Evidence arc_ev_2e61efe26403bfc44b0d84cb254af100
finance-agent requested stripe.get_charge · no policy authorizes this action
denied DENY
What happened
-
Requested 09:18:24.888Zfinance-agent → stripe.get_charge
-
Decided +0.025 msDENY engine defaultno policy authorizes this action
-
Approval (no data)not required
-
Executed (no data)not executed: denied
- Environment
- production
- Owner
- finance-ops@example.com
- Tool
- read · low · stripe
- Credential
- arc_cred_64a038f28a98635d3b9c80a2e9fcc00b
Parameters
| chargeId | ch_3PjK2aL9xQ |
|---|
Agent-stated intent (advisory, not used by policy): “Confirming the charge before refunding it”
Decision trace
Every rule the engine examined, in order. The evidence record stores a digest of this trace, so a tampered trace is detectable without duplicating it.
No policy matched this action, so no rule was examined. The engine default decided.
Obligations
None
Integrity
integrityDigest
over every field above
sha256:c7f0000ad1e1f4eb0ccc077eb121915ce0053c20ee9facbbfc4c468ed2d3f8d5
parametersDigest
sha256:f7ce223dabec3405e1271460f73ffeef58a63d289dc4c59fceb9c78f2bb4ff62
traceDigest
sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
Raw record (JSON)
{
"id": "arc_ev_2e61efe26403bfc44b0d84cb254af100",
"schemaVersion": 1,
"actionId": "arc_act_d1deb00ec7ef9b07b9b5a5aa88982c07",
"organizationId": "default",
"environment": "production",
"agent": {
"id": "arc_ag_c73111f98579055423626c6e4a1f2c86",
"name": "finance-agent",
"owner": "finance-ops@example.com",
"roles": [
"finance"
],
"credentialId": "arc_cred_64a038f28a98635d3b9c80a2e9fcc00b"
},
"tool": {
"name": "stripe.get_charge",
"system": "stripe",
"effect": "read",
"riskTier": "low",
"connector": "simulation"
},
"request": {
"parameters": {
"chargeId": "ch_3PjK2aL9xQ"
},
"parametersDigest": "sha256:f7ce223dabec3405e1271460f73ffeef58a63d289dc4c59fceb9c78f2bb4ff62",
"intent": "Confirming the charge before refunding it",
"requestedAt": "2026-10-26T09:18:24.888Z"
},
"decision": {
"id": "arc_dec_ddedc1b968753de8248d82e9089e9ea7",
"effect": "DENY",
"reason": "no policy authorizes this action",
"decidedAt": "2026-10-26T09:18:24.888Z",
"evaluationMs": 0.025345,
"traceDigest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
},
"risk": {
"class": "routine",
"reversibility": "reversible",
"sensitive": false,
"factors": [
{
"code": "tool_risk_tier",
"detail": "the tool is registered at risk tier \"low\"",
"escalation": 0
}
],
"classifierVersion": 1
},
"outcome": "denied",
"obligations": [],
"createdAt": "2026-10-26T09:18:24.889Z",
"integrityDigest": "sha256:c7f0000ad1e1f4eb0ccc077eb121915ce0053c20ee9facbbfc4c468ed2d3f8d5"
}
Raw decision trace (JSON)
[]