approval-md 0.0.1 → 0.2.0

package/schema/fixtures/event/invalid/execution-completed-fabricated-exit-code.json

@@ -0,0 +1,16 @@
+{
+  "seq": 44,
+  "ts": "2026-08-29T11:07:19Z",
+  "event": "execution.completed",
+  "task": "hook:0f3c9a:toolu_01JKL",
+  "action_key": "hook:0f3c9a:toolu_01JKL:deps.add",
+  "actor": "agent:claude-code",
+  "payload": {
+    "execution": "harness",
+    "reported_by": "post-tool-use",
+    "exit_code": "0"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7a9b1c3d5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a9b",
+  "hash": "9c1d3e5f7a9b1c3d5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d"
+}

package/schema/fixtures/event/invalid/execution-completed-provider-ref-empty-id.json

@@ -0,0 +1,18 @@
+{
+  "seq": 55,
+  "ts": "2026-09-05T08:41:07Z",
+  "event": "execution.completed",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-09-05",
+  "actor": "agent:chaser",
+  "payload": {
+    "exit_code": 0,
+    "provider_ref": {
+      "adapter": "agentmail",
+      "id": ""
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "1676b527a61665bf74287f00506bee5c1856453b413782f912ab927fb06f1836",
+  "hash": "9b1c3d5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a9b1c"
+}

package/schema/fixtures/event/invalid/execution-completed-provider-ref-extra-field.json

@@ -0,0 +1,19 @@
+{
+  "seq": 53,
+  "ts": "2026-09-05T08:41:07Z",
+  "event": "execution.completed",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-09-05",
+  "actor": "agent:chaser",
+  "payload": {
+    "exit_code": 0,
+    "provider_ref": {
+      "adapter": "agentmail",
+      "id": "msg_01JQ2XKV7B3C9D5E7F9A1B3C5D",
+      "body": "Hi Dana, chasing the invoice we discussed on Tuesday."
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "1676b527a61665bf74287f00506bee5c1856453b413782f912ab927fb06f1836",
+  "hash": "5f7a9b1c3d5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a"
+}

package/schema/fixtures/event/invalid/execution-completed-provider-ref-id-not-string.json

@@ -0,0 +1,18 @@
+{
+  "seq": 56,
+  "ts": "2026-09-05T08:41:07Z",
+  "event": "execution.completed",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-09-05",
+  "actor": "agent:chaser",
+  "payload": {
+    "exit_code": 0,
+    "provider_ref": {
+      "adapter": "agentmail",
+      "id": 4271
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "1676b527a61665bf74287f00506bee5c1856453b413782f912ab927fb06f1836",
+  "hash": "1c3d5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a9b1c3d"
+}

package/schema/fixtures/event/invalid/execution-completed-provider-ref-missing-adapter.json

@@ -0,0 +1,17 @@
+{
+  "seq": 54,
+  "ts": "2026-09-05T08:41:07Z",
+  "event": "execution.completed",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-09-05",
+  "actor": "agent:chaser",
+  "payload": {
+    "exit_code": 0,
+    "provider_ref": {
+      "id": "msg_01JQ2XKV7B3C9D5E7F9A1B3C5D"
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "1676b527a61665bf74287f00506bee5c1856453b413782f912ab927fb06f1836",
+  "hash": "7a9b1c3d5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a9b"
+}

package/schema/fixtures/event/invalid/execution-failed-open-reported-by.json

@@ -0,0 +1,16 @@
+{
+  "seq": 43,
+  "ts": "2026-08-29T11:06:44Z",
+  "event": "execution.failed",
+  "task": "hook:0f3c9a:toolu_01GHI",
+  "action_key": "hook:0f3c9a:toolu_01GHI:network.call",
+  "actor": "agent:claude-code",
+  "payload": {
+    "execution": "harness",
+    "reported_by": "smtp: connection refused to smtp.example.com:587 (user=chaser pass=hunter2)",
+    "exit_code": null
+  },
+  "alg": "sha256/jcs",
+  "prev": "5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a9b1c3d5e7f",
+  "hash": "7a9b1c3d5e7f9a1b3c5d7e9f1a3b5c7d9e1f3a5b7c9d1e3f5a7b9c1d3e5f7a9b"
+}

package/schema/fixtures/event/invalid/execution-indeterminate-open-reason.json

@@ -0,0 +1,14 @@
+{
+  "seq": 12,
+  "ts": "2026-08-20T14:47:03Z",
+  "event": "execution.indeterminate",
+  "task": "task-046",
+  "action_key": "task-046:sync:2026-08-04",
+  "actor": "agent:chaser",
+  "payload": {
+    "reason": "Error: connect ETIMEDOUT smtp.example.com:587 (user=chaser pass=hunter2)"
+  },
+  "alg": "sha256/jcs",
+  "prev": "0989dc2cde78680d3954bd4ed6d8e69e83adfcf3b779ae69c2e6fb07fc7a7bbf",
+  "hash": "5f2b1c8e0a94d3f76b5e2c1d908a7b6c5d4e3f201928374655a4b3c2d1e0f918"
+}

package/schema/fixtures/event/invalid/execution-reconciled-agent-actor.json

@@ -0,0 +1,17 @@
+{
+  "seq": 13,
+  "ts": "2026-08-20T16:02:44Z",
+  "event": "execution.reconciled",
+  "task": "task-046",
+  "action_key": "task-046:sync:2026-08-04",
+  "actor": "agent:chaser",
+  "payload": {
+    "indeterminate_seq": 12,
+    "resolution": "not-executed",
+    "note": "I checked and it did not go out",
+    "attested_by_human": true
+  },
+  "alg": "sha256/jcs",
+  "prev": "5f2b1c8e0a94d3f76b5e2c1d908a7b6c5d4e3f201928374655a4b3c2d1e0f918",
+  "hash": "b7d4e91a2c3f508671e2d3c4b5a69788796a5b4c3d2e1f00918273645546372a"
+}

package/schema/fixtures/event/invalid/execution-started-negative-env-stripped.json

@@ -0,0 +1,16 @@
+{
+  "seq": 9,
+  "ts": "2026-09-02T09:19:02Z",
+  "event": "execution.started",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-09-02",
+  "actor": "agent:chaser",
+  "payload": {
+    "class": "communicate.email.external",
+    "est_cost_usd": "0.02",
+    "env_stripped": -1
+  },
+  "alg": "sha256/jcs",
+  "prev": "d973375d6aeec5e6cd2de3a0f7dc8f5bc1d9be77225f9af0f851e7fc519a07c3",
+  "hash": "707b79cfa14ec43224c8f71a4fee3ddbff52369f82525aab19bec18c369d5cad"
+}

package/schema/fixtures/event/invalid/gate-bypassed-missing-opened-seq.json

@@ -0,0 +1,15 @@
+{
+  "seq": 42,
+  "ts": "2026-09-02T14:03:11Z",
+  "event": "gate.bypassed",
+  "actor": "agent:claude-code",
+  "payload": {
+    "tool": "Bash",
+    "summary": "npm install --save-dev oxlint",
+    "classes": ["deps.add"],
+    "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042",
+  "hash": "5e2b06c9147adf38b0e75c3a19d6482f0cb3d97e15a48f602bd7ce319a04f8b6"
+}

package/schema/fixtures/event/invalid/gate-closed-non-integer-opened-seq.json

@@ -0,0 +1,13 @@
+{
+  "seq": 44,
+  "ts": "2026-09-02T14:12:00Z",
+  "event": "gate.closed",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "opened_seq": "41"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042",
+  "hash": "83c1de5a6047b29f0e5a1d7c4b8e39026fa7d15c9b3e04872dc6ab1f5e90d374"
+}

package/schema/fixtures/event/invalid/gate-opened-agent-actor.json

@@ -0,0 +1,16 @@
+{
+  "seq": 41,
+  "ts": "2026-09-02T14:00:00Z",
+  "event": "gate.opened",
+  "actor": "agent:claude-code",
+  "channel": "cli",
+  "payload": {
+    "expires_at": "2026-09-02T14:30:00Z",
+    "duration": "30m",
+    "reason": "opening the gate on my own behalf",
+    "scope": "hook"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042"
+}

package/schema/fixtures/event/invalid/gate-organ-attested-absolute-path.json

@@ -0,0 +1,14 @@
+{
+  "seq": 58,
+  "ts": "2026-09-05T20:11:07Z",
+  "event": "gate.organ.attested",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "organ_path": "/Users/carter/dev/approval-md/.claude/settings.json",
+    "sha256": "5f2d0c9b7a1e34860df5c2b8a90e17436d81cf05e2a934b7c60d18ea3f905c21"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f"
+}

package/schema/fixtures/event/invalid/gate-organ-attested-agent-actor.json

@@ -0,0 +1,14 @@
+{
+  "seq": 58,
+  "ts": "2026-09-05T20:11:07Z",
+  "event": "gate.organ.attested",
+  "actor": "agent:claude-code",
+  "channel": "cli",
+  "payload": {
+    "organ_path": ".claude/settings.json",
+    "sha256": "5f2d0c9b7a1e34860df5c2b8a90e17436d81cf05e2a934b7c60d18ea3f905c21"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f"
+}

package/schema/fixtures/event/invalid/gate-organ-attested-missing-organ-path.json

@@ -0,0 +1,13 @@
+{
+  "seq": 58,
+  "ts": "2026-09-05T20:11:07Z",
+  "event": "gate.organ.attested",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "sha256": "5f2d0c9b7a1e34860df5c2b8a90e17436d81cf05e2a934b7c60d18ea3f905c21"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f"
+}

package/schema/fixtures/event/invalid/harness-unknown-kind.json

@@ -0,0 +1,18 @@
+{
+  "seq": 43,
+  "ts": "2026-09-04T10:24:02Z",
+  "event": "gate.bypassed",
+  "actor": "agent:cursor",
+  "payload": {
+    "opened_seq": 41,
+    "tool": "Shell",
+    "summary": "npm install --save-dev oxlint",
+    "classes": ["deps.add"],
+    "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f",
+    "harness": "totally-legit-harness",
+    "harness_version": "9.9.9"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042",
+  "hash": "5e2b06c9147adf38b0e75c3a19d6482f0cb3d97e15a48f602bd7ce319a04f8b6"
+}

package/schema/fixtures/event/invalid/harness-version-multiline.json

@@ -0,0 +1,16 @@
+{
+  "seq": 7,
+  "ts": "2026-09-04T10:22:14Z",
+  "event": "task.registered",
+  "task": "hook:sess-1:toolu-9",
+  "actor": "agent:claude-code",
+  "payload": {
+    "state": "proposed",
+    "actions": [],
+    "harness": "claude-code",
+    "harness_version": "2.0.14 (Claude Code)\nwarning: token sk-ant-oops expired"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b1cbb27b12bd811a9d197f5fb1c494c191040271901214286f0c10bc84820173",
+  "hash": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f"
+}

package/schema/fixtures/event/invalid/log-checkpoint-agent-actor.json

@@ -0,0 +1,17 @@
+{
+  "seq": 41,
+  "ts": "2026-09-02T14:00:00Z",
+  "event": "log.checkpoint",
+  "actor": "agent:claude-code",
+  "channel": "cli",
+  "payload": {
+    "seq": 40,
+    "hash": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+    "alg": "ed25519",
+    "key_sha256": "30332109f3a1088201be781b09ab0159440a1f26812ea2632d6e07130c02c0f8",
+    "signature": "oZIz9LRl0xxNxwGd7zyrpGz0+2bBrNWgVMsxanPcKJgMdSDifrWbg634uSgqmWYObmOEV5fre8ae4l0JuOrNBg=="
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042"
+}

package/schema/fixtures/event/invalid/log-checkpoint-missing-signature.json

@@ -0,0 +1,16 @@
+{
+  "seq": 41,
+  "ts": "2026-09-02T14:00:00Z",
+  "event": "log.checkpoint",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "seq": 40,
+    "hash": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+    "alg": "ed25519",
+    "key_sha256": "30332109f3a1088201be781b09ab0159440a1f26812ea2632d6e07130c02c0f8"
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042"
+}

package/schema/fixtures/event/invalid/log-checkpoint-short-signed-hash.json

@@ -0,0 +1,17 @@
+{
+  "seq": 41,
+  "ts": "2026-09-02T14:00:00Z",
+  "event": "log.checkpoint",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "seq": 40,
+    "hash": "7f625051c176f2f2",
+    "alg": "ed25519",
+    "key_sha256": "30332109f3a1088201be781b09ab0159440a1f26812ea2632d6e07130c02c0f8",
+    "signature": "oZIz9LRl0xxNxwGd7zyrpGz0+2bBrNWgVMsxanPcKJgMdSDifrWbg634uSgqmWYObmOEV5fre8ae4l0JuOrNBg=="
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042"
+}

package/schema/fixtures/event/invalid/log-checkpoint-unknown-signature-alg.json

@@ -0,0 +1,17 @@
+{
+  "seq": 41,
+  "ts": "2026-09-02T14:00:00Z",
+  "event": "log.checkpoint",
+  "actor": "human:carter",
+  "channel": "cli",
+  "payload": {
+    "seq": 40,
+    "hash": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+    "alg": "hmac-sha256",
+    "key_sha256": "30332109f3a1088201be781b09ab0159440a1f26812ea2632d6e07130c02c0f8",
+    "signature": "oZIz9LRl0xxNxwGd7zyrpGz0+2bBrNWgVMsxanPcKJgMdSDifrWbg634uSgqmWYObmOEV5fre8ae4l0JuOrNBg=="
+  },
+  "alg": "sha256/jcs",
+  "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
+  "hash": "1b4f8e2c9a7d05613fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e7042"
+}

package/schema/fixtures/event/invalid/malformed-ts.json

@@ -0,0 +1,15 @@
+{
+  "seq": 5,
+  "ts": "2026-08-04 09:14:02",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f9ea247b708fa05baac2e1f6c53a7074039fe65f295726010ff39ccc747ad"
+}

package/schema/fixtures/event/invalid/missing-alg.json

@@ -0,0 +1,14 @@
+{
+  "seq": 5,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f9ea247b708fa05baac2e1f6c53a7074039fe65f295726010ff39ccc747ad"
+}

package/schema/fixtures/event/invalid/missing-hash.json

@@ -0,0 +1,14 @@
+{
+  "seq": 5,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86"
+}

package/schema/fixtures/event/invalid/non-integer-seq.json

@@ -0,0 +1,15 @@
+{
+  "seq": 5.5,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f9ea247b708fa05baac2e1f6c53a7074039fe65f295726010ff39ccc747ad"
+}

package/schema/fixtures/event/invalid/payload-pruned-human-actor.json

@@ -0,0 +1,14 @@
+{
+  "seq": 21,
+  "ts": "2026-09-11T03:00:04Z",
+  "event": "payload.pruned",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "payload": {
+    "payload_hash": "8ae4823e490219f719383730bac75a35543ad790475300fb1a0113a2e2d1d834"
+  },
+  "alg": "sha256/jcs",
+  "prev": "92f55b985ad964c052e5e7b500f56ede98efa49473bb32bca236896317fa5da7",
+  "hash": "e68eb434e9c342315dd6beeb0b4af73839eefa6a8f181565a4eb28804ce0b67f"
+}

package/schema/fixtures/event/invalid/payload-pruned-missing-hash.json

@@ -0,0 +1,14 @@
+{
+  "seq": 21,
+  "ts": "2026-09-11T03:00:04Z",
+  "event": "payload.pruned",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "system:daemon",
+  "payload": {
+    "reason": "payload_retention"
+  },
+  "alg": "sha256/jcs",
+  "prev": "92f55b985ad964c052e5e7b500f56ede98efa49473bb32bca236896317fa5da7",
+  "hash": "f17284d9e8652a2f2f92cb8187c91e565c24822125c2184be5daeedd4fbf714c"
+}

package/schema/fixtures/event/invalid/policy-declined-agent-actor.json

@@ -0,0 +1,15 @@
+{
+  "seq": 42,
+  "ts": "2026-08-25T10:19:41Z",
+  "event": "policy.declined",
+  "action_key": "policy.attest:3d0f1a2b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f7",
+  "actor": "agent:claude-code",
+  "payload": {
+    "policy_path": "APPROVAL.md",
+    "sha256": "3d0f1a2b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f7",
+    "proposed_seq": 41
+  },
+  "alg": "sha256/jcs",
+  "prev": "1c0a4f1d21b57d0f7cd5b1e2a03b9c4d8e7f6051a2b3c4d5e6f708192a3b4c5d",
+  "hash": "7f6051a2b3c4d5e6f708192a3b4c5d1c0a4f1d21b57d0f7cd5b1e2a03b9c4d8e"
+}

package/schema/fixtures/event/invalid/policy-proposed-missing-diff.json

@@ -0,0 +1,19 @@
+{
+  "seq": 41,
+  "ts": "2026-08-25T10:16:04Z",
+  "event": "policy.proposed",
+  "action_key": "policy.attest:3d0f1a2b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f7",
+  "actor": "agent:claude-code",
+  "payload": {
+    "policy_path": "APPROVAL.md",
+    "sha256": "3d0f1a2b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f7",
+    "load": {
+      "ok": true,
+      "code": null,
+      "message": null
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "92f55b985ad964c052e5e7b500f56ede98efa49473bb32bca236896317fa5da7",
+  "hash": "1c0a4f1d21b57d0f7cd5b1e2a03b9c4d8e7f6051a2b3c4d5e6f708192a3b4c5d"
+}

package/schema/fixtures/event/invalid/policy-proposed-system-actor.json

@@ -0,0 +1,26 @@
+{
+  "seq": 41,
+  "ts": "2026-08-25T10:16:04Z",
+  "event": "policy.proposed",
+  "action_key": "policy.attest:3d0f1a2b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f7",
+  "actor": "system:gate",
+  "payload": {
+    "policy_path": "APPROVAL.md",
+    "sha256": "3d0f1a2b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f7",
+    "diff": {
+      "available": false,
+      "reason": "the policy has never been attested, so there is no previous state to diff against",
+      "lines": [],
+      "headline": "semantic diff unavailable",
+      "baseline_sha256": null
+    },
+    "load": {
+      "ok": true,
+      "code": null,
+      "message": null
+    }
+  },
+  "alg": "sha256/jcs",
+  "prev": "92f55b985ad964c052e5e7b500f56ede98efa49473bb32bca236896317fa5da7",
+  "hash": "1c0a4f1d21b57d0f7cd5b1e2a03b9c4d8e7f6051a2b3c4d5e6f708192a3b4c5d"
+}

package/schema/fixtures/event/invalid/short-hash.json

@@ -0,0 +1,15 @@
+{
+  "seq": 5,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f"
+}

package/schema/fixtures/event/invalid/unknown-alg.json

@@ -0,0 +1,15 @@
+{
+  "seq": 5,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha1/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f9ea247b708fa05baac2e1f6c53a7074039fe65f295726010ff39ccc747ad"
+}

package/schema/fixtures/event/invalid/unknown-event-type.json

@@ -0,0 +1,15 @@
+{
+  "seq": 5,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.maybe",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f9ea247b708fa05baac2e1f6c53a7074039fe65f295726010ff39ccc747ad"
+}

package/schema/fixtures/event/invalid/unknown-top-level-field.json

@@ -0,0 +1,16 @@
+{
+  "seq": 5,
+  "ts": "2026-08-04T09:14:02Z",
+  "event": "approval.granted",
+  "task": "task-042",
+  "action_key": "task-042:chaser:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "note": "go, but cc me"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b3c9197a2e2e644a440db3444ca5b5ebd30a35059eaa5e77bd3817d821df0e86",
+  "hash": "a41f9ea247b708fa05baac2e1f6c53a7074039fe65f295726010ff39ccc747ad",
+  "signature": "not-a-field"
+}

package/schema/fixtures/event/valid/approval-expired.json

@@ -0,0 +1,15 @@
+{
+  "seq": 7,
+  "ts": "2026-08-04T09:17:02Z",
+  "event": "approval.expired",
+  "task": "task-044",
+  "action_key": "task-044:nudge:2026-08-04",
+  "actor": "system:daemon",
+  "payload": {
+    "requested_at": "2026-08-04T05:10:00Z",
+    "ttl": "PT4H"
+  },
+  "alg": "sha256/jcs",
+  "prev": "1eca621f3726378633f2a9118b54924922854ebbe41d460e424bb564e7abbc6e",
+  "hash": "ad5cdc577c7a709ce5e8e0cf85d7a50aad1448ecf732ad77838d2e7300973ea6"
+}

package/schema/fixtures/event/valid/approval-granted-batch.json

@@ -0,0 +1,19 @@
+{
+  "seq": 9,
+  "ts": "2026-08-04T09:31:00Z",
+  "event": "approval.granted",
+  "task": "task-049",
+  "action_key": "task-049:stage-3:2026-08-04",
+  "actor": "human:carter",
+  "channel": "telegram",
+  "payload": {
+    "class": "record.write.stage",
+    "est_cost_usd": "0",
+    "payload_hash": "bb9c3b1eaaf988bf0b95107c99c4ae23405576fcfff2fce1fb1e5c4cc1e4a3ca",
+    "batch_delivery_id": "tg-batch-7",
+    "note": "all four look right"
+  },
+  "alg": "sha256/jcs",
+  "prev": "b751a8c3136adf85eeef2721735f6f65012eda8532c705e132ef0522c8311f1f",
+  "hash": "8ae4823e490219f719383730bac75a35543ad790475300fb1a0113a2e2d1d834"
+}