Skip to main content

Product documentation

Replay lineage envelope

Inspectable evidence record

Claim ref: event-attribution-replayability | Status: partial | Verification method: manual

Source ref: product-repo:internal/db/store.go@064129bd3ac76b77ec1b888aac674132f241e7c3 | Verified at: 2026-07-14

Verified by: platform-engineering | Reproducible: no

Product version: 0.5.0

Verification procedure: Reviewed replay-envelope field requirements against the current public-safe event model notes and current store.go schema helpers.

Verification confidence: low

Replay fidelity: approximate

Environment context:

Repo state: product-repo@redacted

Checkout command: git checkout <commit-from-proof-record>

  • Access to redacted replay envelope examples

Artifact refs: event-replay-lineage

Proof boundaries

What this proves

  • Event envelope schema includes minimum required fields for replay
  • Field structure supports attribution workflow

What this does not prove

  • All state transitions produce event envelopes
  • Event emission is complete for all significant transitions
  • Hash chain integrity can be verified
  • Production event samples match schema

Assumptions

  • Event types defined in event_types.go cover all significant transitions
  • Envelope schema is stable

Failure modes

  • Transition occurs without corresponding event type
  • Event recorded after state change rather than at transition point
  • Hash chain gaps prevent reconstruction

Break this claim

Conditions

  • State transition occurs without recorded event
  • Event recorded with incorrect actor attribution
  • Hash chain contains gaps or inconsistencies

Required evidence

  • Production trace showing gap in event sequence
  • Example of state without corresponding event

Scope: status: partial means this proof record captures schema-level envelope field requirements — it describes what an event envelope should contain, not what the production event pipeline actually emits or guarantees. verificationConfidence: low reflects that field structure has been reviewed against the event model, but production event samples matching this schema have not been published, verified, or reproduced. This record does not establish that the event pipeline is complete, that all significant transitions produce envelopes, or that hash chain integrity is verifiable in production. Cross-session chain linkage shipped in v0.4.0 (replayFidelity: approximate). The JSON example below shows the target envelope shape — it is illustrative, not a verified production trace.

{
  "run_id": "run_01HTP5EFVCP0GDCY4EEWJ42MCM",
  "actor": "user:[email protected]",
  "approval_id": "apr_01HTP5G7Q3Y3Q70G1BT22K8HZE",
  "policy_version": "2026-03-14.1",
  "event_index": 287,
  "timestamp": "2026-03-19T04:22:17Z"
}

Status: partial — the envelope schema is established, but public replay command output is not published. This record does not provide production evidence of attribution or replay capability. failureMode entries (silent emission failure, incorrect actor attribution, hash chain gaps) describe real risks outside this record's proof boundary.