{
  "tenant": "tenant:platform",
  "subject": {
    "id": "secrets-engine",
    "type": "service",
    "tenant": "tenant:platform"
  },
  "action": "execute-ccr",
  "resource": {
    "id": "catalog:synthetic",
    "type": "secret-catalog-lane",
    "system": "secrets-engine",
    "attributes": {
      "stage": "prod"
    },
    "tenant": "tenant:platform"
  },
  "context": {
    "execution_contract": {
      "backend_budget": {
        "ttl_seconds": 120,
        "uses": 12
      },
      "backend_origin": "http://127.0.0.1:18200",
      "catalog_sha256": "sha256:290e55b2258d66980f9443ba7d1436adfc77b8814bd161004d5af2ba272bc9cc",
      "ccr_id": "CCR-2099-0001",
      "ccr_immutable_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "cluster_uid": "synthetic-not-native",
      "contract_version": "SECRETS-EXEC-20261011-v1",
      "execution_actor": "service:secrets-engine",
      "execution_grant_ccr_id": "CCR-2099-0002",
      "expected_after": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "expected_before": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "grant_immutable_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "operation": "metadata-apply-ccr",
      "operation_deadline": "2026-10-16T09:08:13.606884+00:00",
      "operation_id": "cbfbced0-09d5-48c8-a1e7-a2ea4dc69153",
      "operations": [
        {
          "method": "GET",
          "path": "sys/policies/acl/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "PUT",
          "path": "sys/policies/acl/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "GET",
          "path": "sys/policies/acl/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "GET",
          "path": "auth/synthetic/role/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "PUT",
          "path": "auth/synthetic/role/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "GET",
          "path": "auth/synthetic/role/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        }
      ],
      "source_bundle": {
        "engine_dispatcher": {
          "path": "/synthetic/engine_dispatcher.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        "platform_mediator": {
          "path": "/synthetic/platform_mediator.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        "policy_auth": {
          "path": "/synthetic/policy_auth.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        "typed_ccr": {
          "path": "/synthetic/typed_ccr.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        }
      }
    },
    "catalog_target": {
      "lane": "synthetic",
      "stage": "prod"
    },
    "human_control": true,
    "service_actor_binding": {
      "version": "proposed-service-task-caller/v1",
      "transport_principal": "system:serviceaccount:secrets-engine:secrets-engine",
      "subject_id": "secrets-engine",
      "subject_type": "service",
      "tenant": "tenant:platform"
    },
    "purpose": "actual Python App source-only synthetic proof",
    "approval": {
      "approval_id": "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
      "binding": {
        "action": "execute-ccr",
        "actor": "secrets-engine",
        "digest": "sha256:19cfbe20e156cef1f4c0a37842c47666d2f5b2164d803d77a12346ed38a9444d",
        "human_control": true,
        "pdp_digest": "sha256:945b3b5c014370f1a64dbca47c44a5c85124b294b6e6a11e4974c958530aa86b",
        "pdp_path": true,
        "principal": "secrets-engine",
        "purpose": "actual Python App source-only synthetic proof",
        "target": {
          "attributes": {
            "stage": "prod"
          },
          "id": "catalog:synthetic",
          "system": "secrets-engine",
          "tenant": "tenant:platform",
          "type": "secret-catalog-lane"
        }
      },
      "consumed": false,
      "freshness": {
        "not_after": "2026-10-16T09:07:33+00:00",
        "observed_at": "2026-10-16T09:06:33+00:00",
        "ttl_seconds": 60
      },
      "issuer": "approval-engine",
      "kind": "approval-claim",
      "reason_code": "ok",
      "schema_version": "0.1",
      "state": "valid",
      "valid_now": true,
      "validity": {
        "expires_at": "2026-10-16T09:09:33.329626+00:00",
        "not_before": "2026-10-16T09:05:33.329626+00:00"
      },
      "yields_to": "net-kingdom taxonomy request-claim schema (statute \u00a717; unassigned)"
    }
  }
}