{
  "tenant": "tenant:platform",
  "subject": {
    "id": "secrets-engine",
    "type": "service",
    "tenant": "tenant:platform"
  },
  "action": "execute-ccr",
  "resource": {
    "id": "catalog:synthetic",
    "type": "secret-catalog-lane",
    "system": "secrets-engine",
    "attributes": {
      "stage": "prod"
    },
    "tenant": "tenant:platform"
  },
  "context": {
    "execution_contract": {
      "backend_budget": {
        "ttl_seconds": 30,
        "uses": 12
      },
      "backend_origin": "http://127.0.0.1:18200",
      "catalog_sha256": "sha256:290e55b2258d66980f9443ba7d1436adfc77b8814bd161004d5af2ba272bc9cc",
      "ccr_id": "CCR-2099-0001",
      "ccr_immutable_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "cluster_uid": "synthetic-not-native",
      "contract_version": "SECRETS-EXEC-20261011-v1",
      "execution_actor": "service:secrets-engine",
      "execution_grant_ccr_id": "CCR-2099-0002",
      "expected_after": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "expected_before": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "grant_immutable_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "operation": "metadata-apply-ccr",
      "operation_deadline": "2026-10-16T14:59:50+00:00",
      "operation_id": "cbfbced0-09d5-48c8-a1e7-a2ea4dc69153",
      "operations": [
        {
          "method": "GET",
          "path": "sys/policies/acl/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "PUT",
          "path": "sys/policies/acl/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "GET",
          "path": "sys/policies/acl/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "GET",
          "path": "auth/synthetic/role/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "PUT",
          "path": "auth/synthetic/role/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        {
          "method": "GET",
          "path": "auth/synthetic/role/synthetic",
          "payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        }
      ],
      "source_bundle": {
        "engine_dispatcher": {
          "path": "/synthetic/engine_dispatcher.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        "platform_mediator": {
          "path": "/synthetic/platform_mediator.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        "policy_auth": {
          "path": "/synthetic/policy_auth.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        },
        "typed_ccr": {
          "path": "/synthetic/typed_ccr.py",
          "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        }
      }
    },
    "catalog_target": {
      "lane": "synthetic",
      "stage": "prod"
    },
    "human_control": true,
    "service_actor_binding": {
      "version": "proposed-service-task-caller/v1",
      "transport_principal": "system:serviceaccount:secrets-engine:secrets-engine",
      "subject_id": "secrets-engine",
      "subject_type": "service",
      "tenant": "tenant:platform"
    },
    "purpose": "actual Python App source-only synthetic proof"
  }
}