@sanning/proof 0.19.1 → 0.20.0

package/vectors/agent-record.json

@@ -0,0 +1,2175 @@
+{
+  "rule": "agent-record",
+  "ruleVersion": 5,
+  "statement": "How a kernel reads one agent.* record on its own: agent-events.md section 10, steps 1 to 6. The type's namespace, where a record of one of the seven types outside the vocabulary reads failed only for a misplaced event_schema or a context.salt that is not 32 lowercase hex characters, then the version in extras.event_schema, then the type in that version's closed set, then the pinned schema, then the rules the schema cannot state. A version the kernel does not know reads incomplete and never verified. A record that breaks its vocabulary reads failed, with one reason. Each row gives the record and the reading.",
+  "cases": [
+    {
+      "name": "required-only",
+      "note": "Only the required fields.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "verified",
+        "findings": []
+      }
+    },
+    {
+      "name": "every-field",
+      "note": "Every field; the record declares a credential scrub, which a reader shows.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a",
+          "name": "quote-agent"
+        },
+        "previous_hash": "71547e237559add83f6c9279fdb5762eafee857a1060e2d97c0316a70cefb6ba",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a",
+          "content_length": 61,
+          "ref": "s3+opaque:f65487ec7519bf312794e8c07df739a958cb089be77c136111c6d87a8e639004"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "688f84f8cdfc0700f6bfdf16aaf0daa7",
+          "case_id": "case-0001",
+          "chain_key": "chain-quote-agent",
+          "content_scrubbed": true,
+          "revealed": [
+            "gen_ai.tool.call.arguments"
+          ]
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4",
+            "source_type": "tool",
+            "name": "lookup_rate"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            },
+            "trace_id": "4bf92f3577b34da6a3ce929d0e0e4736",
+            "span_id": "00f067aa0ba902b7"
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "agent": {
+              "version": "2.3.0"
+            },
+            "conversation": {
+              "id": "thread-0001"
+            },
+            "tool": {
+              "name": "lookup_rate",
+              "call": {
+                "id": "call_0001",
+                "arguments": {
+                  "currency": "EUR"
+                }
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "verified",
+        "findings": [
+          "content_scrubbed"
+        ]
+      }
+    },
+    {
+      "name": "unknown-minor",
+      "note": "sanning.agent/1.1.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1.1"
+        }
+      },
+      "expect": {
+        "verdict": "incomplete",
+        "reason": "event_schema_unknown",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_unknown",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "unknown-major",
+      "note": "sanning.agent/2.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/2"
+        }
+      },
+      "expect": {
+        "verdict": "incomplete",
+        "reason": "event_schema_unknown",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_unknown",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "unknown-major-unknown-type",
+      "note": "A version this kernel does not know, with a type it does not know: the version is read first.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.plan.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/2"
+        }
+      },
+      "expect": {
+        "verdict": "incomplete",
+        "reason": "event_schema_unknown",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_unknown",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "version-minor-zero",
+      "note": "sanning.agent/1.0 is not a spelling of sanning.agent/1.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1.0"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_schema_invalid",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_invalid",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "version-trailing-newline",
+      "note": "The whole string is the version: a final newline is not ignored.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1\n"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_schema_invalid",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_invalid",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "version-non-ascii-digit",
+      "note": "ARABIC-INDIC DIGIT ONE is not a digit of the version.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/\u0661"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_schema_invalid",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_invalid",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "version-missing",
+      "note": "An agent.* record names its version.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {}
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_schema_missing",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_missing",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "type-builder-defined",
+      "note": "A type no version defines, outside the agent namespace.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "myapp.tool_call",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_type_not_in_set",
+        "at": "/event_type",
+        "reasons": [
+          {
+            "reason": "event_type_not_in_set",
+            "at": "/event_type"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "type-retired-handoff",
+      "note": "handoff.sent left the set: its name is agent.handoff.sent.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "handoff.sent",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_type_not_in_set",
+        "at": "/event_type",
+        "reasons": [
+          {
+            "reason": "event_type_not_in_set",
+            "at": "/event_type"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "type-unknown-agent",
+      "note": "An agent.* type sanning.agent/1 does not define.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.plan.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_type_not_in_set",
+        "at": "/event_type",
+        "reasons": [
+          {
+            "reason": "event_type_not_in_set",
+            "at": "/event_type"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "type-trailing-space",
+      "note": "Names compare exactly.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started ",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_type_not_in_set",
+        "at": "/event_type",
+        "reasons": [
+          {
+            "reason": "event_type_not_in_set",
+            "at": "/event_type"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "outside-the-vocabulary",
+      "note": "A runner record is read by run-records.md: no verdict here.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.run_opened",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": null,
+        "findings": [
+          "not_an_agent_record"
+        ]
+      }
+    },
+    {
+      "name": "outside-salt-well-formed",
+      "note": "A runner record whose salt is 32 lowercase hex characters: no verdict here.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "salt": "0123456789abcdef0123456789abcdef"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": null,
+        "findings": [
+          "not_an_agent_record"
+        ]
+      }
+    },
+    {
+      "name": "outside-salt-null",
+      "note": "A salt written as null is present, and in the wrong form.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "salt": null
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/salt",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/salt"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "outside-salt-number",
+      "note": "A salt is a string.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "salt": 1
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/salt",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/salt"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "outside-salt-upper-case",
+      "note": "A salt is lowercase hex.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "salt": "0123456789ABCDEF0123456789ABCDEF"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/salt",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/salt"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "outside-salt-trailing-newline",
+      "note": "The pattern matches the whole string: a salt with a final newline is not a salt.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "salt": "0123456789abcdef0123456789abcdef\n"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/salt",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/salt"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "outside-salt-31-characters",
+      "note": "A salt is exactly 32 characters.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "salt": "0123456789abcdef0123456789abcde"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/salt",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/salt"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "outside-salt-after-misplaced-version",
+      "note": "event_schema is read before the salt.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "salt": null
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "event_schema_misplaced",
+        "at": "/extras/event_schema",
+        "reasons": [
+          {
+            "reason": "event_schema_misplaced",
+            "at": "/extras/event_schema"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "outside-context-not-an-object",
+      "note": "A context that is not an object carries no salt: no verdict here.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "runner.egress",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": "salt",
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        }
+      },
+      "expect": {
+        "verdict": null,
+        "findings": [
+          "not_an_agent_record"
+        ]
+      }
+    },
+    {
+      "name": "unknown-field-three-levels-down",
+      "note": "A member no schema names, at metadata.gen_ai.tool.call.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001",
+                "note": "x"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "unknown_field",
+        "at": "/metadata/gen_ai/tool/call/note",
+        "reasons": [
+          {
+            "reason": "unknown_field",
+            "at": "/metadata/gen_ai/tool/call/note"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "missing-field",
+      "note": "metadata.run is required.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "missing_field",
+        "at": "/metadata/run",
+        "reasons": [
+          {
+            "reason": "missing_field",
+            "at": "/metadata/run"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "null-for-an-object",
+      "note": "A member written as null is present, and run does not admit null.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": null,
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/metadata/run",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/metadata/run"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "id-trailing-newline",
+      "note": "A pattern matches the whole string: an id with a final newline is not an id.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a",
+          "name": "quote-agent"
+        },
+        "previous_hash": "71547e237559add83f6c9279fdb5762eafee857a1060e2d97c0316a70cefb6ba",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a",
+          "content_length": 61,
+          "ref": "s3+opaque:f65487ec7519bf312794e8c07df739a958cb089be77c136111c6d87a8e639004"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "688f84f8cdfc0700f6bfdf16aaf0daa7",
+          "case_id": "case-0001\n",
+          "chain_key": "chain-quote-agent",
+          "content_scrubbed": true,
+          "revealed": [
+            "gen_ai.tool.call.arguments"
+          ]
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4",
+            "source_type": "tool",
+            "name": "lookup_rate"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            },
+            "trace_id": "4bf92f3577b34da6a3ce929d0e0e4736",
+            "span_id": "00f067aa0ba902b7"
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "agent": {
+              "version": "2.3.0"
+            },
+            "conversation": {
+              "id": "thread-0001"
+            },
+            "tool": {
+              "name": "lookup_rate",
+              "call": {
+                "id": "call_0001",
+                "arguments": {
+                  "currency": "EUR"
+                }
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/case_id",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/case_id"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "id-non-ascii-digit",
+      "note": "[0-9] is the ASCII digits.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a",
+          "name": "quote-agent"
+        },
+        "previous_hash": "71547e237559add83f6c9279fdb5762eafee857a1060e2d97c0316a70cefb6ba",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a",
+          "content_length": 61,
+          "ref": "s3+opaque:f65487ec7519bf312794e8c07df739a958cb089be77c136111c6d87a8e639004"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "688f84f8cdfc0700f6bfdf16aaf0daa7",
+          "case_id": "case-000\u0661",
+          "chain_key": "chain-quote-agent",
+          "content_scrubbed": true,
+          "revealed": [
+            "gen_ai.tool.call.arguments"
+          ]
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4",
+            "source_type": "tool",
+            "name": "lookup_rate"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            },
+            "trace_id": "4bf92f3577b34da6a3ce929d0e0e4736",
+            "span_id": "00f067aa0ba902b7"
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "agent": {
+              "version": "2.3.0"
+            },
+            "conversation": {
+              "id": "thread-0001"
+            },
+            "tool": {
+              "name": "lookup_rate",
+              "call": {
+                "id": "call_0001",
+                "arguments": {
+                  "currency": "EUR"
+                }
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/case_id",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/case_id"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "label-128-astral-characters",
+      "note": "A label is at most 128 characters, counted as code points: 128 astral characters fit.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4",
+            "source_type": "\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "verified",
+        "findings": []
+      }
+    },
+    {
+      "name": "label-129-astral-characters",
+      "note": "129 code points is one past the label's bound.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4",
+            "source_type": "\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00\ud83d\ude00"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/metadata/run/source_type",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/metadata/run/source_type"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "hidden-empty",
+      "note": "context.hidden lists at least one field.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c",
+          "hidden": {}
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/hidden",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/hidden"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "not-captured-empty",
+      "note": "capture.not_captured lists at least one type: the schema reads before the head rule of step 5.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          },
+          "capture": {
+            "not_captured": []
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/metadata/capture/not_captured",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/metadata/capture/not_captured"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "record-ids-duplicate",
+      "note": "closing.record_ids names each record once.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.run_closed",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "75845a01698f1ea14fc63040fdfc4b8a"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "parent_run_id": null,
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 1,
+            "prev_event_id": "3697dc06-dafb-446e-b795-b9c217c6585f"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "invoke_agent"
+            }
+          },
+          "closing": {
+            "record_count": 2,
+            "record_ids": [
+              "9cb3e98e-9337-40fe-bfa4-974b81dc930e",
+              "9cb3e98e-9337-40fe-bfa4-974b81dc930e"
+            ],
+            "outcome": {
+              "observed": {
+                "status": "completed"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/metadata/closing/record_ids",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/metadata/closing/record_ids"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "count-2-to-the-53",
+      "note": "A count is at most 2^53 - 1.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 9007199254740992,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/metadata/run/seq",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/metadata/run/seq"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "count-not-an-integer",
+      "note": "A count is an integer.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c"
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 1.5,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/metadata/run/seq",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/metadata/run/seq"
+          }
+        ],
+        "findings": []
+      }
+    },
+    {
+      "name": "pointer-before-its-extensions",
+      "note": "Errors at /context/revealed and at its items: a pointer comes before every pointer it is a prefix of.",
+      "record": {
+        "payload_version": 1,
+        "spec_version": "sanning.events/v2",
+        "event_type": "agent.tool_call.started",
+        "subject": {
+          "type": "agent",
+          "agent_id": "agent-a"
+        },
+        "previous_hash": "GENESIS",
+        "event": {
+          "content_hash": "2ea7689b5c81d028dd080b4cd06c37001fccf393bc9992e73d2a81ccaafee98a"
+        },
+        "context": {
+          "data_mode": "private",
+          "salt": "f2d23549f158a77987d40cdb54fdf20c",
+          "revealed": [
+            1,
+            1
+          ]
+        },
+        "metadata": {
+          "run": {
+            "run_id": "094f235f-b634-4ae7-a212-ee0b7557272c",
+            "parent_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "root_run_id": "de0630dd-5fa5-40de-af8d-d84cbbdc7440",
+            "seq": 6,
+            "prev_event_id": "c2a6da2f-8851-4a4d-b39c-27b0b62f86c4"
+          },
+          "otel": {
+            "scope": {
+              "name": "@sanning/anchor-langchain",
+              "version": "1.0.0",
+              "schema_url": "https://opentelemetry.io/schemas/1.41.0"
+            }
+          },
+          "gen_ai": {
+            "operation": {
+              "name": "execute_tool"
+            },
+            "tool": {
+              "call": {
+                "id": "call_0001"
+              }
+            }
+          }
+        },
+        "extras": {
+          "event_schema": "sanning.agent/1"
+        }
+      },
+      "expect": {
+        "verdict": "failed",
+        "reason": "bad_value",
+        "at": "/context/revealed",
+        "reasons": [
+          {
+            "reason": "bad_value",
+            "at": "/context/revealed"
+          }
+        ],
+        "findings": []
+      }
+    }
+  ]
+}