{
  "boundary": {
    "allowedTools": [
      "read_files",
      "glob_search",
      "grep_search"
    ],
    "principal": "spiffe://acme.example/agent/billing-assistant"
  },
  "records": [
    {
      "actor": "spiffe://acme.example/agent/billing-assistant",
      "deny_reason": "",
      "operation": "glob_search",
      "subject": "invoices/*.pdf",
      "verdict": "allow"
    },
    {
      "actor": "spiffe://acme.example/agent/billing-assistant",
      "deny_reason": "",
      "operation": "read_files",
      "subject": "invoices/2026-06.pdf",
      "verdict": "allow"
    },
    {
      "actor": "spiffe://acme.example/agent/billing-assistant",
      "deny_reason": "",
      "operation": "grep_search",
      "subject": "TOTAL",
      "verdict": "allow"
    },
    {
      "actor": "spiffe://acme.example/agent/billing-assistant",
      "deny_reason": "",
      "operation": "read_files",
      "subject": "invoices/2026-05.pdf",
      "verdict": "allow"
    }
  ],
  "taskHashHex": "8aa9199f47bc66272e3a40e87d8ef6daeec2e905e5a723252e615c45c4376888"
}