{
  "correlation_id": "2d906c74-5e3f-4b80-8cb2-3d4e5f607182",
  "data": {
    "action": "bounded-execution",
    "artifact_digest": "sha256:df214e02c24e70c6ac799bee873862f0d24d9bd537bf77cfb845a7b880c7565b",
    "attempts": 2,
    "budget": {
      "limit": {
        "attempts": 2,
        "wall_time_seconds": 1200
      },
      "used": {
        "attempts": 2,
        "wall_time_seconds": 84.0
      }
    },
    "decision_refs": [
      {
        "label": "admission",
        "ref": "BEA-2026-0001"
      },
      {
        "label": "admission_digest",
        "ref": "sha256:9bf8633a4ef9d555bf9cc69c8102081332ecc386d28675b1f3beabb953da0c43"
      },
      {
        "label": "approval",
        "ref": "6f1c2b9e-0a4d-4e3b-9c51-7d2f8a6b3e10"
      }
    ],
    "environment": "PRODUCTION",
    "executing_workload": "service:nk-bind-executor",
    "initiator": {
      "iss": "https://kc.coulomb.social",
      "role": "approver",
      "sub": "kc-sub-0f3a"
    },
    "outcome": "completed",
    "pdp": "not-evaluated",
    "receipt_version": "0.1",
    "reverted": true,
    "run_id": "2d906c74-5e3f-4b80-8cb2-3d4e5f607182",
    "runtime_principal": "system:serviceaccount:sso:nk-bind-executor",
    "source_commit": "15c9cdbef881",
    "steps": [
      {
        "checks": [
          {
            "id": "kv-advanced",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "generate",
        "kind": "step",
        "operation": "openbao.kv.write-next-version",
        "outcome": "done",
        "target": "openbao:platform/workloads/net-kingdom/directory-binds/svc-authelia"
      },
      {
        "checks": [
          {
            "id": "bind-signs-in",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "set-directory",
        "kind": "step",
        "operation": "lldap.user.change-own-password-from-kv",
        "outcome": "done",
        "target": "lldap:svc-authelia"
      },
      {
        "checks": [
          {
            "id": "eso-synced",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "deliver",
        "kind": "step",
        "operation": "eso.force-sync",
        "outcome": "done",
        "target": "k8s:sso/externalsecret/authelia-secrets"
      },
      {
        "checks": [
          {
            "id": "synthetic-journey",
            "result": "fail"
          }
        ],
        "consumer": "authelia",
        "id": "restart",
        "kind": "step",
        "operation": "k8s.rollout-restart",
        "outcome": "check_failed",
        "target": "k8s:sso/deployment/authelia"
      },
      {
        "checks": [
          {
            "id": "kv-advanced",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "restore-kv",
        "kind": "revert",
        "operation": "openbao.kv.write-previous-value-as-next-version",
        "outcome": "done",
        "target": "openbao:platform/workloads/net-kingdom/directory-binds/svc-authelia"
      },
      {
        "checks": [
          {
            "id": "bind-signs-in",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "restore-directory",
        "kind": "revert",
        "operation": "lldap.user.change-own-password-from-kv",
        "outcome": "done",
        "target": "lldap:svc-authelia"
      },
      {
        "checks": [
          {
            "id": "eso-synced",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "redeliver",
        "kind": "revert",
        "operation": "eso.force-sync",
        "outcome": "done",
        "target": "k8s:sso/externalsecret/authelia-secrets"
      },
      {
        "checks": [
          {
            "id": "synthetic-journey",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "restart-again",
        "kind": "revert",
        "operation": "k8s.rollout-restart",
        "outcome": "done",
        "target": "k8s:sso/deployment/authelia"
      },
      {
        "checks": [
          {
            "id": "kv-advanced",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "generate",
        "kind": "step",
        "operation": "openbao.kv.write-next-version",
        "outcome": "done",
        "target": "openbao:platform/workloads/net-kingdom/directory-binds/svc-authelia"
      },
      {
        "checks": [
          {
            "id": "bind-signs-in",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "set-directory",
        "kind": "step",
        "operation": "lldap.user.change-own-password-from-kv",
        "outcome": "done",
        "target": "lldap:svc-authelia"
      },
      {
        "checks": [
          {
            "id": "eso-synced",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "deliver",
        "kind": "step",
        "operation": "eso.force-sync",
        "outcome": "done",
        "target": "k8s:sso/externalsecret/authelia-secrets"
      },
      {
        "checks": [
          {
            "id": "synthetic-journey",
            "result": "pass"
          }
        ],
        "consumer": "authelia",
        "id": "restart",
        "kind": "step",
        "operation": "k8s.rollout-restart",
        "outcome": "done",
        "target": "k8s:sso/deployment/authelia"
      }
    ],
    "target": "admission:BEA-2026-0001",
    "tenant": "platform",
    "time_interval": {
      "clock_source": "system-utc",
      "end": "2026-11-03T09:31:24Z",
      "start": "2026-11-03T09:30:00Z"
    }
  },
  "id": "run:2d906c74-5e3f-4b80-8cb2-3d4e5f607182:receipt",
  "occurred_at": "2026-11-03T09:31:24+00:00",
  "source": "net-kingdom.bounded-executor",
  "subject": "admission:BEA-2026-0001",
  "tenant": "platform",
  "type": "execution.attribution.receipt"
}