Product documentation
Replay lineage envelope
Inspectable evidence record
Claim ref: event-attribution-replayability | Status: partial | Verification method: manual
Source ref: product-repo:internal/db/store.go@064129bd3ac76b77ec1b888aac674132f241e7c3 | Verified at: 2026-07-14
Verified by: platform-engineering | Reproducible: no
Product version: 0.5.0
Verification procedure: Reviewed replay-envelope field requirements against the current public-safe event model notes and current store.go schema helpers.
Verification confidence: low
Replay fidelity: approximate
Environment context:
Repo state: product-repo@redacted
Checkout command: git checkout <commit-from-proof-record>
- Access to redacted replay envelope examples
Artifact refs: event-replay-lineage
Proof boundaries
What this proves
- Event envelope schema includes minimum required fields for replay
- Field structure supports attribution workflow
What this does not prove
- All state transitions produce event envelopes
- Event emission is complete for all significant transitions
- Hash chain integrity can be verified
- Production event samples match schema
Assumptions
- Event types defined in event_types.go cover all significant transitions
- Envelope schema is stable
Failure modes
- Transition occurs without corresponding event type
- Event recorded after state change rather than at transition point
- Hash chain gaps prevent reconstruction
Break this claim
Conditions
- State transition occurs without recorded event
- Event recorded with incorrect actor attribution
- Hash chain contains gaps or inconsistencies
Required evidence
- Production trace showing gap in event sequence
- Example of state without corresponding event
Scope: status: partial means this proof record captures schema-level envelope field requirements — it describes what an event envelope should contain, not what the production event pipeline actually emits or guarantees. verificationConfidence: low reflects that field structure has been reviewed against the event model, but production event samples matching this schema have not been published, verified, or reproduced. This record does not establish that the event pipeline is complete, that all significant transitions produce envelopes, or that hash chain integrity is verifiable in production. Cross-session chain linkage shipped in v0.4.0 (replayFidelity: approximate). The JSON example below shows the target envelope shape — it is illustrative, not a verified production trace.
{
"run_id": "run_01HTP5EFVCP0GDCY4EEWJ42MCM",
"actor": "user:[email protected]",
"approval_id": "apr_01HTP5G7Q3Y3Q70G1BT22K8HZE",
"policy_version": "2026-03-14.1",
"event_index": 287,
"timestamp": "2026-03-19T04:22:17Z"
}
Status: partial — the envelope schema is established, but public replay command output is not published. This record does not provide production evidence of attribution or replay capability. failureMode entries (silent emission failure, incorrect actor attribution, hash chain gaps) describe real risks outside this record's proof boundary.