SAMPLE DATA
Evidence pack · Regulation (EU) 2024/1689 · Article 12 record-keeping

EU AI Act Article 12
Evidence Pack

Example Health Ltd (sample) · Company No. 00000000
1 Sample Street, London
SystemTriageAI clinical triage assistant (triage-ai) Period2026-09-30 — 2026-09-30 Issued2026-10-05T16:16:26Z Pack IDA12-20261005-triage-ai-80BCB1 Records5 typed · grades A 1 · B 4 · C 0 IntegrityINTEGRITY VERIFIED   5/5 signatures verified · 0 chain breaks NotarisationRFC 3161 · http://tsa.izenpe.com · 1 anchor(s) Signing keysinference_enforcer 4b:53:2f:47:09:70:c5:6c…3179
policy_enforcer 12:6b:14:d0:52:55:33:5f…56bd
human_approver cd:88:25:97:0d:c8:5d:70…594f
TypingLATS-1.1 · LATS-1.1 / legal-typer / 2026-09-30 · model e67e8cc0ec4be9aa… · reproducible True Generated byarticle12-pack 0.2.0 on inferX · 2026-10-05T16:16:26Z Issuance sealwritten to the evidence ledger after rendering; receipt in the manifest file Verificationre-ingest the embedded source pack into any inferX deployment, or any AAT-conformant verifier, and compare record hashes, signatures and typing digests

What this pack is. A regulator-facing assembly of the signed records of the system named above for the period stated, each record independently re-verified, expressed as the legally-operative facts a finding needs, graded by its level of cryptographic attestation, and sealed. It is produced from the records, not from a dashboard.

1 · Executive summary

What the records establish for the period

5records typed
5independently verified
0tampered / chain breaks
9material events

This pack contains 5 records of the system TriageAI clinical triage assistant for the period 2026-09-30 to 2026-09-30. Each record's hash was recomputed from its content, its signature verified against the published key, and its chain link to the preceding record tested. Result: integrity verified, 5 of 5 signatures valid, 0 chain breaks.

Every record was then expressed as the fifteen legally-operative facts (who acted, for whom, what, on what, to whom, which model and version, input, output, data class, authority, permission, competence, human involvement, time) and graded: 1 Grade A (signed, model pinned, attested, reproducible), 4 Grade B (signed and verifiable, model hosted or closed), 0 Grade C (unattested, corroboration required).

Authorisation outcomes: permitted 2, refused 3. Human interventions recorded: 2. Refusals: 3. Competence shortfalls: 3. Records with fragile typing needing human review: 0.

Operator statement. Sample pack generated from a five-record demonstration bundle. Organisations, persons and events are sample data; the cryptography, verification and typing are real.

Pack composition

Human-readable sections 1 to 8 (this document) and a machine-readable archive: the source pack as received, the typed output, and the manifest with SHA-256 digests, all embedded at the end of this file and written alongside it.

2 · Article 12 mapping

Requirement, what the pack provides, coverage

A technical alignment of the pack's contents to the record-keeping provisions of Regulation (EU) 2024/1689. The requirement column paraphrases the regulation for readability; the regulation text governs.

ProvisionRequirement, in shortWhat this pack providesCoverage
Art. 12(1)The system must allow events to be recorded automatically over its lifetime.Every act is captured at source by a producer and sealed in the ledger as a signed, hash-chained record.5 records, 5 signed
Art. 12(2)(a)Logs must help identify situations that may present a risk or amount to a substantial modification.Material events: refusals, human interventions, competence shortfalls, integrity failures and unattested records are listed with record references.9 events listed
Art. 12(2)(b)Logs must facilitate post-market monitoring (Art. 72).Operational summary by actor, act, model and version; model identity and version are typed facts on every record.1 model identities
Art. 12(2)(c)Logs must support monitoring of operation by the deployer (Art. 26(5)).Authorisation outcome, competence level and human intervention are typed, graded facts per record.2 human interventions
Art. 12(3)For remote biometric identification systems: period of each use, reference database, matched input data, and the natural persons who verified results (Art. 14(5)).Where applicable, carried by the temporal-validity, object, input and human-intervention facts. Marked not applicable otherwise.not applicable
Art. 14Human oversight: the system must be effectively overseen by natural persons.Human approval, override and hardware-receipt facts; AgentBee receipts recorded verbatim.2 human interventions
Art. 19 / Art. 26(6)Providers and deployers keep the logs for at least six months, or longer where law requires.Write-once retention stated in the system inventory; the ledger refuses modification or deletion during retention.7 years, write-once (S3 Object Lock, Compliance mode)
Annex IVTechnical documentation for the system.System inventory section; model, tool and data-classification inventories are derived from the records themselves.section 3
3 · System inventory

Aligned to Annex IV technical documentation

Declared fields come from the operator's system profile. Observed fields are derived from the records in this pack and cannot be edited without breaking the records' hashes.

System nameTriageAI clinical triage assistant
System identifiertriage-ai
ProviderExample Health Ltd (in-house)
Risk classificationHigh-risk (Annex III, point 5(a): access to essential services, healthcare triage)
Intended purposeSummarise patient history, flag contraindications and route cases to specialist review; no autonomous clinical decision
Deployment date2026-09-01
Operational environmentProduction, single hospital trust, UK
Agent frameworks / producersMCP producer, inference enforcer, policy enforcer, in-database enforcement, AgentBee hardware approval
Models (declared)in-house-llm-v4 (open weights, pinned by digest, attested on AMD SEV-SNP)
Models (observed in records)in-house-llm-v4 ×1
Tools (observed in records)not provided
Data classifications (observed)personal data ×3, special-category (health) data ×1, financial data ×1
Human-in-the-loop triggerAny special-category inference, any record erasure, any export: AgentBee hardware approval by a named clinician
Designated operatorClinical Informatics, Example Health Ltd
Log retention7 years, write-once (S3 Object Lock, Compliance mode)
Evidence storeAgentPass Evidence ledger, hybrid ES256 + ML-DSA-65 seals, RFC 3161 anchored
Last conformity assessmentInternal, 2026-08-20
Material changes in periodNone in period
4 · Operational summary

Who acted, what was done, under what outcome

5acts recorded
2permitted
3refused
2human interventions

By actor

marketing_bot240%
triage_ai120%
billing_agent120%
support_ai120%

By act

inference120%
tool_call120%
delete120%
export120%
SELECT120%

By model identity

in-house-llm-v41100%

By data classification

personal data360%
special-category (health) data120%
financial data120%

By day

2026-09-305100%
5 · Material events

Situations that may present a risk, with record references

Detected from the typed facts and the integrity re-derivation, not from operator narrative. Operator-reported events, where supplied in the profile, are shown with their matching record. Each event points at the exact record and hash so the reader can go to the source.

Refused action

Agent support_ai attempted to delete claim file C-231 (personal data) for customer 4471 under GDPR Article 17 erasure request; the action was refused at L2 (required L3), with no human approval on record, at 2026-09-30T11:20:07. Recorded reason: active legal-hold: retention obligation overrides erasure.

record #3 · hash 646b5c0f065ccd39c6ab1485… · grade B · integrity verified · authorisation outcome refused; recorded rather than dropped

Refused action

Agent marketing_bot attempted to export the claimant list (personal data) concerning the data subject to an external marketing platform under no lawful basis on record; the transfer was refused at L1 (required L2), with no human approval on record, at 2026-09-30T11:45:33. Recorded reason: egress blocked: no Article 6 lawful basis for marketing disclosure.

record #4 · hash 94a961362e108704f29a0dde… · grade B · integrity verified · authorisation outcome refused; recorded rather than dropped

Refused action

Agent marketing_bot attempted to SELECT public.customers (personal data) for the data subject under policy P-12; the action was refused at L1 (required L2), with no human approval on record, at 2026-09-30T13:27:03. Recorded reason: SELECT on public.customers requires L2, agent is L1.

record #5 · hash f3c35eae86a4bae7848a926a… · grade B · integrity verified · authorisation outcome refused; recorded rather than dropped

Competence shortfall

Agent support_ai attempted to delete claim file C-231 (personal data) for customer 4471 under GDPR Article 17 erasure request; the action was refused at L2 (required L3), with no human approval on record, at 2026-09-30T11:20:07. Recorded reason: active legal-hold: retention obligation overrides erasure.

record #3 · hash 646b5c0f065ccd39c6ab1485… · grade B · integrity verified · agent acted at or sought a level it did not hold

Competence shortfall

Agent marketing_bot attempted to export the claimant list (personal data) concerning the data subject to an external marketing platform under no lawful basis on record; the transfer was refused at L1 (required L2), with no human approval on record, at 2026-09-30T11:45:33. Recorded reason: egress blocked: no Article 6 lawful basis for marketing disclosure.

record #4 · hash 94a961362e108704f29a0dde… · grade B · integrity verified · agent acted at or sought a level it did not hold

Competence shortfall

Agent marketing_bot attempted to SELECT public.customers (personal data) for the data subject under policy P-12; the action was refused at L1 (required L2), with no human approval on record, at 2026-09-30T13:27:03. Recorded reason: SELECT on public.customers requires L2, agent is L1.

record #5 · hash f3c35eae86a4bae7848a926a… · grade B · integrity verified · agent acted at or sought a level it did not hold

Human intervention

Agent triage_ai, running model in-house-llm-v4 (build 2026-09-18), received for patient 220 the instruction “summarise the patient's medical history and flag contraindications” over special-category (health) data and produced “a recommendation to escalate for specialist review”; the inference was permitted under GDPR Article 9(2)(h) and clinical consent at L3 (required L3), approved by Dr A. Rossi on a hardware human-approval key, at 2026-09-30T09:02:11.

record #1 · hash 49ccc381edc9dfceda228e52… · grade A · integrity verified · human approval, override or hardware receipt on record

Human intervention

Agent billing_agent attempted to transfer €50,000 (financial data) concerning Acme Ltd to Global Payments Inc under signed purchase order PO-3391; the transfer was permitted at L4 (required L4), approved by compliance officer M. Khan on a hardware human-approval key, at 2026-09-30T10:14:53.

record #2 · hash f9e258d110f70e5adccd9795… · grade B · integrity verified · human approval, override or hardware receipt on record

Export of personal data to an external platform refused at policy · 2026-09-30

Summary. An export of the claimant list to an external marketing platform was requested with no lawful basis on record and was refused by the policy enforcer. The refusal was recorded rather than dropped.

Root Cause. Request carried no authority basis for onward transfer.

Mitigation. No data left the boundary. Routed to the data protection officer for a lawful-basis decision.

Impact. None to data subjects. One refused act on record.

Notification. Not required.

record #4 · hash 94a961362e108704f29a0dde…
6 · Integrity proof

Every claim re-derived, not trusted

OverallINTEGRITY VERIFIED MethodSHA-256 over sorted-compact-JSON (ASCII-escaped) record content; ECDSA P-256 signature over the record hash; hash-chain prev-linkage. Scheme reproducedTrue First record hash49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e Last record hashf3c35eae86a4bae7848a926a05382cf426ca9fab99ed8701e7ad99d6031c8719 Counts{"records": 5, "verified": 5, "tampered": 0, "hmac_integrity_only": 0, "unattested": 0, "hash_ok": 5, "hash_mismatch": 0, "sig_ok": 5, "sig_invalid": 0, "chain_broken": 0} External anchorRFC 3161 · http://tsa.izenpe.com · 1 anchor(s) · RFC 3161 timestamp Signing keysinference_enforcer 4b:53:2f:47:09:70:c5:6c…3179
policy_enforcer 12:6b:14:d0:52:55:33:5f…56bd
human_approver cd:88:25:97:0d:c8:5d:70…594f
inferXLATS-1.1 / legal-typer / 2026-09-30 · model sha256 e67e8cc0ec4be9aa7e53059c5d656d91aaed3c898379600635dc863b4c504eb9 · schema LATS-1.1 Typing reproducibilityeach record typed twice; digests identical for all records Appraisal sealinferX signed its own typing records (kid 8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0); chain verifies: True
#record hashprevhashsigchainkey idtyping digest
#149ccc381edc9dfceda22…00000000000000…okokgenesisDkFZJghtckp1wt95dd20a53ff5a7…
#2f9e258d110f70e5adccd…49ccc381edc9df…okokokqR7xpOj2Y_6tz35e89315efdf132…
#3646b5c0f065ccd39c6ab…f9e258d110f70e…okokokO7jtonHpQnlXd50ea953d1afb8ab…
#494a961362e108704f29a…646b5c0f065ccd…okokokO7jtonHpQnlXd509a243966d0795…
#5f3c35eae86a4bae7848a…94a961362e1087…okokokO7jtonHpQnlXd5b2814b363dd84f…
7 · Typed-Evidence Records

Each record as the facts a finding needs

This is what a log-only pack cannot carry. Each record is sorted into the fifteen legally-operative categories of the Typed-Evidence Record draft, graded by attestation, with fragile facts flagged for human review. The typing is deterministic: the same record yields byte-identical facts on every run.

#1 Agent triage_ai, running model in-house-llm-v4 (build 2026-09-18), received for patient 220 the instruction “summarise the patient's medical history and flag contraindications” over special-category (health) data and produced “a recommendation to escalate for specialist review”; the inference was permitted under GDPR Article 9(2)(h) and clinical consent at L3 (required L3), approved by Dr A. Rossi on a hardware human-approval key, at 2026-09-30T09:02:11.
GRADE A
actor
triage_ai
model identity
in-house-llm-v4
model version
(build 2026-09-18)
principal
patient 220
prompt
“summarise the patient's medical history and flag contraindications”
data sensitivity
special-category (health) data
output
a recommendation to escalate for specialist review
authorization decision
permitted
authority basis
GDPR Article 9(2)(h) and clinical consent
competence level
L3
human approval
approved by Dr A. Rossi on a hardware human-approval key
time of act
2026-09-30T09:02:11
open-weight model pinned + attested — the decision can be re-run in court · source 49ccc381edc9dfceda228e52… · typing 95dd20a53ff5a7a3782b4399… · integrity verified
#2 Agent billing_agent attempted to transfer €50,000 (financial data) concerning Acme Ltd to Global Payments Inc under signed purchase order PO-3391; the transfer was permitted at L4 (required L4), approved by compliance officer M. Khan on a hardware human-approval key, at 2026-09-30T10:14:53.
GRADE B
actor
billing_agent
data resource
€50,000
data sensitivity
(financial data)
principal
Acme Ltd
recipient
Global Payments Inc
authority basis
signed purchase order PO-3391
authorization decision
permitted
competence level
L4
human approval
approved by compliance officer M. Khan on a hardware human-approval key
time of act
2026-09-30T10:14:53
signed/anchored record — model not re-runnable (frontier/API); verifiable as a record · source f9e258d110f70e5adccd9795… · typing 5e89315efdf1323cf9c34164… · integrity verified
#3 Agent support_ai attempted to delete claim file C-231 (personal data) for customer 4471 under GDPR Article 17 erasure request; the action was refused at L2 (required L3), with no human approval on record, at 2026-09-30T11:20:07. Recorded reason: active legal-hold: retention obligation overrides erasure.
GRADE B
actor
support_ai
action performed
delete
data resource
claim file C-231
data sensitivity
personal data
principal
customer 4471
authority basis
GDPR Article 17 erasure request
authorization decision
refused
competence level
L2
human approval
with no human approval on record
time of act
2026-09-30T11:20:07
signed/anchored record — model not re-runnable (frontier/API); verifiable as a record · source 646b5c0f065ccd39c6ab1485… · typing 0ea953d1afb8ab6d1214ea0d… · integrity verified
#4 Agent marketing_bot attempted to export the claimant list (personal data) concerning the data subject to an external marketing platform under no lawful basis on record; the transfer was refused at L1 (required L2), with no human approval on record, at 2026-09-30T11:45:33. Recorded reason: egress blocked: no Article 6 lawful basis for marketing disclosure.
GRADE B
actor
marketing_bot
action performed
export
data resource
the claimant list
data sensitivity
personal data
principal
the data subject
recipient
an external marketing platform
authority basis
no lawful basis on record
authorization decision
refused
competence level
L1
human approval
with no human approval on record
time of act
2026-09-30T11:45:33
signed/anchored record — model not re-runnable (frontier/API); verifiable as a record · source 94a961362e108704f29a0dde… · typing 09a243966d0795ef47b2396d… · integrity verified
#5 Agent marketing_bot attempted to SELECT public.customers (personal data) for the data subject under policy P-12; the action was refused at L1 (required L2), with no human approval on record, at 2026-09-30T13:27:03. Recorded reason: SELECT on public.customers requires L2, agent is L1.
GRADE B
actor
marketing_bot
action performed
SELECT
data resource
public.customers
data sensitivity
(personal data)
principal
the data subject
authority basis
policy P-12
authorization decision
refused
competence level
L1
human approval
with no human approval on record
time of act
2026-09-30T13:27:03
data resource
public.customers
signed/anchored record — model not re-runnable (frontier/API); verifiable as a record · source f3c35eae86a4bae7848a926a… · typing b2814b363dd84f33c2d3f83b… · integrity verified
8 · Manifest and sign-off

What is in the archive, and who reviewed it

ArtefactSHA-256Bytes
rich-bundle.jsone49c5e0689cb28b22c08de36d73dd21ef2d37a31cef4306a93dd5c745929b1c27142
typed-output.json11a7ef53ba2f2290443e86002b935c16e8f9791814ca41128fa88839d7efcd3725399
system-profile.json5e3500eb104b18e29419fdef88f4d2bb623317608749ee0db94a9d3894efab802198

Issuance seal. When requested, the SHA-256 of this file as delivered is written into the AgentPass Evidence ledger as a signed, hash-chained "evidence pack issued" record, with the source pack's digest as its input. The receipt (record number, record hash, time) is in the manifest file beside this pack, so the regulator's copy can be checked against the chain: if a single byte of this file changes, its digest no longer matches the sealed record.

The source pack and the typed output are embedded below as JSON so that an expert or an opposing party can extract them, re-verify every hash and signature, and re-type the records on their own inferX deployment to obtain the same digests.

Compliance OfficerName · Date
Data Protection OfficerName · Date
Information SecurityName · Date
Counsel reviewName · Date
Embedded archive: source pack
{
 "specification": "draft-sharif-agent-audit-trail (AIEF package)",
 "aief_version": "1.0",
 "case_reference": "DEMO-2026-0930",
 "reproducibility_grade": "mixed (A/B)",
 "generated_at": "2026-09-30T14:00:00+00:00",
 "trust_material": {
  "public_keys": {
   "inference_enforcer": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0NSExX+ilG3qehoxfiP9az2Ebihs\nDsGz3U097NVzMJZzXMltX+MN6UCmXshi/fePnksVEM4OHkdnhd168JeFfQ==\n-----END PUBLIC KEY-----\n",
   "policy_enforcer": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAESGLCcDXSBQTPnxmSRsUVR7R8VO0c\nCA1/o6gc1z391bJIMioS33CsezC+yR2NpZzR58mLvsLrnN0MfPEYMgo3Ug==\n-----END PUBLIC KEY-----\n",
   "human_approver": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYtyqvno75LrbAoWwW4EUvBVQsXC4\nvYeYUIndo/+p84YDOEvU4eXlFfGuwrIsGQbMsMifsrzeiAcVX7+Vo48wHw==\n-----END PUBLIC KEY-----\n"
  }
 },
 "external_anchor": {
  "type": "RFC 3161 timestamp",
  "tsa": "http://tsa.izenpe.com",
  "token": "MIIF...(demo)"
 },
 "count": 5,
 "records": [
  {
   "layer": "inference",
   "action_type": "inference",
   "agent_id": "triage_ai",
   "principal": "patient 220",
   "model_identity": "in-house-llm-v4",
   "model_weights_digest": "sha256:9f3c...",
   "model_version": "build 2026-09-18",
   "inference_config": {
    "temperature": 0,
    "top_p": 1,
    "seed": 42,
    "decoding": "greedy"
   },
   "operation": "infer",
   "target": "medical records",
   "data_classification": "special-category (health) data",
   "prompt": "summarise the patient's medical history and flag contraindications",
   "input_digest": "sha256:690be675f3761c1403bfdcd34f004c29c365294e3bb05769a4802f124b5c68be",
   "output": "a recommendation to escalate for specialist review",
   "output_digest": "sha256:858204dc0c0673d8248f4790038e48932b5016bbffe42405d7cefceb0339ba43",
   "authority_basis": "GDPR Article 9(2)(h) and clinical consent",
   "decision": "permitted",
   "trust_level": 3,
   "required_level": 3,
   "human_approved": true,
   "human_approver": "Dr A. Rossi",
   "human_receipt": "AgentBee hardware key, HOLD at 2026-09-30T09:02:11Z",
   "reproducibility_grade": "A",
   "env_attestation": "AMD SEV-SNP quote (verified)",
   "timestamp": "2026-09-30T09:02:11Z",
   "signer": "inference_enforcer",
   "n": 1,
   "prev_hash": "0000000000000000000000000000000000000000000000000000000000000000",
   "record_hash": "49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e",
   "signer_kid": "DkFZJghtckp1wt_1UBdDnuRlIvmlUnxM",
   "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
   "signature": "YkBI4wg48xIi/qdf2sTD3We11aCw3Pq8qItWh//iiG2HywkZl7xuT0V2paRMO/Gw0RElmv9LdWpzn89ysQUisQ==",
   "verifiable_by_third_party": true
  },
  {
   "layer": "payment",
   "action_type": "tool_call",
   "agent_id": "billing_agent",
   "principal": "Acme Ltd",
   "operation": "transfer",
   "target": "\u20ac50,000",
   "recipient": "Global Payments Inc",
   "data_classification": "financial data",
   "authority_basis": "signed purchase order PO-3391",
   "decision": "permitted",
   "trust_level": 4,
   "required_level": 4,
   "human_approved": true,
   "human_approver": "compliance officer M. Khan",
   "human_receipt": "AgentBee HOLD at 2026-09-30T10:14:53Z",
   "reproducibility_grade": "B",
   "timestamp": "2026-09-30T10:14:53Z",
   "signer": "human_approver",
   "n": 2,
   "prev_hash": "49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e",
   "record_hash": "f9e258d110f70e5adccd97958a3ec77af99dc578029ffa5b7a70cff6cf64e148",
   "signer_kid": "qR7xpOj2Y_6tz3_sNYuGfoXfuvRC5rdp",
   "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
   "signature": "ynUzRp2GDFVJnc76bwOSzYF6/VGlB3JsYP6a796uZodAqalXZ5t4E4wQSlZeyFJWdqG/y81qnN8j8OGI9T0IEQ==",
   "verifiable_by_third_party": true
  },
  {
   "layer": "database",
   "action_type": "tool_call",
   "agent_id": "support_ai",
   "principal": "customer 4471",
   "operation": "delete",
   "target": "claim file C-231",
   "data_classification": "personal data",
   "authority_basis": "GDPR Article 17 erasure request",
   "decision": "refused",
   "reason": "active legal-hold: retention obligation overrides erasure",
   "trust_level": 2,
   "required_level": 3,
   "human_approved": false,
   "timestamp": "2026-09-30T11:20:07Z",
   "signer": "policy_enforcer",
   "n": 3,
   "prev_hash": "f9e258d110f70e5adccd97958a3ec77af99dc578029ffa5b7a70cff6cf64e148",
   "record_hash": "646b5c0f065ccd39c6ab148501ff2df92c28ca9a2d5c101f6e5f3db75e689ab2",
   "signer_kid": "O7jtonHpQnlXd5QzharXuH4ZBGpmdsgi",
   "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
   "signature": "0l5hOuS7AzXsy2jxdfzBu8GoAo+mi+FZ+ikS/Ysrk3+yZzgCkmcdYTM9ArKLD0EWcGpf79u60/Zal8i/EzmTtg==",
   "verifiable_by_third_party": true
  },
  {
   "layer": "gateway",
   "action_type": "tool_call",
   "agent_id": "marketing_bot",
   "principal": "the data subject",
   "operation": "export",
   "target": "the claimant list",
   "recipient": "an external marketing platform",
   "data_classification": "personal data",
   "authority_basis": "no lawful basis on record",
   "decision": "refused",
   "reason": "egress blocked: no Article 6 lawful basis for marketing disclosure",
   "trust_level": 1,
   "required_level": 2,
   "human_approved": false,
   "timestamp": "2026-09-30T11:45:33Z",
   "signer": "policy_enforcer",
   "n": 4,
   "prev_hash": "646b5c0f065ccd39c6ab148501ff2df92c28ca9a2d5c101f6e5f3db75e689ab2",
   "record_hash": "94a961362e108704f29a0dde928e208780e79d63ae4c094986f8d8c21ba7535e",
   "signer_kid": "O7jtonHpQnlXd5QzharXuH4ZBGpmdsgi",
   "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
   "signature": "F1zkkt9tIi4H/WOAxPWW4EWIk/l0AD4qXgpscKwS3vxuUxcm2aMJW68zweXgm7wW6IaQsKt1q5lXp0Fk43TFMg==",
   "verifiable_by_third_party": true
  },
  {
   "layer": "database",
   "action_type": "tool_call",
   "agent_id": "marketing_bot",
   "principal": "the data subject",
   "operation": "SELECT",
   "target": "public.customers",
   "data_classification": "personal data",
   "authority_basis": "policy P-12",
   "decision": "refused",
   "reason": "SELECT on public.customers requires L2, agent is L1",
   "trust_level": 1,
   "required_level": 2,
   "human_approved": false,
   "timestamp": "2026-09-30T13:27:03Z",
   "signer": "policy_enforcer",
   "n": 5,
   "prev_hash": "94a961362e108704f29a0dde928e208780e79d63ae4c094986f8d8c21ba7535e",
   "record_hash": "f3c35eae86a4bae7848a926a05382cf426ca9fab99ed8701e7ad99d6031c8719",
   "signer_kid": "O7jtonHpQnlXd5QzharXuH4ZBGpmdsgi",
   "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
   "signature": "u9wOCwBA7Z6aQHx9PyXu4BiguaJ0yaz+c5DXH/PyRPcls8Im3CBPtLR4VtrHSSQsN3RBTa7QI8KsPb8a14EksA==",
   "verifiable_by_third_party": true
  }
 ]
}
Embedded archive: typed output
{
 "tool_version": "LATS-1.1 / legal-typer / 2026-09-30",
 "model_sha256": "e67e8cc0ec4be9aa7e53059c5d656d91aaed3c898379600635dc863b4c504eb9",
 "schema": "LATS-1.1",
 "records_typed": 5,
 "chain_verifies": true,
 "grades": {
  "A": 1,
  "B": 4
 },
 "source_integrity": {
  "overall": "VERIFIED",
  "tamper_detected": false,
  "counts": {
   "records": 5,
   "verified": 5,
   "tampered": 0,
   "hmac_integrity_only": 0,
   "unattested": 0,
   "hash_ok": 5,
   "hash_mismatch": 0,
   "sig_ok": 5,
   "sig_invalid": 0,
   "chain_broken": 0
  },
  "scheme_reproduced": true,
  "method": "SHA-256 over sorted-compact-JSON (ASCII-escaped) record content; ECDSA P-256 signature over the record hash; hash-chain prev-linkage."
 },
 "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
 "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtoJSx8I6u+nWF06ovUCQ/eAJbBml\n8ppV0F7tpqViwiGg8MtInxu3BC4wDoJj4NIdiCdI1DaPLxmc63/ZzCdzXg==\n-----END PUBLIC KEY-----\n",
 "aief_manifest": {
  "aief_version": "1.0",
  "case_reference": "DEMO-2026-0930",
  "specification": "draft-sharif-agent-audit-trail (AIEF package)",
  "reproducibility_grade": "mixed (A/B)",
  "external_anchor": {
   "type": "RFC 3161 timestamp",
   "tsa": "http://tsa.izenpe.com",
   "token": "MIIF...(demo)"
  },
  "trust_material": {
   "public_keys": {
    "inference_enforcer": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0NSExX+ilG3qehoxfiP9az2Ebihs\nDsGz3U097NVzMJZzXMltX+MN6UCmXshi/fePnksVEM4OHkdnhd168JeFfQ==\n-----END PUBLIC KEY-----\n",
    "policy_enforcer": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAESGLCcDXSBQTPnxmSRsUVR7R8VO0c\nCA1/o6gc1z391bJIMioS33CsezC+yR2NpZzR58mLvsLrnN0MfPEYMgo3Ug==\n-----END PUBLIC KEY-----\n",
    "human_approver": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYtyqvno75LrbAoWwW4EUvBVQsXC4\nvYeYUIndo/+p84YDOEvU4eXlFfGuwrIsGQbMsMifsrzeiAcVX7+Vo48wHw==\n-----END PUBLIC KEY-----\n"
   }
  }
 },
 "typed": [
  {
   "seq": 1,
   "source_record_hash": "49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e",
   "narrative": "Agent triage_ai, running model in-house-llm-v4 (build 2026-09-18), received for patient 220 the instruction \u201csummarise the patient's medical history and flag contraindications\u201d over special-category (health) data and produced \u201ca recommendation to escalate for specialist review\u201d; the inference was permitted under GDPR Article 9(2)(h) and clinical consent at L3 (required L3), approved by Dr A. Rossi on a hardware human-approval key, at 2026-09-30T09:02:11.",
   "typing_sha256": "95dd20a53ff5a7a3782b43991427871a2ecb20f2884f4729e63167db75458c90",
   "reproducible": true,
   "facts": [
    {
     "lats_key": "actor",
     "label": "actor",
     "text": "triage_ai",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "model_identity",
     "label": "model identity",
     "text": "in-house-llm-v4",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "model_version",
     "label": "model version",
     "text": "(build 2026-09-18)",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "principal",
     "label": "principal",
     "text": "patient 220",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "prompt",
     "label": "prompt",
     "text": "\u201csummarise the patient's medical history and flag contraindications\u201d",
     "score": 0.999961,
     "margin": 0.499961,
     "robustness": "robust"
    },
    {
     "lats_key": "data_classification",
     "label": "data sensitivity",
     "text": "special-category (health) data",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "output",
     "label": "output",
     "text": "a recommendation to escalate for specialist review",
     "score": 0.997369,
     "margin": 0.497369,
     "robustness": "robust"
    },
    {
     "lats_key": "authorization_outcome",
     "label": "authorization decision",
     "text": "permitted",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authority_basis",
     "label": "authority basis",
     "text": "GDPR Article 9(2)(h) and clinical consent",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "competence_level",
     "label": "competence level",
     "text": "L3",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "human_intervention",
     "label": "human approval",
     "text": "approved by Dr A. Rossi on a hardware human-approval key",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "temporal_validity",
     "label": "time of act",
     "text": "2026-09-30T09:02:11",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    }
   ],
   "source_crypto": {
    "record_hash": "49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e",
    "prev_hash": "0000000000000000000000000000000000000000000000000000000000000000",
    "signature": "YkBI4wg48xIi/qdf2sTD3We11aCw3Pq8qItWh//iiG2HywkZl7xuT0V2paRMO/Gw0RElmv9LdWpzn89ysQUisQ==",
    "signer_kid": "DkFZJghtckp1wt_1UBdDnuRlIvmlUnxM",
    "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
    "verifiable_by_third_party": true
   },
   "provenance": {
    "model_identity": "in-house-llm-v4",
    "model_version": "build 2026-09-18",
    "model_weights_digest": "sha256:9f3c...",
    "inference_config": {
     "temperature": 0,
     "top_p": 1,
     "seed": 42,
     "decoding": "greedy"
    },
    "input_digest": "sha256:690be675f3761c1403bfdcd34f004c29c365294e3bb05769a4802f124b5c68be",
    "output_digest": "sha256:858204dc0c0673d8248f4790038e48932b5016bbffe42405d7cefceb0339ba43",
    "reproducibility_grade": "A",
    "env_attestation": "AMD SEV-SNP quote (verified)",
    "human_receipt": "AgentBee hardware key, HOLD at 2026-09-30T09:02:11Z"
   },
   "evidence_grade": "A",
   "grade_reason": "open-weight model pinned + attested \u2014 the decision can be re-run in court",
   "source": null,
   "integrity": {
    "status": "verified",
    "hash": "ok",
    "sig": "ok",
    "chain": "genesis",
    "recomputed_hash": "49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e"
   }
  },
  {
   "seq": 2,
   "source_record_hash": "f9e258d110f70e5adccd97958a3ec77af99dc578029ffa5b7a70cff6cf64e148",
   "narrative": "Agent billing_agent attempted to transfer \u20ac50,000 (financial data) concerning Acme Ltd to Global Payments Inc under signed purchase order PO-3391; the transfer was permitted at L4 (required L4), approved by compliance officer M. Khan on a hardware human-approval key, at 2026-09-30T10:14:53.",
   "typing_sha256": "5e89315efdf1323cf9c341648eefd64617cf6d13f6dec6a904deb135c1369a70",
   "reproducible": true,
   "facts": [
    {
     "lats_key": "actor",
     "label": "actor",
     "text": "billing_agent",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "object",
     "label": "data resource",
     "text": "\u20ac50,000",
     "score": 0.999999,
     "margin": 0.499999,
     "robustness": "robust"
    },
    {
     "lats_key": "data_classification",
     "label": "data sensitivity",
     "text": "(financial data)",
     "score": 0.999246,
     "margin": 0.499246,
     "robustness": "robust"
    },
    {
     "lats_key": "principal",
     "label": "principal",
     "text": "Acme Ltd",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "recipient",
     "label": "recipient",
     "text": "Global Payments Inc",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authority_basis",
     "label": "authority basis",
     "text": "signed purchase order PO-3391",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authorization_outcome",
     "label": "authorization decision",
     "text": "permitted",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "competence_level",
     "label": "competence level",
     "text": "L4",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "human_intervention",
     "label": "human approval",
     "text": "approved by compliance officer M. Khan on a hardware human-approval key",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "temporal_validity",
     "label": "time of act",
     "text": "2026-09-30T10:14:53",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    }
   ],
   "source_crypto": {
    "record_hash": "f9e258d110f70e5adccd97958a3ec77af99dc578029ffa5b7a70cff6cf64e148",
    "prev_hash": "49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e",
    "signature": "ynUzRp2GDFVJnc76bwOSzYF6/VGlB3JsYP6a796uZodAqalXZ5t4E4wQSlZeyFJWdqG/y81qnN8j8OGI9T0IEQ==",
    "signer_kid": "qR7xpOj2Y_6tz3_sNYuGfoXfuvRC5rdp",
    "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
    "verifiable_by_third_party": true
   },
   "provenance": {
    "reproducibility_grade": "B",
    "human_receipt": "AgentBee HOLD at 2026-09-30T10:14:53Z"
   },
   "evidence_grade": "B",
   "grade_reason": "signed/anchored record \u2014 model not re-runnable (frontier/API); verifiable as a record",
   "source": null,
   "integrity": {
    "status": "verified",
    "hash": "ok",
    "sig": "ok",
    "chain": "ok",
    "recomputed_hash": "f9e258d110f70e5adccd97958a3ec77af99dc578029ffa5b7a70cff6cf64e148"
   }
  },
  {
   "seq": 3,
   "source_record_hash": "646b5c0f065ccd39c6ab148501ff2df92c28ca9a2d5c101f6e5f3db75e689ab2",
   "narrative": "Agent support_ai attempted to delete claim file C-231 (personal data) for customer 4471 under GDPR Article 17 erasure request; the action was refused at L2 (required L3), with no human approval on record, at 2026-09-30T11:20:07. Recorded reason: active legal-hold: retention obligation overrides erasure.",
   "typing_sha256": "0ea953d1afb8ab6d1214ea0d85ec7e522bd71627696e2979b78f7e4e623477a8",
   "reproducible": true,
   "facts": [
    {
     "lats_key": "actor",
     "label": "actor",
     "text": "support_ai",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "act",
     "label": "action performed",
     "text": "delete",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "object",
     "label": "data resource",
     "text": "claim file C-231",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "data_classification",
     "label": "data sensitivity",
     "text": "personal data",
     "score": 0.999939,
     "margin": 0.499939,
     "robustness": "robust"
    },
    {
     "lats_key": "principal",
     "label": "principal",
     "text": "customer 4471",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authority_basis",
     "label": "authority basis",
     "text": "GDPR Article 17 erasure request",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authorization_outcome",
     "label": "authorization decision",
     "text": "refused",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "competence_level",
     "label": "competence level",
     "text": "L2",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "human_intervention",
     "label": "human approval",
     "text": "with no human approval on record",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "temporal_validity",
     "label": "time of act",
     "text": "2026-09-30T11:20:07",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    }
   ],
   "source_crypto": {
    "record_hash": "646b5c0f065ccd39c6ab148501ff2df92c28ca9a2d5c101f6e5f3db75e689ab2",
    "prev_hash": "f9e258d110f70e5adccd97958a3ec77af99dc578029ffa5b7a70cff6cf64e148",
    "signature": "0l5hOuS7AzXsy2jxdfzBu8GoAo+mi+FZ+ikS/Ysrk3+yZzgCkmcdYTM9ArKLD0EWcGpf79u60/Zal8i/EzmTtg==",
    "signer_kid": "O7jtonHpQnlXd5QzharXuH4ZBGpmdsgi",
    "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
    "verifiable_by_third_party": true
   },
   "provenance": {},
   "evidence_grade": "B",
   "grade_reason": "signed/anchored record \u2014 model not re-runnable (frontier/API); verifiable as a record",
   "source": null,
   "integrity": {
    "status": "verified",
    "hash": "ok",
    "sig": "ok",
    "chain": "ok",
    "recomputed_hash": "646b5c0f065ccd39c6ab148501ff2df92c28ca9a2d5c101f6e5f3db75e689ab2"
   }
  },
  {
   "seq": 4,
   "source_record_hash": "94a961362e108704f29a0dde928e208780e79d63ae4c094986f8d8c21ba7535e",
   "narrative": "Agent marketing_bot attempted to export the claimant list (personal data) concerning the data subject to an external marketing platform under no lawful basis on record; the transfer was refused at L1 (required L2), with no human approval on record, at 2026-09-30T11:45:33. Recorded reason: egress blocked: no Article 6 lawful basis for marketing disclosure.",
   "typing_sha256": "09a243966d0795ef47b2396debb8861196960c697e75d013259ed42ae8763178",
   "reproducible": true,
   "facts": [
    {
     "lats_key": "actor",
     "label": "actor",
     "text": "marketing_bot",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "act",
     "label": "action performed",
     "text": "export",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "object",
     "label": "data resource",
     "text": "the claimant list",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "data_classification",
     "label": "data sensitivity",
     "text": "personal data",
     "score": 0.999962,
     "margin": 0.499962,
     "robustness": "robust"
    },
    {
     "lats_key": "principal",
     "label": "principal",
     "text": "the data subject",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "recipient",
     "label": "recipient",
     "text": "an external marketing platform",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authority_basis",
     "label": "authority basis",
     "text": "no lawful basis on record",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authorization_outcome",
     "label": "authorization decision",
     "text": "refused",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "competence_level",
     "label": "competence level",
     "text": "L1",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "human_intervention",
     "label": "human approval",
     "text": "with no human approval on record",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "temporal_validity",
     "label": "time of act",
     "text": "2026-09-30T11:45:33",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    }
   ],
   "source_crypto": {
    "record_hash": "94a961362e108704f29a0dde928e208780e79d63ae4c094986f8d8c21ba7535e",
    "prev_hash": "646b5c0f065ccd39c6ab148501ff2df92c28ca9a2d5c101f6e5f3db75e689ab2",
    "signature": "F1zkkt9tIi4H/WOAxPWW4EWIk/l0AD4qXgpscKwS3vxuUxcm2aMJW68zweXgm7wW6IaQsKt1q5lXp0Fk43TFMg==",
    "signer_kid": "O7jtonHpQnlXd5QzharXuH4ZBGpmdsgi",
    "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
    "verifiable_by_third_party": true
   },
   "provenance": {},
   "evidence_grade": "B",
   "grade_reason": "signed/anchored record \u2014 model not re-runnable (frontier/API); verifiable as a record",
   "source": null,
   "integrity": {
    "status": "verified",
    "hash": "ok",
    "sig": "ok",
    "chain": "ok",
    "recomputed_hash": "94a961362e108704f29a0dde928e208780e79d63ae4c094986f8d8c21ba7535e"
   }
  },
  {
   "seq": 5,
   "source_record_hash": "f3c35eae86a4bae7848a926a05382cf426ca9fab99ed8701e7ad99d6031c8719",
   "narrative": "Agent marketing_bot attempted to SELECT public.customers (personal data) for the data subject under policy P-12; the action was refused at L1 (required L2), with no human approval on record, at 2026-09-30T13:27:03. Recorded reason: SELECT on public.customers requires L2, agent is L1.",
   "typing_sha256": "b2814b363dd84f33c2d3f83bedea4c492dde711d38237102dcf15ae2bad9f5e2",
   "reproducible": true,
   "facts": [
    {
     "lats_key": "actor",
     "label": "actor",
     "text": "marketing_bot",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "act",
     "label": "action performed",
     "text": "SELECT",
     "score": 0.999931,
     "margin": 0.499931,
     "robustness": "robust"
    },
    {
     "lats_key": "object",
     "label": "data resource",
     "text": "public.customers",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "data_classification",
     "label": "data sensitivity",
     "text": "(personal data)",
     "score": 0.999993,
     "margin": 0.499993,
     "robustness": "robust"
    },
    {
     "lats_key": "principal",
     "label": "principal",
     "text": "the data subject",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authority_basis",
     "label": "authority basis",
     "text": "policy P-12",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "authorization_outcome",
     "label": "authorization decision",
     "text": "refused",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "competence_level",
     "label": "competence level",
     "text": "L1",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "human_intervention",
     "label": "human approval",
     "text": "with no human approval on record",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "temporal_validity",
     "label": "time of act",
     "text": "2026-09-30T13:27:03",
     "score": 1.0,
     "margin": 0.5,
     "robustness": "robust"
    },
    {
     "lats_key": "object",
     "label": "data resource",
     "text": "public.customers",
     "score": 0.999029,
     "margin": 0.499029,
     "robustness": "robust"
    }
   ],
   "source_crypto": {
    "record_hash": "f3c35eae86a4bae7848a926a05382cf426ca9fab99ed8701e7ad99d6031c8719",
    "prev_hash": "94a961362e108704f29a0dde928e208780e79d63ae4c094986f8d8c21ba7535e",
    "signature": "u9wOCwBA7Z6aQHx9PyXu4BiguaJ0yaz+c5DXH/PyRPcls8Im3CBPtLR4VtrHSSQsN3RBTa7QI8KsPb8a14EksA==",
    "signer_kid": "O7jtonHpQnlXd5QzharXuH4ZBGpmdsgi",
    "algorithm": "ES256 (ECDSA P-256 / SHA-256)",
    "verifiable_by_third_party": true
   },
   "provenance": {},
   "evidence_grade": "B",
   "grade_reason": "signed/anchored record \u2014 model not re-runnable (frontier/API); verifiable as a record",
   "source": null,
   "integrity": {
    "status": "verified",
    "hash": "ok",
    "sig": "ok",
    "chain": "ok",
    "recomputed_hash": "f3c35eae86a4bae7848a926a05382cf426ca9fab99ed8701e7ad99d6031c8719"
   }
  }
 ],
 "aat_records": [
  {
   "record_id": "16a52627-5e80-4baf-8afa-7d9eaec6a525",
   "timestamp": "2026-10-05T16:16:25.870Z",
   "agent_id": "urn:agent:legal-typer",
   "agent_version": "LATS-1.1",
   "session_id": "ed4c4636-e663-4baf-b0c7-8660a518d6d2",
   "action_type": "lifecycle",
   "action_detail": {
    "event": "session_start",
    "recording_mode": "self"
   },
   "outcome": "success",
   "trust_level": "L2",
   "parent_record_id": null,
   "prev_hash": null,
   "record_phase": "concurrent",
   "sig_alg": "ES256",
   "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
   "signature": "TY_FPQ6mgYF56BN6IRrWGeWstTrLOhMait53zflUtNQcVjYF7ZwrNHHINJp9zDkl3FOxUdceHyzkyCr448x25g"
  },
  {
   "record_id": "bed4358c-e890-4cd6-9ac9-fad8112908e1",
   "timestamp": "2026-10-05T16:16:25.997Z",
   "agent_id": "urn:agent:legal-typer",
   "agent_version": "LATS-1.1",
   "session_id": "ed4c4636-e663-4baf-b0c7-8660a518d6d2",
   "action_type": "tool_call",
   "action_detail": {
    "tool_name": "legal_typing",
    "parameters_hash": "66d680c9be10f7d53c7f581595335bb5b0674ae12f735a837d1f8872ea7e5267"
   },
   "outcome": "success",
   "trust_level": "L2",
   "parent_record_id": "16a52627-5e80-4baf-8afa-7d9eaec6a525",
   "prev_hash": "3c7fd9ec16863b2121413eee526cbbd6426ceece4bc1914295d74a79570e4238",
   "record_phase": "pre_execution",
   "sig_alg": "ES256",
   "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
   "signature": "_ZTmJ-7uaFBhSQQ1Npe5fst-rXHcZPaNqjRwqEH9VJlUV1EmbPB7gB1F8Mp6MbFEu01Viv4BGHh7op8xVzCBCA"
  },
  {
   "record_id": "92fdc2f1-42fb-4e68-87d1-29257cd25f27",
   "timestamp": "2026-10-05T16:16:26.082Z",
   "agent_id": "urn:agent:legal-typer",
   "agent_version": "LATS-1.1",
   "session_id": "ed4c4636-e663-4baf-b0c7-8660a518d6d2",
   "action_type": "tool_call",
   "action_detail": {
    "tool_name": "legal_typing",
    "parameters_hash": "8136836af7684d8ff1818b3d4fd250192e51f229d85645a86c3353251157f566"
   },
   "outcome": "success",
   "trust_level": "L2",
   "parent_record_id": "bed4358c-e890-4cd6-9ac9-fad8112908e1",
   "prev_hash": "769f53e6cc29232d570c21f06f192ee11b79d7b2fd2d18fe2f17cf314715e8ab",
   "record_phase": "pre_execution",
   "sig_alg": "ES256",
   "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
   "signature": "9NtRDarrWCaQtZKV6XWoDxSagqk5qiBKm-2Nob1ljVVnSuuRzPKzy3quDU1tJr8_7Jt7lauej3j6aF3hlga05A"
  },
  {
   "record_id": "8a65420c-ac94-495d-88ed-3f1f664742bf",
   "timestamp": "2026-10-05T16:16:26.172Z",
   "agent_id": "urn:agent:legal-typer",
   "agent_version": "LATS-1.1",
   "session_id": "ed4c4636-e663-4baf-b0c7-8660a518d6d2",
   "action_type": "tool_call",
   "action_detail": {
    "tool_name": "legal_typing",
    "parameters_hash": "a2da95de69a237d99af405971a7f798fa60088a1cf7c0bb5c7af6196001909e0"
   },
   "outcome": "success",
   "trust_level": "L2",
   "parent_record_id": "92fdc2f1-42fb-4e68-87d1-29257cd25f27",
   "prev_hash": "1f8befb6b96b21d74f49f8af4edb4778e777ec7a4290a25a8ec7bcf2059c987f",
   "record_phase": "pre_execution",
   "sig_alg": "ES256",
   "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
   "signature": "aFwDAoDvo0m_qGI5r9cYg3kbzwajWWz8OszZ1N1Rx9Jtm4tThMsECsNtctt5O8WJtjmY0zP1lUf3Q3SXB378Uw"
  },
  {
   "record_id": "e591250c-b6fe-489f-b9db-7f30692db6ba",
   "timestamp": "2026-10-05T16:16:26.266Z",
   "agent_id": "urn:agent:legal-typer",
   "agent_version": "LATS-1.1",
   "session_id": "ed4c4636-e663-4baf-b0c7-8660a518d6d2",
   "action_type": "tool_call",
   "action_detail": {
    "tool_name": "legal_typing",
    "parameters_hash": "81ba1a92cdb36bb1e6796b8cad07cba1363408ab24c2b3fefd1ba20ae1b36f07"
   },
   "outcome": "success",
   "trust_level": "L2",
   "parent_record_id": "8a65420c-ac94-495d-88ed-3f1f664742bf",
   "prev_hash": "9d91641bf7fb674b06d645afeae9792d4f1e8005f019b41836167468ee13064b",
   "record_phase": "pre_execution",
   "sig_alg": "ES256",
   "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
   "signature": "EzpR081twKis5PbQZ68TLFStcw8OZ_Tmj9P4J7KQP3Jo_GfKbivp30etqzn05Kk0Q2OFi--fBy2tkemkZZ4x6Q"
  },
  {
   "record_id": "e7a319b8-b9ad-4815-8dcf-a4f1cbdb6e2e",
   "timestamp": "2026-10-05T16:16:26.355Z",
   "agent_id": "urn:agent:legal-typer",
   "agent_version": "LATS-1.1",
   "session_id": "ed4c4636-e663-4baf-b0c7-8660a518d6d2",
   "action_type": "tool_call",
   "action_detail": {
    "tool_name": "legal_typing",
    "parameters_hash": "d4b1b980a00d22aa9e6a724aaf6b7e0c4260e6cf6f3254116d82548f16733da9"
   },
   "outcome": "success",
   "trust_level": "L2",
   "parent_record_id": "e591250c-b6fe-489f-b9db-7f30692db6ba",
   "prev_hash": "2c89755de9dabba765003e643f0275eba9d4bb06ba75cbfe09d5ec3649742152",
   "record_phase": "pre_execution",
   "sig_alg": "ES256",
   "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
   "signature": "emoRUW20xajuZZ1uslwajFqKzkPBoNaCQ3Z9IfKRWSNc7bOhAIY7AoqQFqNvVEtbWpEQbJQD06AA1GFT3Lbyiw"
  },
  {
   "record_id": "77e648ba-b1fb-4338-a9a1-e3454e23ce71",
   "timestamp": "2026-10-05T16:16:26.355Z",
   "agent_id": "urn:agent:legal-typer",
   "agent_version": "LATS-1.1",
   "session_id": "ed4c4636-e663-4baf-b0c7-8660a518d6d2",
   "action_type": "lifecycle",
   "action_detail": {
    "event": "session_end"
   },
   "outcome": "success",
   "trust_level": "L2",
   "parent_record_id": "e7a319b8-b9ad-4815-8dcf-a4f1cbdb6e2e",
   "prev_hash": "9b240875f5ce6b0e0349cfea1bd99ce0f3ac0dfd56a10201357cf95c193f9d56",
   "record_phase": "post_execution",
   "sig_alg": "ES256",
   "signer_kid": "8Mg6-vmDBvmxeWAKiPv3gdd7RZBsMbB359Nf0V9w1P0",
   "signature": "hWez5iqbqTCvTWkuKkjP4OTGawyFBctHicvjbJYa86A29FMHv2BDbsmQ9iaVlpw17UkhtSW_gw22LMp8-c_dtQ"
  }
 ]
}
Embedded archive: manifest
{
 "pack_id": "A12-20261005-triage-ai-80BCB1",
 "issued": "2026-10-05T16:16:26Z",
 "tool": "article12-pack 0.2.0",
 "inferx": {
  "tool_version": "LATS-1.1 / legal-typer / 2026-09-30",
  "model_sha256": "e67e8cc0ec4be9aa7e53059c5d656d91aaed3c898379600635dc863b4c504eb9",
  "schema": "LATS-1.1"
 },
 "artefacts": {
  "rich-bundle.json": {
   "sha256": "e49c5e0689cb28b22c08de36d73dd21ef2d37a31cef4306a93dd5c745929b1c2",
   "bytes": 7142
  },
  "typed-output.json": {
   "sha256": "11a7ef53ba2f2290443e86002b935c16e8f9791814ca41128fa88839d7efcd37",
   "bytes": 25399
  },
  "system-profile.json": {
   "sha256": "5e3500eb104b18e29419fdef88f4d2bb623317608749ee0db94a9d3894efab80",
   "bytes": 2198
  }
 },
 "records": [
  {
   "seq": 1,
   "source_record_hash": "49ccc381edc9dfceda228e52817e6160e839f43151709574c820fd64f93e5e6e",
   "typing_sha256": "95dd20a53ff5a7a3782b43991427871a2ecb20f2884f4729e63167db75458c90",
   "grade": "A",
   "integrity": "verified"
  },
  {
   "seq": 2,
   "source_record_hash": "f9e258d110f70e5adccd97958a3ec77af99dc578029ffa5b7a70cff6cf64e148",
   "typing_sha256": "5e89315efdf1323cf9c341648eefd64617cf6d13f6dec6a904deb135c1369a70",
   "grade": "B",
   "integrity": "verified"
  },
  {
   "seq": 3,
   "source_record_hash": "646b5c0f065ccd39c6ab148501ff2df92c28ca9a2d5c101f6e5f3db75e689ab2",
   "typing_sha256": "0ea953d1afb8ab6d1214ea0d85ec7e522bd71627696e2979b78f7e4e623477a8",
   "grade": "B",
   "integrity": "verified"
  },
  {
   "seq": 4,
   "source_record_hash": "94a961362e108704f29a0dde928e208780e79d63ae4c094986f8d8c21ba7535e",
   "typing_sha256": "09a243966d0795ef47b2396debb8861196960c697e75d013259ed42ae8763178",
   "grade": "B",
   "integrity": "verified"
  },
  {
   "seq": 5,
   "source_record_hash": "f3c35eae86a4bae7848a926a05382cf426ca9fab99ed8701e7ad99d6031c8719",
   "typing_sha256": "b2814b363dd84f33c2d3f83bedea4c492dde711d38237102dcf15ae2bad9f5e2",
   "grade": "B",
   "integrity": "verified"
  }
 ],
 "issuance_seal": "written to the evidence ledger after rendering; receipt in the manifest file"
}