{
  "jsonrpc": "2.0",
  "id": 2102,
  "validates": "outer-host.schema.json#/$defs/applyProposalResult",
  "result": {
    "applied": false,
    "proposalId": "proposal:rename-api-fetch",
    "baselineBefore": {
      "rev": "git:tree:9f3a1c",
      "stampedAt": "2026-06-23T12:00:00Z"
    },
    "baselineAfter": null,
    "assurance": {
      "mode": "gated",
      "transactionGuarantee": "none"
    },
    "decision": {
      "pass": false,
      "decision": "deny",
      "callSite": "gate",
      "findings": [
        {
          "diagnostic": {
            "code": "acme-secrets/aws-key",
            "severity": "error",
            "source": "acme-secrets",
            "message": "hardcoded AWS access key",
            "location": {
              "path": "src/api.ts"
            },
            "fingerprint": "sha256:7c5e",
            "introduced": true,
            "help": "Load the key from an env var at runtime."
          },
          "authority": {
            "identity": "acme",
            "integrity": "sha256:dd34000000000000000000000000000000000000000000000000000000000000",
            "conformance": "asp-check-core/1.0",
            "isolation": "gated",
            "authority": {
              "granted": true,
              "requirement": "secrets-gate",
              "policyDigest": "sha256:policyabc123"
            }
          },
          "disposition": "gating",
          "nextStep": "Load the key from an env var at runtime.",
          "nextStepOrigin": "server"
        }
      ],
      "coverage": {
        "exhaustive": true,
        "required": [
          "acme-secrets"
        ],
        "enrolled": [
          "acme-secrets"
        ],
        "ran": [
          "acme-secrets"
        ],
        "degraded": []
      },
      "policyDigest": "sha256:policyabc123",
      "authorityEvidence": [
        {
          "identity": "acme",
          "integrity": "sha256:dd34000000000000000000000000000000000000000000000000000000000000",
          "conformance": "asp-check-core/1.0",
          "isolation": "gated",
          "authority": {
            "granted": true,
            "requirement": "secrets-gate",
            "policyDigest": "sha256:policyabc123"
          }
        }
      ],
      "validAsOf": {
        "rev": "git:tree:9f3a1c",
        "blobs": [
          "blob:sha256:bb02"
        ]
      },
      "assurance": {
        "mode": "gated",
        "transactionGuarantee": "none"
      },
      "receipt": {
        "receiptId": "apply-validation-deny-0001",
        "issuedAt": "2026-06-23T12:02:00Z",
        "providerProvenance": [
          {
            "provider": "acme-secrets",
            "capability": "check",
            "identity": "acme",
            "integrity": "sha256:dd34000000000000000000000000000000000000000000000000000000000000",
            "conformance": "asp-check-core/1.0"
          }
        ],
        "policyDigest": "sha256:policyabc123",
        "baseline": {
          "rev": "git:tree:9f3a1c",
          "stampedAt": "2026-06-23T12:00:00Z"
        },
        "validAsOf": {
          "rev": "git:tree:9f3a1c",
          "blobs": [
            "blob:sha256:bb02"
          ]
        },
        "coverage": {
          "exhaustive": true,
          "required": [
            "acme-secrets"
          ],
          "enrolled": [
            "acme-secrets"
          ],
          "ran": [
            "acme-secrets"
          ],
          "degraded": []
        },
        "authorityEvidence": [
          {
            "identity": "acme",
            "integrity": "sha256:dd34000000000000000000000000000000000000000000000000000000000000",
            "conformance": "asp-check-core/1.0",
            "isolation": "gated",
            "authority": {
              "granted": true,
              "requirement": "secrets-gate",
              "policyDigest": "sha256:policyabc123"
            }
          }
        ],
        "assurance": {
          "mode": "gated",
          "transactionGuarantee": "none"
        },
        "kind": "evaluate",
        "host": {
          "name": "core-host",
          "version": "0.1.0-private"
        },
        "capabilityFamily": "check",
        "callSite": "gate",
        "requestDigest": "sha256:examples-outer-apply-proposal-response-denied-json-request-deny",
        "changesetDigest": "sha256:examples-outer-apply-proposal-response-denied-json-changeset-deny",
        "providerIds": [
          "acme",
          "acme-secrets"
        ],
        "timing": {
          "startedAt": "2026-06-23T00:00:00Z",
          "endedAt": "2026-06-23T00:00:00Z",
          "elapsedMs": 0
        },
        "failures": [],
        "privateOnly": true,
        "experimental": true,
        "trustArtifact": false
      },
      "requestDigest": "sha256:examples-outer-apply-proposal-response-denied-json-request-deny",
      "changesetDigest": "sha256:examples-outer-apply-proposal-response-denied-json-changeset-deny"
    },
    "refusal": {
      "reason": "validation-denied",
      "detail": "Required checks over the hypothetical after-state denied the proposal."
    },
    "receipt": {
      "receiptId": "apply-denied-0001",
      "issuedAt": "2026-06-23T12:03:00Z",
      "providerProvenance": [
        {
          "provider": "lattice",
          "capability": "edit",
          "identity": "the-open-engine",
          "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
          "conformance": "asp-edit/1.0"
        }
      ],
      "policyDigest": "sha256:policyabc123",
      "baseline": {
        "rev": "git:tree:9f3a1c",
        "stampedAt": "2026-06-23T12:00:00Z"
      },
      "validAsOf": {
        "rev": "git:tree:9f3a1c",
        "blobs": []
      },
      "coverage": {
        "exhaustive": true,
        "required": [
          "acme-secrets"
        ],
        "enrolled": [
          "acme-secrets"
        ],
        "ran": [
          "acme-secrets"
        ],
        "degraded": []
      },
      "authorityEvidence": [
        {
          "identity": "the-open-engine",
          "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
          "conformance": "asp-edit/1.0",
          "isolation": "gated",
          "authority": {
            "granted": true,
            "requirement": "lattice-edit",
            "policyDigest": "sha256:policyabc123"
          }
        }
      ],
      "assurance": {
        "mode": "gated",
        "transactionGuarantee": "none"
      },
      "kind": "apply-attempt",
      "host": {
        "name": "core-host",
        "version": "0.1.0-private"
      },
      "capabilityFamily": "edit",
      "requestDigest": "sha256:examples-outer-apply-proposal-response-denied-json-apply-attempt-[object Object]",
      "proposalId": "proposal:rename-api-fetch",
      "providerIds": [
        "acme-secrets",
        "lattice",
        "the-open-engine"
      ],
      "timing": {
        "startedAt": "2026-06-23T00:00:00Z",
        "endedAt": "2026-06-23T00:00:00Z",
        "elapsedMs": 0
      },
      "failures": [],
      "privateOnly": true,
      "experimental": true,
      "trustArtifact": false
    }
  }
}