", "maxLength": 256 } }
+        }
+      }
+    },
+    "createdAt": { "type": "string", "format": "date-time" }
+  }
+}

package/evaluation/evaluation-result.schema.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation-result.schema.json",
+  "title": "Evaluation Result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "sampleId", "scores", "passed"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-result/v1" },
+    "sampleId": { "type": "string", "minLength": 1, "maxLength": 128 },
+    "retrievedSources": { "type": "array", "maxItems": 512, "items": { "type": "string", "maxLength": 512 } },
+    "producedFacts": { "type": "array", "maxItems": 512, "items": { "type": "string", "maxLength": 4096 } },
+    "actions": { "type": "array", "maxItems": 256, "items": { "type": "string", "maxLength": 256 } },
+    "scores": { "type": "object", "maxProperties": 128, "additionalProperties": { "type": "number", "minimum": 0, "maximum": 1 } },
+    "passed": { "type": "boolean" },
+    "failureReasons": { "type": "array", "maxItems": 128, "items": { "type": "string", "maxLength": 256 } }
+  }
+}

package/evaluation/evaluation-run.schema.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation-run.schema.json",
+  "title": "Evaluation Run",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "datasetId", "datasetVersion", "candidateRefs", "status", "startedAt"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-run/v1" },
+    "id": { "type": "string", "minLength": 1, "maxLength": 128 },
+    "datasetId": { "type": "string", "minLength": 1, "maxLength": 128 },
+    "datasetVersion": { "type": "string", "minLength": 1, "maxLength": 64 },
+    "candidateRefs": { "type": "object", "minProperties": 1, "maxProperties": 32, "additionalProperties": { "type": "string", "minLength": 1, "maxLength": 512 } },
+    "status": { "enum": ["queued", "running", "completed", "failed", "cancelled"] },
+    "startedAt": { "type": "string", "format": "date-time" },
+    "completedAt": { "type": "string", "format": "date-time" },
+    "aggregateScores": { "type": "object", "maxProperties": 128, "additionalProperties": { "type": "number", "minimum": 0, "maximum": 1 } }
+  }
+}

package/evaluation/executor-profile.schema.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation/executor-profile.schema.json",
+  "title": "Evaluation Executor Profile",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "environmentPolicy", "isolationMode", "timeoutSeconds", "enabled"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-executor-profile/v1" },
+    "id": { "type": "string", "minLength": 1 },
+    "environmentPolicy": { "type": "string", "minLength": 1 },
+    "toolSnapshotRef": { "type": "string" },
+    "isolationMode": { "enum": ["read-only", "disposable-write"] },
+    "timeoutSeconds": { "type": "integer", "minimum": 1, "maximum": 1800 },
+    "maxCost": { "type": "number", "minimum": 0 },
+    "enabled": { "type": "boolean" }
+  }
+}

package/evaluation/feedback-sample.schema.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation/feedback-sample.schema.json",
+  "title": "Curated Evaluation Feedback Sample",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "traceRef", "scopeHash", "redactedInput", "redactedOutput", "licenseRef", "decision", "createdAt"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-feedback-sample/v1" },
+    "id": { "type": "string", "minLength": 1 },
+    "traceRef": { "type": "string", "minLength": 1 },
+    "scopeHash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "redactedInput": { "type": "string", "maxLength": 32000 },
+    "redactedOutput": { "type": "string", "maxLength": 32000 },
+    "licenseRef": { "type": "string", "minLength": 1 },
+    "decision": { "enum": ["pending", "accepted", "rejected", "deleted"] },
+    "datasetRef": { "type": "string" },
+    "createdAt": { "type": "string", "format": "date-time" }
+  }
+}

package/evaluation/gate-decision.schema.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation/gate-decision.schema.json",
+  "title": "Evaluation Gate Decision",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "policyId", "policyVersion", "baselineRunId", "candidateRunId", "decision", "reasons", "evidenceRefs", "evaluatedAt"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-gate-decision/v1" },
+    "id": { "type": "string", "minLength": 1 },
+    "policyId": { "type": "string", "minLength": 1 },
+    "policyVersion": { "type": "string", "minLength": 1 },
+    "baselineRunId": { "type": "string" },
+    "candidateRunId": { "type": "string" },
+    "decision": { "enum": ["pass", "warn", "block", "error"] },
+    "reasons": { "type": "array", "maxItems": 128, "items": { "type": "object" } },
+    "evidenceRefs": { "type": "array", "maxItems": 128, "items": { "type": "string" } },
+    "evaluatedAt": { "type": "string", "format": "date-time" }
+  }
+}

package/evaluation/gate-policy.schema.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation/gate-policy.schema.json",
+  "title": "Evaluation Gate Policy",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "version", "minimumScores", "enabled"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-gate-policy/v1" },
+    "id": { "type": "string", "minLength": 1 },
+    "version": { "type": "string", "minLength": 1 },
+    "minimumScores": { "type": "object", "minProperties": 1, "maxProperties": 128, "additionalProperties": { "type": "number", "minimum": 0, "maximum": 1 } },
+    "maximumRegression": { "type": "object", "maxProperties": 128, "additionalProperties": { "type": "number", "minimum": 0, "maximum": 1 } },
+    "maximumCost": { "type": "number", "minimum": 0 },
+    "maximumLatencyMs": { "type": "integer", "minimum": 0 },
+    "enabled": { "type": "boolean" }
+  }
+}

package/evaluation/replay-plan.schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation/replay-plan.schema.json",
+  "title": "Evaluation Replay Plan",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "sourceTraceRefs", "candidateRefs", "executorProfileId", "readOnly", "createdAt"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-replay-plan/v1" },
+    "id": { "type": "string", "minLength": 1 },
+    "sourceTraceRefs": { "type": "array", "minItems": 1, "maxItems": 500, "uniqueItems": true, "items": { "type": "string" } },
+    "candidateRefs": { "type": "object", "minProperties": 1, "maxProperties": 32, "additionalProperties": { "type": "string" } },
+    "executorProfileId": { "type": "string", "minLength": 1 },
+    "readOnly": { "type": "boolean" },
+    "createdAt": { "type": "string", "format": "date-time" }
+  }
+}

package/evaluation/sample-attempt.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://opensoha.dev/schemas/evaluation/sample-attempt.schema.json",
+  "title": "Evaluation Sample Attempt",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "runId", "sampleId", "attempt", "candidateRefs", "status", "latencyMillis", "completedAt"],
+  "properties": {
+    "schemaVersion": { "const": "opensoha.dev/evaluation-sample-attempt/v1" },
+    "runId": { "type": "string", "minLength": 1 },
+    "sampleId": { "type": "string", "minLength": 1 },
+    "attempt": { "type": "integer", "minimum": 1, "maximum": 10 },
+    "candidateRefs": { "type": "object", "minProperties": 1, "maxProperties": 32, "additionalProperties": { "type": "string" } },
+    "traceRef": { "type": "string" },
+    "scores": { "type": "object", "maxProperties": 128, "additionalProperties": { "type": "number" } },
+    "usage": { "type": "object", "maxProperties": 32, "additionalProperties": { "type": "number", "minimum": 0 } },
+    "latencyMillis": { "type": "integer", "minimum": 0 },
+    "status": { "enum": ["completed", "failed", "cancelled"] },
+    "errorCode": { "type": "string" },
+    "completedAt": { "type": "string", "format": "date-time" }
+  }
+}

package/events/event-envelope.schema.json

@@ -0,0 +1,58 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.opensoha.dev/events/event-envelope.schema.json",
+  "title": "Soha Event Envelope",
+  "description": "Shared event envelope for audit, operational, integration, and future MCP invocation events.",
+  "type": "object",
+  "required": ["id", "source", "category", "severity", "summary"],
+  "properties": {
+    "id": { "type": "string", "minLength": 1 },
+    "tenantId": {
+      "type": "string",
+      "default": "default"
+    },
+    "workspaceId": {
+      "type": "string",
+      "default": "default"
+    },
+    "source": { "type": "string", "minLength": 1 },
+    "category": { "type": "string", "minLength": 1 },
+    "eventType": { "type": "string" },
+    "severity": {
+      "type": "string",
+      "enum": ["debug", "info", "notice", "warning", "error", "critical"]
+    },
+    "clusterId": { "type": "string" },
+    "namespace": { "type": "string" },
+    "subject": {
+      "type": "object",
+      "properties": {
+        "kind": { "type": "string" },
+        "id": { "type": "string" },
+        "name": { "type": "string" },
+        "scope": {
+          "type": "object",
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": false
+    },
+    "actor": {
+      "type": "object",
+      "properties": {
+        "type": { "type": "string" },
+        "id": { "type": "string" },
+        "name": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "summary": { "type": "string", "minLength": 1 },
+    "timestamp": { "type": "string", "format": "date-time" },
+    "payload": {
+      "type": "object",
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": false
+}
+

package/examples/agent-profile/k8s-sre-readonly.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/agent-profile/v1",
+  "id": "k8s-sre-readonly",
+  "name": "K8s SRE Readonly",
+  "version": "0.1.0",
+  "description": "Agent runtime profile for read-only Kubernetes root-cause diagnosis through Soha Gateway.",
+  "mode": "platform_resource_diagnosis",
+  "providerKind": "soha-agent-runtime",
+  "skillRefs": ["k8s-sre"],
+  "mcpPresetRefs": ["k8s-readonly"],
+  "capabilityRefs": ["platform_resource_diagnosis"],
+  "platformCapabilityRefs": ["cluster.inventory", "workload.read", "network.inventory", "storage.inventory", "pod.logs", "metrics"],
+  "requiredScopes": ["cluster", "namespace"],
+  "enabledToolRefs": ["k8s.pods.list", "k8s.pods.logs", "k8s.pods.describe"],
+  "guardrails": ["read_only", "no_direct_cluster_access", "no_secret_output", "require_cluster_namespace_scope"]
+}

package/examples/cluster-capability-matrix/runtime-parity.json

@@ -0,0 +1,40 @@
+{
+  "generatedAt": "2026-06-12T02:00:00Z",
+  "capabilitySetVersion": "2026.06",
+  "items": [
+    {
+      "key": "kubernetes.yaml.apply",
+      "label": "Apply Kubernetes YAML",
+      "category": "yaml",
+      "riskLevel": "mutate",
+      "requiresApproval": true,
+      "direct": {
+        "status": "available",
+        "requiredScopes": ["cluster:write", "kubernetes:apply"]
+      },
+      "agent": {
+        "status": "available",
+        "requiredAgentVersion": "0.1.0",
+        "requiredScopes": ["agent:kubernetes:apply"]
+      }
+    },
+    {
+      "key": "kubernetes.port-forward",
+      "label": "Port Forward",
+      "category": "port-forward",
+      "riskLevel": "execute",
+      "requiresApproval": true,
+      "direct": {
+        "status": "available",
+        "requiredScopes": ["cluster:port-forward"]
+      },
+      "agent": {
+        "status": "partial",
+        "reason": "Agent supports single-port forwarding while multi-port sessions remain direct-only.",
+        "diagnostic": "agent_port_forward_partial",
+        "requiredAgentVersion": "0.1.0",
+        "requiredScopes": ["agent:port-forward"]
+      }
+    }
+  ]
+}

package/examples/connector-event-envelope/feishu-message.json

@@ -0,0 +1,19 @@
+{
+  "connectorId": "feishu",
+  "events": [
+    {
+      "id": "feishu-msg-01HZW9WJQ3Y7QH3QZW2KN4T4GX",
+      "type": "im.message.receive_v1",
+      "source": "feishu",
+      "occurredAt": "2026-06-11T08:30:00Z",
+      "subject": "chat:oc_1234567890",
+      "payload": {
+        "messageId": "om_1234567890",
+        "chatId": "oc_1234567890",
+        "senderId": "ou_1234567890",
+        "messageType": "text",
+        "text": "deploy status?"
+      }
+    }
+  ]
+}

package/examples/gateway-capability-baseline/minimal.json

@@ -0,0 +1,61 @@
+{
+  "schemaVersion": "opensoha.dev/gateway-capability-catalog/v1",
+  "version": "0.1.0",
+  "source": {
+    "repository": "github.com/opensoha/soha",
+    "path": "internal/application/aigateway/catalog.go",
+    "syncStrategy": "stable-runtime entries are checked against runtime Gateway catalog output before release."
+  },
+  "plannedSkills": ["gateway-governance"],
+  "tools": [
+    {
+      "name": "delivery.execution_logs.list",
+      "title": "List Execution Logs",
+      "domain": "delivery",
+      "owningWorkbench": "delivery",
+      "owningService": "internal/application/delivery.Service",
+      "action": "logs",
+      "riskLevel": "read",
+      "permissionKeys": ["ai.gateway.invoke", "delivery.execution-tasks.view"],
+      "requiredScopes": ["application", "environment", "executionTask"],
+      "mcpAdapterId": "delivery.v1",
+      "mcpToolName": "delivery.execution_logs.list",
+      "requiresApproval": false,
+      "status": "stable-runtime",
+      "skillRefs": ["delivery-tester"],
+      "resourceRefs": ["soha://delivery/execution-tasks"],
+      "promptRefs": ["soha.delivery.plan_release"],
+      "audit": {
+        "resourceKind": "AIGatewayTool",
+        "relatedIds": ["taskId"]
+      },
+      "redaction": ["logs"],
+      "moduleId": "delivery",
+      "routeEvidence": ["registerDeliveryRoutes", "registerAIGatewayRoutes"]
+    }
+  ],
+  "resources": [
+    {
+      "name": "soha://delivery/execution-tasks",
+      "description": "Durable delivery execution tasks, callbacks, artifacts, and logs.",
+      "permissionKeys": ["ai.gateway.invoke", "delivery.execution-tasks.view"],
+      "requiredScopes": ["application", "environment"],
+      "status": "stable-runtime",
+      "skillRefs": ["delivery-tester"],
+      "toolRefs": ["delivery.execution_logs.list"],
+      "promptRefs": ["soha.delivery.plan_release"]
+    }
+  ],
+  "prompts": [
+    {
+      "name": "soha.delivery.plan_release",
+      "description": "Build a release or rollback plan from delivery evidence.",
+      "permissionKeys": ["ai.gateway.invoke", "delivery.applications.view"],
+      "requiredScopes": ["application", "environment"],
+      "status": "stable-runtime",
+      "skillRefs": ["delivery-tester"],
+      "toolRefs": ["delivery.execution_logs.list"],
+      "resourceRefs": ["soha://delivery/execution-tasks"]
+    }
+  ]
+}

package/examples/gateway-manifest/minimal.json

@@ -0,0 +1,72 @@
+{
+  "name": "soha-ai-gateway",
+  "version": "0.1.0",
+  "generatedAt": "2026-06-09T12:00:00Z",
+  "principal": {
+    "userId": "u-1",
+    "userName": "admin",
+    "email": "admin@example.com",
+    "roles": ["platform-admin"],
+    "teams": [],
+    "projects": [],
+    "tags": [],
+    "permissionKeys": ["ai.gateway.tools.read", "k8s.pods.read"]
+  },
+  "caller": {
+    "identityMode": "user",
+    "source": "cli"
+  },
+  "permissionKeys": ["ai.gateway.tools.read", "k8s.pods.read"],
+  "tools": [
+    {
+      "name": "k8s.list_pods",
+      "title": "List pods",
+      "description": "List Kubernetes pods in a namespace.",
+      "domain": "kubernetes",
+      "action": "read",
+      "riskLevel": "read",
+      "permissionKeys": ["k8s.pods.read"],
+      "requiredScopes": ["cluster", "namespace"],
+      "mcpAdapterId": "builtin.kubernetes",
+      "mcpToolName": "k8s.pods.list",
+      "requiresApproval": false,
+      "inputSchema": {
+        "type": "object",
+        "required": ["namespace"],
+        "properties": {
+          "namespace": { "type": "string" }
+        },
+        "additionalProperties": false
+      },
+      "outputSchema": {
+        "type": "object",
+        "properties": {
+          "items": {
+            "type": "array",
+            "items": { "type": "object" }
+          }
+        }
+      }
+    }
+  ],
+  "resources": [],
+  "prompts": [],
+  "skills": [
+    {
+      "id": "k8s-sre",
+      "name": "Kubernetes SRE",
+      "category": "ai-gateway",
+      "description": "Read-only cluster diagnosis skill.",
+      "capabilityRefs": ["k8s.list_pods"],
+      "permissionKeys": ["k8s.pods.read"],
+      "requiredScopes": ["cluster", "namespace"]
+    }
+  ],
+  "summary": {
+    "toolCount": 1,
+    "resourceCount": 0,
+    "promptCount": 0,
+    "skillCount": 1,
+    "deniedCount": 0
+  }
+}

package/examples/governance/approval-request.json

@@ -0,0 +1,35 @@
+{
+  "id": "approval-01HZW9WJQ3Y7QH3QZW2KN4T4GX",
+  "status": "approved",
+  "strategy": "role_quorum",
+  "actorType": "user",
+  "actorId": "user-123",
+  "actorName": "Ada",
+  "toolName": "k8s.deployments.restart",
+  "riskLevel": "high",
+  "requiresApproval": true,
+  "approvalTrace": {
+    "approvalMode": "role_quorum",
+    "approvedCount": 1,
+    "requiredApprovals": 1,
+    "satisfiedRequirements": ["role:sre"],
+    "decisions": [
+      {
+        "userId": "user-456",
+        "userName": "Grace",
+        "roles": ["sre"],
+        "result": "approved",
+        "stageIndex": 0,
+        "stageName": "platform-sre",
+        "decidedAt": "2026-06-12T02:35:00Z"
+      }
+    ]
+  },
+  "summary": "Restart checkout-api deployment in payments namespace.",
+  "requestId": "req-approval-123",
+  "decidedBy": "user-456",
+  "decidedByName": "Grace",
+  "decidedAt": "2026-06-12T02:35:00Z",
+  "createdAt": "2026-06-12T02:30:00Z",
+  "updatedAt": "2026-06-12T02:35:00Z"
+}

package/examples/governance/audit-log.json

@@ -0,0 +1,14 @@
+{
+  "id": "audit-01HZW9WJQ3Y7QH3QZW2KN4T4GX",
+  "actorType": "user",
+  "actorId": "user-123",
+  "actorName": "Ada",
+  "skillId": "k8s-sre",
+  "toolName": "k8s.deployments.restart",
+  "riskLevel": "high",
+  "action": "tool.invoke",
+  "result": "denied",
+  "summary": "High-risk deployment restart was denied because approval is required.",
+  "requestId": "req-audit-123",
+  "createdAt": "2026-06-12T02:31:00Z"
+}