{
 "evidence_record_id": "ser_de2af1644fb2d45bbdcc67fce944dac4",
 "schema": "ser.v0.1.legal_ai_output",
 "payload_hash": "de2af1644fb2d45bbdcc67fce944dac42e8d557a3d631836f7475f57352d9e8a",
 "merkle_root": "9b4a4f4552720e15c936ee5b91a5ba6757ce6845912fd923f6aa11f5bb88e412",
 "transparency_anchor": {
  "status": "anchored",
  "rekor_log_id": "108e9186e8c5677ad9eba8fbdfe1282cf1ac93656513fe4a739d48bb7125865d1262d977bebaa515",
  "rekor_log_index": 3241807281,
  "rekor_url": "https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677ad9eba8fbdfe1282cf1ac93656513fe4a739d48bb7125865d1262d977bebaa515",
  "signing_algorithm": "ecdsa-p256-sha256",
  "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEPkRStG6yZ9TCG1AJq3eQfwkmTJIH\nXFh6fZo0Zr799IH0yo1wg5I7vNSSNVXBXIcwJGSh8YKV0PwYv6HzsBGBug==\n-----END PUBLIC KEY-----",
  "anchored_at": "2026-10-13T05:38:45.633Z"
 },
 "surface": {
  "tier": "public_sandbox",
  "signing_algorithm_in_use": "ecdsa-p256-sha256-ephemeral",
  "signing_algorithm_in_production_tenants": "ed25519-hardware-backed-planned",
  "note": "This public MCP endpoint signs with an ephemeral ECDSA P-256 / SHA-256 keypair generated per request, for live Sigstore Rekor anchoring. A hardware-backed production signing tier is planned; no production tenant exists yet. The Sealed Evidence Record format and Rekor anchoring are designed to stay the same on that tier; only the signing key would change. See verdict.systems/security."
 },
 "chain_of_custody": {
  "sequence": 1,
  "prior_root": null,
  "signer": "unbound_ephemeral_key",
  "transparency_anchor": {
   "status": "anchored",
   "rekor_log_id": "108e9186e8c5677ad9eba8fbdfe1282cf1ac93656513fe4a739d48bb7125865d1262d977bebaa515",
   "rekor_log_index": 3241807281,
   "rekor_url": "https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677ad9eba8fbdfe1282cf1ac93656513fe4a739d48bb7125865d1262d977bebaa515",
   "signing_algorithm": "ecdsa-p256-sha256",
   "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEPkRStG6yZ9TCG1AJq3eQfwkmTJIH\nXFh6fZo0Zr799IH0yo1wg5I7vNSSNVXBXIcwJGSh8YKV0PwYv6HzsBGBug==\n-----END PUBLIC KEY-----",
   "anchored_at": "2026-10-13T05:38:45.633Z"
  },
  "retention_class": "ephemeral_compute"
 },
 "legal_review": {
  "human_review_status": "pending",
  "attorney_reviewer": null,
  "citations": [],
  "risk_flags": []
 },
 "record": {
  "schema": "ser.v0.1.legal_ai_output",
  "matter_id": "demo-tprm-TPRM-1013",
  "workflow": "agentic_action",
  "input_summary": "A vendor's AI support agent (fictional: Northwind Helpdesk) holds an API token its customer issued for the support integration, scoped tickets:read. The agent calls tickets.export against the customer's ticketing system. No customer data in this record; the export manifest is fingerprinted.",
  "output_summary": "The agent exported 212 support tickets to the vendor's own analytics bucket. 3 of the 212 tickets contain API keys that the customer's users pasted into the ticket text. Nothing in the vendor contract names this export.",
  "human_review_status": "pending",
  "attorney_reviewer": null,
  "model_provider": "demo",
  "model": null,
  "prompt_hash": null,
  "output_hash": "e5cb946c857b71f9869c3486fa612a015624841823db92866856eefb11f279a5",
  "source_system": "Vendor support agent (demonstration, fictional data)",
  "citations": [],
  "risk_flags": [],
  "metadata": {
   "case_id": "TPRM-1013",
   "step_kind": "agent_tool_call",
   "tool": "tickets.export",
   "token_scope": "tickets:read",
   "records_exported": 212,
   "records_with_pasted_keys": 3,
   "destination": "vendor analytics bucket",
   "illustrative": true,
   "disclosure": "Fictional scenario built for a demo on 2026-10-13. The vendor, customer, agent and figures are invented. The seal and the public log entry are real."
  },
  "event_time": "2026-10-13T05:38:44Z",
  "received_at": "2026-10-13T05:38:45.287Z"
 },
 "notice": "Sealed Evidence Record produced by stateless compute. Only record is covered by payload_hash; surface, chain_of_custody, legal_review and this notice are display copies outside the hash, so read the values inside record. Record commitment is anchored to the public Sigstore Rekor transparency log; verify independently at the rekor_url. Production admissibility requires the receiving Verdict tenant to attach retention policy, custodian identity, and (where applicable) a hardware-backed signer; that production tier is planned and no production tenant exists yet."
}