Sample evidence · not a customer session
Agency delivery session
Composite walkthrough: Claude Code reads a client playbook, runs a command in that workspace, writes notes. Chain verifies.
Head: GENESIS → tail 1f5b2fd980b72db2… · 6 events · no file contents stored.
| # | Kind | Tool | Path | Outcome | Integrity |
|---|---|---|---|---|---|
| 1 | session_start |
— | — | — | c40877dc99ae… |
| 2 | tool_call |
Read |
~/clients/acme/invoice-playbook.md |
ok | 5f531aaf65fe… |
| 3 | file_read |
Read |
~/clients/acme/invoice-playbook.md |
ok | bd294bf61083… |
| 4 | tool_call |
Bash |
~/clients/acme |
ok | 2556879b46e7… |
| 5 | file_write |
Write |
~/clients/acme/remediation-notes.md |
ok | 40cd71d05487… |
| 6 | session_stop |
— | — | — | 41c5d25ceae9… |
Would have refused
Today’s sample allowlist (Read only) replayed against this session. Not a control. 2 would refuse · 0 unverifiable.
Hypothetical. Today's dashboard policy applied to yesterday's ledger. Logging is not a control. Unverifiable means the stored digest is not enough to replay an argument-sensitive rule.
| # | Tool | Replay | Why |
|---|---|---|---|
| 1 | session_start |
not_applicable | session marker |
| 2 | Read |
would_allow | Allowed by an org rule on tool "Read", scoped to the whole org: sample allowlist — Read only · file ACL allow (~/clients/acme/**) |
| 3 | Read |
would_allow | Allowed by an org rule on tool "Read", scoped to the whole org: sample allowlist — Read only · file ACL allow (~/clients/acme/**) |
| 4 | Bash |
would_refuse | No org tool rule allows "Bash", and this org runs in allowlist mode. |
| 5 | Write |
would_refuse | No org tool rule allows "Write", and this org runs in allowlist mode. |
| 6 | session_stop |
not_applicable | session marker |