Sample evidence · not a customer session
Agency delivery session
Composite walkthrough: Claude Code reads a client playbook, runs a command in that workspace, writes notes. Chain verifies.
Head: GENESIS → tail 51b5b0fbeb0e411d… · 6 events · no file contents stored.
| # | Kind | Tool | Path | Outcome | Integrity |
|---|---|---|---|---|---|
| 1 | session_start |
— | — | — | 616a2a670896… |
| 2 | tool_call |
Read |
~/clients/acme/invoice-playbook.md |
ok | b10b5edfa822… |
| 3 | file_read |
Read |
~/clients/acme/invoice-playbook.md |
ok | a74ecc24ea2d… |
| 4 | tool_call |
Bash |
~/clients/acme |
ok | 61e36bb16abb… |
| 5 | file_write |
Write |
~/clients/acme/remediation-notes.md |
ok | 803614548400… |
| 6 | session_stop |
— | — | — | e7bda6816342… |
Would have refused
Today’s sample allowlist (Read only) replayed against this session. Not a control. 2 would refuse · 0 unverifiable.
Hypothetical. Today's dashboard policy applied to yesterday's ledger. Logging is not a control. Unverifiable means the stored digest is not enough to replay an argument-sensitive rule.
| # | Tool | Replay | Why |
|---|---|---|---|
| 1 | session_start |
not_applicable | session marker |
| 2 | Read |
would_allow | Allowed by an org rule on tool "Read", scoped to the whole org: sample allowlist — Read only · file ACL allow (~/clients/acme/**) |
| 3 | Read |
would_allow | Allowed by an org rule on tool "Read", scoped to the whole org: sample allowlist — Read only · file ACL allow (~/clients/acme/**) |
| 4 | Bash |
would_refuse | No org tool rule allows "Bash", and this org runs in allowlist mode. |
| 5 | Write |
would_refuse | No org tool rule allows "Write", and this org runs in allowlist mode. |
| 6 | session_stop |
not_applicable | session marker |