动作凭证

一次智能体动作,留下一份能审计的证据

动作凭证把一次受控运行的关键信息都记下来:用的哪版策略、走到哪个检查点、谁确认的、对外做了什么、恢复覆盖到哪。攒成一份防篡改的凭证(hash-chain 在 roadmap 上)。

receipt.json

finalized
run_idrun_042
policy_hashsha256:8c1f6a9e...
checkpoint_idcp_004
action_idrefund_7781
decisionapproved_by: support_lead
external_effectpayment.refund via broker
restore_coveragefiles=enforced, runtime=enforced, egress=governed, db=brokered
receipt_hashsha256:91fd2c0a...

企业评审要看的是一整条动作链路

这个动作是在哪条策略下放行的,动手前有没有退路,不可逆的那一步谁点的头,最后外部系统到底发生了什么——这些都得说清楚。

redacted receipt payload
{
  "run_id": "run_042",
  "policy_hash": "sha256:8c1f6a9e...",
  "checkpoint": { "id": "cp_004", "materialized": true },
  "decision": { "type": "approved", "by": "support_lead" },
  "receipt_hash": "sha256:91fd2c0a..."
}