{
  "traceId": "trace-2026-07-10-001",
  "contractId": "dexgate-agent-action-passport-runtime",
  "contractVersion": "0.1.0",
  "policyPackVersion": "coding-devops-prod-change-0.1.0",
  "decisionSku": "codex.trusted_mode.authorize.v1",
  "gateDecision": {
    "decision": "allow",
    "reasonCode": "PROD_CHANGE_EVIDENCE_SATISFIED",
    "policyVariant": "passport.schema.coding.prod_change.v1",
    "confidenceState": "high"
  },
  "proposal": {
    "actionType": "apply_patch",
    "tool": "apply_patch",
    "target": "services/api/settings.py",
    "environment": "prod",
    "actor": "codex-agent",
    "tenantId": "tenant-demo-001"
  },
  "passport": {
    "passportId": "pass-demo-20260710-001",
    "schemaId": "passport.schema.coding.prod_change.v1",
    "authority": "apply_patch",
    "scope": {
      "environment": "prod",
      "target": "services/api/settings.py",
      "maxFiles": 1,
      "requiresRollbackEvidence": true
    },
    "issuedAt": "2026-07-10T14:22:08Z",
    "expiresAt": "2026-07-10T14:32:08Z",
    "revocationStatus": "not_revoked",
    "proof": {
      "alg": "Ed25519",
      "kid": "dexgate-demo-signing-key",
      "signatureStatus": "demo"
    }
  },
  "verify": {
    "result": "pass",
    "checked": [
      "schemaId",
      "tenantId",
      "authority",
      "scope.target",
      "scope.environment",
      "expiresAt",
      "revocationStatus",
      "proof"
    ]
  },
  "outcome": {
    "result": "executed",
    "executor": "protected-executor",
    "outcomeEventId": "out-demo-20260710-001"
  },
  "timestampUtc": "2026-07-10T14:22:08Z"
}