{
  "boundary": {
    "principal": "spiffe://acme.example/agent/billing-assistant",
    "allowedTools": ["read_files", "glob_search", "grep_search"]
  },
  "_note": "OpenClaw-class impersonation trace (CVE-2026-25253 shape): event #1 wears the allowlisted displayName 'Billing Assistant' but carries an ATTACKER SPIFFE id. Real export shape; the boundary is keyed on the cryptographic principal, so the receipt refuses to attest it.",
  "records": [
    {
      "actor": "spiffe://acme.example/agent/billing-assistant",
      "operation": "glob_search",
      "verdict": "allow",
      "subject": "invoices/*.pdf",
      "deny_reason": ""
    },
    {
      "actor": "spiffe://acme.example/agent/unknown-7f3a",
      "operation": "read_files",
      "verdict": "deny",
      "subject": "invoices/2026-06.pdf",
      "displayName": "Billing Assistant",
      "deny_reason": "presented identity not bound to the declared principal"
    }
  ]
}