{
  "evidence_package": {
    "format": "vigil-engagement-evidence-v1",
    "owner_id": "f46ba5dc-b77b-4fe0-ae3d-55e6204e3d66",
    "session_id": "b3717358-0ece-488b-9691-a9c4a7c39d5f",
    "generated_at": "2026-07-24T00:40:40.203Z",
    "scope_policy": {
      "expires_at": null,
      "max_writes": 1,
      "allowed_actions": [
        "dns.read",
        "dns.write"
      ],
      "allowed_domains": [
        "example.com"
      ]
    },
    "opened_at": "2026-07-24T00:40:36.099608+00:00",
    "metadata": {
      "note": "SYNTHETIC demo session published so anyone can verify a VIGIL evidence bundle offline. No real data, no real customer, no real domain ownership.",
      "engagement": "public-sample"
    },
    "summary": {
      "total": 2,
      "by_decision": {
        "allow": 1,
        "deny": 1
      }
    },
    "record_hash_algorithm": "sha256-canonical-json",
    "record_hashes": [
      "1fff15ffd2aad97d3e8a2fae0ada66c4d705f66d7d769ce6a48f8c8ef62b28ec",
      "d234a538709b5ab2ab840f2189283bef59e5db35828a80a209ae5e855f69da52"
    ],
    "decisions": [
      {
        "id": "676d426a-c57c-4002-ac23-8930c3d01fd1",
        "occurred_at": "2026-07-24T00:40:37.251943+00:00",
        "action": "dns.read example.com",
        "decision": "allow",
        "reason": "in_scope",
        "effect": "log_only",
        "signed_at": "2026-07-24T00:40:37.048Z",
        "payload_sha256": "2b0f0d22a1a3cb4980981a12e67fa72e778ca3b0d21d322ca90eac1f578e1b2f",
        "signature": "d33fe75cbf41c6b6fb9d580b3140bfed0560d78196512f71df5f005dc61c3ff0",
        "sig_alg": "HMAC-SHA256",
        "canon_version": "pfa-v2",
        "hmac_verified": true
      },
      {
        "id": "0abce9bb-2770-4ead-b7e7-967047dc3d5f",
        "occurred_at": "2026-07-24T00:40:38.60583+00:00",
        "action": "dns.write evil.example.net",
        "decision": "deny",
        "reason": "domain_not_allowed: evil.example.net",
        "effect": "log_only",
        "signed_at": "2026-07-24T00:40:38.329Z",
        "payload_sha256": "87a4d85aea3062cf30a63db7048f5d67b8ddeff27a5a6e6045211bca617a0e90",
        "signature": "e9782737d2e9313509493dd00a6e59fbbf29c68892d28fdc25ecbc8de1810998",
        "sig_alg": "HMAC-SHA256",
        "canon_version": "pfa-v2",
        "hmac_verified": true
      }
    ]
  },
  "package_signature": {
    "alg": "Ed25519",
    "public_key_id": "01833acd46d06ab4",
    "signature": "oO4D2FZq2klR6La7rcBxcB5+imxRfjrmwhAPL9TWr8ZPEYngOaLgaXIXT7MJpl4C32nOOQ6qN791bmU+RTsuDw==",
    "signed_at": "2026-07-24T00:40:40.203Z"
  },
  "verification": {
    "package_signature_alg": "Ed25519",
    "public_key_id": "01833acd46d06ab4",
    "public_key_url": "https://vitna.costrinity.xyz/api/evidence/pubkey",
    "verify_endpoint": "https://vitna.costrinity.xyz/api/evidence/verify",
    "offline_verifier": "https://github.com/COSTRINITY/vitna-compliance-mcp/blob/main/verify-evidence.mjs",
    "proves": "package_signature: this exact bundle was issued by VITNA and not altered since export, verifiable offline with the published public key. record_hashes: every individual decision record is committed by sha256 (canonical JSON) inside the signed bundle, so a third party can independently verify each record, not just the bundle. hmac_verified (per decision) is the internal write-time integrity check, verifiable only by VITNA. None of these prove the actions were performed or that the records are factually true."
  }
}