blindseal 0.5.0 → 0.5.1

package/dist/{init.js → init-ZP3SLHM3.js}

@@ -1,7 +1,20 @@
 #!/usr/bin/env node
+import {
+  loadIdentity
+} from "./chunk-VSOUJM6X.js";
+import {
+  blindsealHome,
+  nearestFixturesDir,
+  shippedFixturesDir
+} from "./chunk-CIUQ6WHJ.js";
 import "./chunk-PDX44BCA.js";
 
 // src/cli/init.ts
+import { randomBytes } from "crypto";
+import { chmodSync, copyFileSync as copyFileSync2, existsSync as existsSync2, mkdirSync, statSync, writeFileSync as writeFileSync2 } from "fs";
+import path2 from "path";
+
+// src/cli/wrap.ts
 import { readFileSync, writeFileSync, existsSync, copyFileSync } from "fs";
 import path from "path";
 import os from "os";
@@ -17,21 +30,18 @@ var yellow = (s) => color(s, "33");
 var green = (s) => color(s, "32");
 var cyan = (s) => color(s, "36");
 var bold = (s) => color(s, "1");
-var HELP = `blindseal init \u2014 wrap your MCP servers with the Blindseal proxy
+var HELP = `blindseal init --wrap \u2014 wrap your MCP servers with the Blindseal proxy
 
 Usage:
-  blindseal init                   detect configs, show diff, confirm, write
-  blindseal init --yes             skip confirmation
-  blindseal init --dry-run         preview only, never write
-  blindseal init unwrap            restore from .blindseal-backup files
-  blindseal init --config <path>   operate on one specific config file
-  blindseal init --help, -h        this help
-
-Telemetry is OFF by default for newly-wrapped servers. To opt in, set
-BLINDSEAL_TELEMETRY=1 in your shell or in the wrapped server's env block.
+  blindseal init --wrap                   detect configs, show diff, confirm, write
+  blindseal init --wrap --yes             skip confirmation
+  blindseal init --wrap --dry-run         preview only, never write
+  blindseal init --unwrap                 restore from .blindseal-backup files
+  blindseal init --wrap --config <path>   operate on one specific config file
+  blindseal init --wrap --help, -h        this help
 
 Backups: every modified file is copied to <path>.blindseal-backup before writing.
-Re-running blindseal init is safe \u2014 already-wrapped servers are skipped.
+Re-running blindseal init --wrap is safe \u2014 already-wrapped servers are skipped.
 `;
 function parseArgs(argv) {
   const out = { command: "init", yes: false, dryRun: false, showHelp: false };
@@ -41,8 +51,8 @@ function parseArgs(argv) {
     else if (a === "--yes" || a === "-y") out.yes = true;
     else if (a === "--dry-run") out.dryRun = true;
     else if (a === "--config") out.configOverride = argv[++i];
-    else if (a === "unwrap") out.command = "unwrap";
-    else if (a === "init") out.command = "init";
+    else if (a === "--unwrap" || a === "unwrap") out.command = "unwrap";
+    else if (a === "--wrap" || a === "wrap" || a === "init") out.command = "init";
     else if (a?.startsWith("--")) throw new Error(`unknown flag: ${a}`);
   }
   return out;
@@ -204,12 +214,12 @@ async function confirm(question) {
     });
   });
 }
-async function runInit(argv) {
+async function runWrap(argv) {
   let args;
   try {
     args = parseArgs(argv);
   } catch (e) {
-    process.stderr.write(`blindseal init: ${e.message}
+    process.stderr.write(`blindseal init --wrap: ${e.message}
 `);
     process.stderr.write(HELP);
     return 2;
@@ -233,7 +243,7 @@ async function runInit(argv) {
       }
     }
     if (restored === 0) {
-      process.stderr.write("blindseal init unwrap: no .blindseal-backup files found\n");
+      process.stderr.write("blindseal init --unwrap: no .blindseal-backup files found\n");
       return 1;
     }
     return 0;
@@ -242,7 +252,7 @@ async function runInit(argv) {
   const presentPlans = plans.filter((p) => p.exists);
   if (presentPlans.length === 0) {
     process.stderr.write(
-      "blindseal init: no MCP configs found in default locations.\n  Looked in:\n" + targets.map((p) => `    - ${p}`).join("\n") + "\n  Pass --config <path> to operate on a specific file.\n"
+      "blindseal init --wrap: no MCP configs found in default locations.\n  Looked in:\n" + targets.map((p) => `    - ${p}`).join("\n") + "\n  Pass --config <path> to operate on a specific file.\n"
     );
     return 1;
   }
@@ -282,29 +292,105 @@ Wrap ${totalWraps} server${totalWraps === 1 ? "" : "s"}? [y/N] `);
   process.stdout.write("\n" + bold("Next steps:") + "\n");
   process.stdout.write(`  1. Restart Claude Code / Claude Desktop to pick up the new config.
 `);
-  process.stdout.write(`  2. ${dim("Telemetry is OFF by default. To share threat data with the Blindseal network,")}
-`);
-  process.stdout.write(`     ${dim("add BLINDSEAL_TELEMETRY=1 to your shell or to a wrapped server's env block.")}
+  process.stdout.write(`  2. ${dim("Watch decisions:")} ${cyan("blindseal dashboard")}
 `);
-  process.stdout.write(`  3. ${dim("Verify with:")} ${cyan("blindseal check --all")}
-`);
-  process.stdout.write(`  4. ${dim("To revert:")} ${cyan("blindseal init unwrap")}
+  process.stdout.write(`  3. ${dim("To revert:")} ${cyan("blindseal init --unwrap")}
 `);
   return 0;
 }
-if (import.meta.url === `file://${process.argv[1]}`) {
-  runInit(process.argv.slice(2)).then((code) => process.exit(code));
+
+// src/cli/init.ts
+var HELP2 = `blindseal init \u2014 set up ~/.blindseal (identity key, default policy, dashboard token)
+
+Usage:
+  blindseal init                       create ~/.blindseal and its defaults (safe to re-run)
+  blindseal init --wrap [flags]        wrap the MCP servers in your Claude configs with blindseal
+  blindseal init --unwrap              restore those configs from their .blindseal-backup files
+  blindseal init --help, -h            this help
+
+--wrap flags: --yes (skip confirmation), --dry-run (preview only), --config <path> (one file)
+
+Next steps after init:
+  blindseal run --mock                 local API + dashboard over sample data
+  blindseal -- <server command>        wrap a stdio MCP server
+`;
+function scaffoldHome(home = blindsealHome()) {
+  const created = [];
+  const kept = [];
+  if (!existsSync2(home)) {
+    mkdirSync(home, { recursive: true, mode: 448 });
+    created.push(home + path2.sep);
+  } else {
+    kept.push(home + path2.sep);
+  }
+  try {
+    if ((statSync(home).mode & 511) !== 448) chmodSync(home, 448);
+  } catch {
+  }
+  const keyPath = path2.join(home, "identity.key");
+  const hadKey = existsSync2(keyPath);
+  const { pubkeyHex } = loadIdentity(keyPath);
+  (hadKey ? kept : created).push(keyPath);
+  const policyPath = path2.join(home, "policy.json");
+  let policySource;
+  if (existsSync2(policyPath)) {
+    kept.push(policyPath);
+  } else {
+    const fixtures = shippedFixturesDir() ?? nearestFixturesDir();
+    const src = fixtures ? path2.join(fixtures, "policy.json") : void 0;
+    if (src && existsSync2(src)) {
+      copyFileSync2(src, policyPath);
+      chmodSync(policyPath, 384);
+      policySource = src;
+      created.push(policyPath);
+    }
+  }
+  const tokenPath = path2.join(home, "dashboard.token");
+  if (existsSync2(tokenPath)) {
+    kept.push(tokenPath);
+  } else {
+    writeFileSync2(tokenPath, randomBytes(24).toString("base64url") + "\n", { mode: 384 });
+    created.push(tokenPath);
+  }
+  return { home, created, kept, pubkeyHex, policySource };
+}
+async function runInit(argv) {
+  if (argv.some((a) => a === "--wrap" || a === "--unwrap" || a === "wrap" || a === "unwrap")) {
+    return runWrap(argv);
+  }
+  for (const a of argv) {
+    if (a === "--help" || a === "-h") {
+      process.stdout.write(HELP2);
+      return 0;
+    }
+    process.stderr.write(`blindseal init: unknown argument "${a}"
+${HELP2}`);
+    return 2;
+  }
+  let report;
+  try {
+    report = scaffoldHome();
+  } catch (e) {
+    process.stderr.write(`blindseal init: ${e.message}
+`);
+    return 1;
+  }
+  const lines = [`blindseal init: ${report.home}`];
+  for (const f of report.created) lines.push(`  created  ${f}`);
+  for (const f of report.kept) lines.push(`  kept     ${f}`);
+  lines.push(`  identity ${report.pubkeyHex.slice(0, 16)}\u2026 (ed25519, signs audit disclosures)`);
+  if (!report.created.includes(path2.join(report.home, "policy.json")) && !report.kept.includes(path2.join(report.home, "policy.json"))) {
+    lines.push("  warning  default policy not written: fixtures/policy.json not found in this install");
+  }
+  lines.push("");
+  lines.push("Next:");
+  lines.push("  blindseal run --mock             local API + dashboard over sample data");
+  lines.push("  blindseal -- <server command>    wrap a stdio MCP server (e.g. blindseal -- npx -y @modelcontextprotocol/server-filesystem /tmp)");
+  lines.push("  blindseal init --wrap            rewrite your Claude MCP configs to go through blindseal");
+  process.stdout.write(lines.join("\n") + "\n");
+  return 0;
 }
 export {
-  applyPlan,
-  applyUnwrap,
-  defaultConfigPaths,
-  isAlreadyWrapped,
-  isBashShellCommand,
-  parseArgs,
-  planConfig,
-  planEntry,
-  renderPlan,
-  resolveRelativeArgs,
-  runInit
+  runInit,
+  scaffoldHome
 };

package/dist/run-YQBNEPSD.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+import {
+  parseRunArgs,
+  resolveDashboardDir,
+  resolveFixturesDir,
+  runRun
+} from "./chunk-6EU4GH4P.js";
+import "./chunk-B44GZXDX.js";
+import "./chunk-VSOUJM6X.js";
+import "./chunk-CIUQ6WHJ.js";
+import "./chunk-PDX44BCA.js";
+export {
+  parseRunArgs,
+  resolveDashboardDir,
+  resolveFixturesDir,
+  runRun
+};

package/dist/{submit-2UALCRX2.js → submit-D6MQTAXT.js}

@@ -5,7 +5,7 @@ import {
   isConsumed,
   submit,
   verifyOffchain
-} from "./chunk-BTIXDNTV.js";
+} from "./chunk-DJL2E6RF.js";
 import "./chunk-PDX44BCA.js";
 
 // src/cli/submit.ts

package/dist/verify-RISAGKXC.js

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+import {
+  decodePublicInputs,
+  verifyOffchain
+} from "./chunk-DJL2E6RF.js";
+import {
+  isCleanWindow,
+  verifyDisclosure
+} from "./chunk-VSOUJM6X.js";
+import "./chunk-PDX44BCA.js";
+
+// src/cli/verify.ts
+import { readFileSync } from "fs";
+var HELP = `blindseal verify \u2014 verify an attestation.json or a disclosure.json offline
+
+Usage:
+  blindseal verify <file>
+
+An attestation is VALID only if the Groth16 proof checks out AND every labeled field
+(payloadHash, policyRoot, detectorVersion, actionHash, nullifier, expirySlot) matches
+what the proof's public-input blob actually commits to.
+`;
+var NO_EXPIRY_SLOT = 2e9;
+var DECODED_LABELS = ["payloadHash", "policyRoot", "detectorVersion", "actionHash", "nullifier", "expirySlot"];
+function formatDecoded(decoded) {
+  const expiry = decoded.expirySlot;
+  const expiryNote = String(expiry) === String(NO_EXPIRY_SLOT) ? " (no expiry)" : "";
+  return [
+    `  payloadHash      ${decoded.payloadHash}`,
+    `  policyRoot       ${decoded.policyRoot}`,
+    `  detectorVersion  ${decoded.detectorVersion}`,
+    `  actionHash       ${decoded.actionHash}`,
+    `  nullifier        ${decoded.nullifier}`,
+    `  expirySlot       ${expiry}${expiryNote}`
+  ].join("\n");
+}
+function decodedFrom(att, r) {
+  const fallback = (() => {
+    try {
+      return decodePublicInputs(att.publicInputs[0]);
+    } catch {
+      return void 0;
+    }
+  })();
+  const out = {};
+  for (const k of DECODED_LABELS) {
+    const v = r.decoded?.[k] ?? fallback?.[k];
+    out[k] = v === void 0 ? "(undecodable)" : String(v);
+  }
+  return out;
+}
+async function verifyAttestationFile(file, att) {
+  const r = await verifyOffchain(att);
+  const decoded = decodedFrom(att, r);
+  const mismatches = r.mismatches ?? [];
+  const lines = [`attestation ${file}: ${r.ok ? "VALID" : `INVALID \u2014 ${r.reason ?? "unknown reason"}`}`];
+  lines.push(formatDecoded(decoded));
+  if (mismatches.length > 0) {
+    lines.push(`  label mismatch (${mismatches.length}): ${mismatches.join(", ")}`);
+    for (const m of mismatches) {
+      const labeled = att[m];
+      const dec = decoded[m];
+      if (labeled !== void 0) lines.push(`    ${m}: labeled ${String(labeled)} \u2260 decoded ${dec ?? "?"}`);
+    }
+  }
+  return { ok: r.ok, reason: r.reason ?? null, decoded, mismatches, text: lines.join("\n") + "\n" };
+}
+async function runVerifyCli(argv) {
+  const file = argv[0];
+  if (!file || file === "--help" || file === "-h") {
+    process.stdout.write(HELP);
+    return file ? 0 : 2;
+  }
+  const doc = JSON.parse(readFileSync(file, "utf8"));
+  if (Array.isArray(doc.entries) && typeof doc.signature === "string") {
+    const d = doc;
+    const v = verifyDisclosure(d);
+    process.stdout.write(`disclosure ${file}: ${v.ok ? "VALID" : `INVALID \u2014 ${v.reason}`}
+`);
+    if (v.ok) process.stdout.write(`  window #${d.from}\u2013#${d.to}, ${d.entries.length} entries, signer ${d.signerPubkey.slice(0, 16)}\u2026, clean window: ${isCleanWindow(d) ? "yes" : "no"}
+`);
+    return v.ok ? 0 : 1;
+  }
+  if (doc.proof && Array.isArray(doc.publicInputs)) {
+    const report = await verifyAttestationFile(file, doc);
+    process.stdout.write(report.text);
+    return report.ok ? 0 : 1;
+  }
+  process.stderr.write("blindseal verify: not an attestation.json or a disclosure.json\n");
+  return 2;
+}
+export {
+  DECODED_LABELS,
+  NO_EXPIRY_SLOT,
+  formatDecoded,
+  runVerifyCli,
+  verifyAttestationFile
+};

package/fixtures/attestation-sample.json

@@ -0,0 +1,25 @@
+{
+  "version": 1,
+  "id": "att_8e1c2a16",
+  "decisionId": "1ZYXWVTSRQPNMKJHGFEDCBA987",
+  "actionHash": "0x3c2ef0a0176baa898fd7ef83432e6b477f3ee4e7c3d116f2298f4916f8e57cd0",
+  "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+  "detectorVersion": "0x006a0d1e62646623f1d2b9af7f3792c4d15aa7d6107bdb089a0760fd5b29331e",
+  "expirySlot": 280000000,
+  "nullifier": "0x352e1ed89bd7948609a20e78ff99b65ae5ba64af3a363e4a824be542399857f0",
+  "payloadHash": "0xef537f25c895bfa782526529a9b63d97aa631564d5d789c2b765448c8635fb6c",
+  "nonce": "0x8e1c2a16c62c803b8b94925554ebc12a3110e7744ebb06fc81b1943e998d3e6f",
+  "publicInputs": [
+    "0xef537f25c895bfa782526529a9b63d97aa631564d5d789c2b765448c8635fb6c36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397006a0d1e62646623f1d2b9af7f3792c4d15aa7d6107bdb089a0760fd5b29331e3c2ef0a0176baa898fd7ef83432e6b477f3ee4e7c3d116f2298f4916f8e57cd0352e1ed89bd7948609a20e78ff99b65ae5ba64af3a363e4a824be542399857f00076b01000000000"
+  ],
+  "proof": {
+    "bytes": "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",
+    "curve": "bn254",
+    "protocol": "groth16"
+  },
+  "tee": {
+    "mode": "local"
+  },
+  "status": "generated",
+  "createdAt": "2026-10-20T10:01:40.031Z"
+}

package/fixtures/attestation-tampered.json

@@ -0,0 +1,29 @@
+{
+  "version": 1,
+  "id": "att_8e1c2a16",
+  "decisionId": "1ZYXWVTSRQPNMKJHGFEDCBA987",
+  "actionHash": "0x419f8b8a5a8fd350cdb4e4b109dc347faa61cef1da5f3e85c8432fcb9614a337",
+  "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+  "detectorVersion": "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+  "expirySlot": 280200000,
+  "nullifier": "0x949bcc04116aa64475b87e5a188ce6f4a109325a823dc12a6f83c431bcc00f21",
+  "nonce": "0x8e1c2a16c62c803b8b94925554ebc12a3110e7744ebb06fc81b1943e998d3e6f",
+  "publicInputs": [
+    "0x880dcefa96c5ac45dcb65880cf9f83b244d5e5e034c39675b6741ef16e5d3fe7",
+    "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+    "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+    "0xf138bb1972b30b2e19e8131164e9a357037ba18a9f3c8c24d86faa43a6f202a2",
+    "0x949bcc04116aa64475b87e5a188ce6f4a109325a823dc12a6f83c431bcc00f21",
+    "0x10b38340"
+  ],
+  "proof": {
+    "protocol": "groth16",
+    "curve": "bn254",
+    "bytes": "0x463872f8e4d833024e1806704f179ce986ea54c8c87089f52f3865c624c62978"
+  },
+  "tee": {
+    "mode": "local"
+  },
+  "status": "rejected",
+  "createdAt": "2026-10-20T10:01:40.031Z"
+}

package/fixtures/attestations.json

@@ -0,0 +1,174 @@
+[
+  {
+    "version": 1,
+    "id": "att_af877263",
+    "decisionId": "1ZYXWVTSRQPNMKJHGFEDCBA987",
+    "actionHash": "0x13a111cb3474c0c4bc220f97b4552ff30f384f0d9cdf70e38c999fad075b56b6",
+    "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+    "detectorVersion": "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+    "expirySlot": 280050000,
+    "nullifier": "0x6e505acf72de90804156c5c147e947acdfb71f13a0b9a2ee0a0693bf76810ea1",
+    "nonce": "0xaf877263a4c846ed9fcba50f2462466c14b71532aea54b96d09e555fae82fdca",
+    "publicInputs": [
+      "0x880dcefa96c5ac45dcb65880cf9f83b244d5e5e034c39675b6741ef16e5d3fe736a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d13a111cb3474c0c4bc220f97b4552ff30f384f0d9cdf70e38c999fad075b56b66e505acf72de90804156c5c147e947acdfb71f13a0b9a2ee0a0693bf76810ea15039b11000000000"
+    ],
+    "proof": {
+      "protocol": "groth16",
+      "curve": "bn254",
+      "bytes": "0x79f9451e18ff8af4594fd7417de6e1ac6c5fd856633cb10488c39d519920af95"
+    },
+    "tee": {
+      "mode": "local"
+    },
+    "status": "generating",
+    "progressPct": 40,
+    "createdAt": "2026-10-20T09:00:00.655Z"
+  },
+  {
+    "version": 1,
+    "id": "att_7db462be",
+    "decisionId": "GZYXWVTHRQPNMKJHGFEDCBA987",
+    "actionHash": "0x1ef1bf9891a621e00349bf8af77dfdb040436b1e99869c8908b0c5b9f6c7b17d",
+    "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+    "detectorVersion": "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+    "expirySlot": 280051500,
+    "nullifier": "0xd194e860787b413bef3a27dd5350e1bde772d09b87cd4b0e3e84ce3411ac586a",
+    "nonce": "0x7db462be4a009edbb4fd81dd2d2719aebaa640edc4d1947efe945e3756c646de",
+    "publicInputs": [
+      "0x0adb6cb09a695e7ee3d2fbdcb3bf3d3519f14d26a82d0897fa2ee697e861a332",
+      "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+      "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+      "0x1ef1bf9891a621e00349bf8af77dfdb040436b1e99869c8908b0c5b9f6c7b17d",
+      "0xd194e860787b413bef3a27dd5350e1bde772d09b87cd4b0e3e84ce3411ac586a",
+      "0x10b13f2c"
+    ],
+    "proof": {
+      "protocol": "groth16",
+      "curve": "bn254",
+      "bytes": "0x4728743bfe2793c90cc5f0010a1265315c2d182af80d1262642f72e99a30d712"
+    },
+    "tee": {
+      "mode": "local"
+    },
+    "status": "generated",
+    "createdAt": "2026-10-20T09:00:41.945Z"
+  },
+  {
+    "version": 1,
+    "id": "att_730d318d",
+    "decisionId": "ZZYXWVTSRQPNMKJHGFEDCBA987",
+    "actionHash": "0xf52cb59155a8fff04f6839ee0326f8a8b009a159f7e8dc4cf3d536e59633be65",
+    "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+    "detectorVersion": "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+    "expirySlot": 280053000,
+    "nullifier": "0x246fbea68e54fd20b0a51f622f6b9a7c620bb972db996da625f3e303fcfb212e",
+    "nonce": "0x730d318d494da9c8aec119f9215af82b01c05774f6e29775d138ad31e0d03e00",
+    "publicInputs": [
+      "0x7d6d6319d4591cf0310ba8f595dbbc22eda474b15a88f8e7ce2fc267566dfd1f",
+      "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+      "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+      "0xf52cb59155a8fff04f6839ee0326f8a8b009a159f7e8dc4cf3d536e59633be65",
+      "0x246fbea68e54fd20b0a51f622f6b9a7c620bb972db996da625f3e303fcfb212e",
+      "0x10b14508"
+    ],
+    "proof": {
+      "protocol": "groth16",
+      "curve": "bn254",
+      "bytes": "0x9587a488593dcf305174d6e2d3530e244916b1da9aaed6bb6de130d25d4f342f"
+    },
+    "tee": {
+      "mode": "local"
+    },
+    "status": "submitted",
+    "txSig": "4fbb48d0bc17b35e83d1689f3afb714085b61dfc6425ef1f19a5d9bed3317346",
+    "createdAt": "2026-10-20T09:01:15.908Z"
+  },
+  {
+    "version": 1,
+    "id": "att_daa57fbb",
+    "decisionId": "EZYXWVTSRQPNMKJHGFEDCBA987",
+    "actionHash": "0x1904a533e00fb24c0fa8107ee3738f01b3c79adfa2dbe2872d74b5ccd970b9e1",
+    "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+    "detectorVersion": "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+    "expirySlot": 280054500,
+    "nullifier": "0x1481561e3ba282e46b576ebcc6317e9388995196e06ba6baeafafa6e40a50291",
+    "nonce": "0xdaa57fbb47c67bed35cfa2bbbb2c7cbe6723ec575fff59c8176bfd940058b640",
+    "publicInputs": [
+      "0xf92dbaf9090540cd09bfdeb43adea3f5639291925e6298b3ae29b39018b02e3c",
+      "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+      "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+      "0x1904a533e00fb24c0fa8107ee3738f01b3c79adfa2dbe2872d74b5ccd970b9e1",
+      "0x1481561e3ba282e46b576ebcc6317e9388995196e06ba6baeafafa6e40a50291",
+      "0x10b14ae4"
+    ],
+    "proof": {
+      "protocol": "groth16",
+      "curve": "bn254",
+      "bytes": "0x2145e9705712d87a3437fc6d3f2173962ac959ff8621dc7153b765f67bd53967"
+    },
+    "tee": {
+      "mode": "local"
+    },
+    "status": "consumed",
+    "txSig": "123269d63c5906ec89a20880b5b0a675e0bdfbe07f085767737bef290709143d",
+    "createdAt": "2026-10-20T09:01:52.203Z"
+  },
+  {
+    "version": 1,
+    "id": "att_5f5de7e9",
+    "decisionId": "XZYXWVTSRQPNMKJHGFEDCBA987",
+    "actionHash": "0x9baee8190b24e34008840a73c7c7a7538c46e01911992a931fe790f32fd29b33",
+    "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+    "detectorVersion": "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+    "expirySlot": 279906000,
+    "nullifier": "0x87ef4f759db33f34017f5e10e1d178b158f837cab6fcd4692456fa27c2c54b18",
+    "nonce": "0x5f5de7e97280293b7c730790992649ccfaf661e50496d98af0c425aa5f35d84b",
+    "publicInputs": [
+      "0x0b0461c0ff4fa87a7d123062cfb71b1af989fcfc1ae2c27baa9eba1ffa35e42f",
+      "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+      "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+      "0x9baee8190b24e34008840a73c7c7a7538c46e01911992a931fe790f32fd29b33",
+      "0x87ef4f759db33f34017f5e10e1d178b158f837cab6fcd4692456fa27c2c54b18",
+      "0x10af06d0"
+    ],
+    "proof": {
+      "protocol": "groth16",
+      "curve": "bn254",
+      "bytes": "0xe0dcdeb8813d92d195f4f4350a2426be624da89e3f57cbaecc9d319dfbf000fe"
+    },
+    "tee": {
+      "mode": "local"
+    },
+    "status": "expired",
+    "createdAt": "2026-10-20T09:02:32.981Z"
+  },
+  {
+    "version": 1,
+    "id": "att_74c62e10",
+    "decisionId": "CZYXWVTSGQPNMKJHGFEDCBA987",
+    "actionHash": "0x1813c571fd039e0cfb5654e4c32190d59dc8d0ff0f67eb8edb74b0ffece71449",
+    "policyRoot": "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+    "detectorVersion": "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+    "expirySlot": 280057500,
+    "nullifier": "0xd2c1d1b41e30141a20a1a36ce7fcbb92e015903523e588916ca9c9efc197a956",
+    "nonce": "0x74c62e10a495557564238ea9d65bfd8d80edb56923187bfb7e871ef191491c7d",
+    "publicInputs": [
+      "0xdf663e9050b03500ec1028dd7c756de84d761be61f1cf404befa534b8fd4336f",
+      "0x36a9e9457db6ecfd752a379fc9279ad6a0acfea07928f61e2f3638a685c38397",
+      "0x726faa56c0857bbace50727feedf504a76f37a98c975f565e44bf341fb29851d",
+      "0x1813c571fd039e0cfb5654e4c32190d59dc8d0ff0f67eb8edb74b0ffece71449",
+      "0xd2c1d1b41e30141a20a1a36ce7fcbb92e015903523e588916ca9c9efc197a956",
+      "0x10b1569c"
+    ],
+    "proof": {
+      "protocol": "groth16",
+      "curve": "bn254",
+      "bytes": "0xd29428b98c622aed5e8356bd3221a19ea1fbcd57b52a724fbe6635762869b8ab"
+    },
+    "tee": {
+      "mode": "local"
+    },
+    "status": "rejected",
+    "createdAt": "2026-10-20T09:03:05.127Z"
+  }
+]