Sample evidence · not a customer session
Agency delivery session
Composite walkthrough: Claude Code reads a client playbook, runs a command in that workspace, writes notes. Chain verifies.
Head: GENESIS → tail 3c3fb0ec9f914567… · 6 events · no file contents stored.
| # | Kind | Tool | Path | Outcome | Integrity |
|---|---|---|---|---|---|
| 1 | session_start |
— | — | — | 68a0fffac8e4… |
| 2 | tool_call |
Read |
~/clients/acme/invoice-playbook.md |
ok | 4823ba1d39aa… |
| 3 | file_read |
Read |
~/clients/acme/invoice-playbook.md |
ok | 50fcea354a47… |
| 4 | tool_call |
Bash |
~/clients/acme |
ok | 1a62af3c3686… |
| 5 | file_write |
Write |
~/clients/acme/remediation-notes.md |
ok | 95c733e136ea… |
| 6 | session_stop |
— | — | — | ea64830bc9f7… |
Would have refused
Today’s sample allowlist (Read only) replayed against this session. Not a control. 2 would refuse · 0 unverifiable.
Hypothetical. Today's dashboard policy applied to yesterday's ledger. Logging is not a control. Unverifiable means the stored digest is not enough to replay an argument-sensitive rule.
| # | Tool | Replay | Why |
|---|---|---|---|
| 1 | session_start |
not_applicable | session marker |
| 2 | Read |
would_allow | Allowed by an org rule on tool "Read", scoped to the whole org: sample allowlist — Read only · file ACL allow (~/clients/acme/**) |
| 3 | Read |
would_allow | Allowed by an org rule on tool "Read", scoped to the whole org: sample allowlist — Read only · file ACL allow (~/clients/acme/**) |
| 4 | Bash |
would_refuse | No org tool rule allows "Bash", and this org runs in allowlist mode. |
| 5 | Write |
would_refuse | No org tool rule allows "Write", and this org runs in allowlist mode. |
| 6 | session_stop |
not_applicable | session marker |