{
  "checkedAtUtc": "2026-10-26T12:08:53.874268+00:00",
  "kind": "Local synthetic evaluator regression tests",
  "command": "node --test policy.test.mjs",
  "nodeVersion": "v25.9.0",
  "tests": 8,
  "passed": 8,
  "failed": 0,
  "skipped": 0,
  "todo": 0,
  "modelCalls": 0,
  "actualToolExecutions": 0,
  "customerSessions": 0,
  "limits": "Does not measure security effectiveness, latency, model cost/quality, trusted enforcement, or real first customer use. Public demo interaction remains to be verified.",
  "files": {
    "policy.mjs": "04299a5b9790e90797a9e2d6f9fbfdb1327b5ee22d86d579ebc2241a9410ca65",
    "scenarios.mjs": "671f5fbb0ee5ae87b93b2275ebc5d50a624bfdfdbe03f1b391517075cbf0e5d6",
    "policy.test.mjs": "125a463c6ce6c50f1e45883a5a204517d6aa18801a50efe639c83418dfe7f8db",
    "app.mjs": "a6ccd7b5d0e0ea7e92d389251690258000274b3eea67e908495ae93d8474f513",
    "index.html": "e22a337bc0e5b95806b146cf4b0d4b79bd10d0085076375971327a7f97a17380",
    "styles.css": "948a9f6ed1c1f4b1fe0a2c04417960da987163b9d657addf25152af553e04d27"
  },
  "scenarioResults": [
    {
      "scenario": "public-read",
      "decision": "allow",
      "ruleId": "read.public",
      "reason": "Reading this synthetic public-workspace file is permitted."
    },
    {
      "scenario": "indirect-injection",
      "decision": "deny",
      "ruleId": "message.recipient",
      "reason": "Only an exact recipient domain of partner.example is permitted."
    },
    {
      "scenario": "protected-delete",
      "decision": "deny",
      "ruleId": "delete.scope",
      "reason": "Deletion is limited to one CSV export inside the synthetic exports directory."
    },
    {
      "scenario": "export-delete",
      "decision": "approval_required",
      "ruleId": "approval.required",
      "reason": "This permitted write needs separate approval of its exact tool and arguments."
    },
    {
      "scenario": "partner-message",
      "decision": "approval_required",
      "ruleId": "approval.required",
      "reason": "This permitted write needs separate approval of its exact tool and arguments."
    },
    {
      "scenario": "shell-denied",
      "decision": "deny",
      "ruleId": "shell.disabled",
      "reason": "Shell execution is always denied; command text cannot override this rule."
    }
  ],
  "approvalSequence": {
    "first": "allow",
    "replay": "approval_required"
  }
}