{
  "$schema": "runback.audit/v2",
  "manifest": {
    "run_id": "demo-kyc-5c7e02",
    "generated_at": "2026-09-22T11:08:22.362Z",
    "event_count": 5,
    "algorithm": "sha256-chain",
    "content_digest": "004e3ec05530bebf8d4db6d975037d71eab27abb998f8e187a11e6388f24ff78",
    "replay": {
      "cassette_digest": "1aabc73115a580d04a0987505c2ffd9b4bacfbac92437d1fa28d99c91a401c2c",
      "entry_count": 3,
      "algorithm": "oracle-chain/sha256",
      "note": "The run's oracle stream — every model response and tool output, hash-chained. Re-execute the agent against `events` with @runback/replay and the cassette digest must reproduce. This is proof the recording IS the deterministic input stream of the run — an audit you can re-run, not just read."
    },
    "signed": true,
    "signature": {
      "alg": "Ed25519",
      "value": "5b2260ed5e60d6d165765a7bbefc3ed48dd6c80c072346b995cd3941c06e38d4d5cdadeecc38cc253162e5245effcef8827db0717fea9f95ff762232300bdf07",
      "pubkey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEArDPmR+Gvu1HawnSvM6xjZao7BVPPQ80Qq3sa1hAYvDU=\n-----END PUBLIC KEY-----\n"
    },
    "verify": "Recompute the event chain h_i = SHA-256(h_{i-1} + canonical(event_i)) over `events` → must equal content_digest. Recompute the oracle-stream digest from `events` → must equal replay.cassette_digest. The signature covers `${content_digest}:${cassette_digest}`. Ed25519: verify with the public key embedded in manifest.signature.pubkey (no server key needed — fully offline-verifiable). HMAC-SHA256 (legacy): requires AUDIT_SIGNING_KEY. POST this record to /api/audit/verify.",
    "spec_url": "https://runback.dev/spec",
    "verifier_url": "https://runback.dev/verify"
  },
  "run": {
    "run_id": "demo-kyc-5c7e02",
    "name": "kyc-onboarding-agent",
    "status": "success",
    "input": "Onboard Acme Pty Ltd (ABN 51 824 753 556).",
    "output": {
      "risk": "low",
      "decision": "approved"
    },
    "error": null,
    "metadata": {
      "demo": true
    },
    "step_count": 1,
    "total_tokens": 540,
    "started_at": "2026-09-22T01:40:21.169+00:00",
    "ended_at": "2026-09-22T01:40:23.069+00:00",
    "actor_type": null,
    "actor_id": null
  },
  "events": [
    {
      "seq": 0,
      "name": "kyc-onboarding-agent",
      "type": "run",
      "error": null,
      "input": "Onboard Acme Pty Ltd (ABN 51 824 753 556).",
      "phase": "start",
      "output": null,
      "run_id": "demo-kyc-5c7e02",
      "status": "running",
      "ts_end": "2026-09-22T01:40:23.069Z",
      "span_id": "r",
      "metadata": {
        "demo": true
      },
      "ts_start": "2026-09-22T01:40:21.169Z",
      "parent_span_id": null,
      "schema_version": 1,
      "_hash": "36625f27beb399f2bf988a07f277f23ee154b34ce759889333cc71e3c6631711"
    },
    {
      "seq": 1,
      "type": "llm",
      "error": null,
      "model": {
        "model_id": "claude-sonnet-4-6",
        "provider": "openai"
      },
      "usage": {
        "input_tokens": 378,
        "total_tokens": 540,
        "output_tokens": 162
      },
      "run_id": "demo-kyc-5c7e02",
      "ts_end": "2026-09-22T01:40:21.689Z",
      "request": {
        "tools": [],
        "params": {
          "temperature": 0
        },
        "system": "You are a careful enterprise agent. Follow policy.",
        "messages": [
          {
            "role": "user",
            "content": "Screening for sanctions first."
          }
        ]
      },
      "span_id": "l1",
      "response": {
        "text": "Screening for sanctions first.",
        "reasoning": null,
        "tool_calls": [
          {
            "input": {
              "entity": "Acme Pty Ltd"
            },
            "tool_name": "sanctions_screen",
            "tool_call_id": "t1"
          }
        ],
        "finish_reason": "tool-call"
      },
      "ts_start": "2026-09-22T01:40:21.199Z",
      "latency_ms": 490,
      "parent_span_id": "r",
      "schema_version": 1,
      "_hash": "1eab4806e8f639f5f9e6f96e2a5b81685931cc80db89504d82c775cdb5a4364d"
    },
    {
      "seq": 2,
      "type": "tool",
      "error": null,
      "input": {
        "entity": "Acme Pty Ltd"
      },
      "output": {
        "lists": [
          "DFAT",
          "OFAC",
          "UN"
        ],
        "match": false
      },
      "run_id": "demo-kyc-5c7e02",
      "ts_end": "2026-09-22T01:40:21.809Z",
      "span_id": "t1",
      "ts_start": "2026-09-22T01:40:21.699Z",
      "tool_name": "sanctions_screen",
      "latency_ms": 110,
      "tool_call_id": "t1",
      "parent_span_id": "r",
      "schema_version": 1,
      "_hash": "b915139159bd9332e6f47adfa21f80490303ae75fd6beaccc4fa964bfe34602f"
    },
    {
      "seq": 3,
      "type": "tool",
      "error": null,
      "input": {
        "abn": "51824753556"
      },
      "output": {
        "valid": true,
        "status": "active"
      },
      "run_id": "demo-kyc-5c7e02",
      "ts_end": "2026-09-22T01:40:22.469Z",
      "span_id": "t2",
      "ts_start": "2026-09-22T01:40:22.329Z",
      "tool_name": "verify_abn",
      "latency_ms": 140,
      "tool_call_id": "t2",
      "parent_span_id": "r",
      "schema_version": 1,
      "_hash": "497fa4de5c5990b4c9a44a6bcc42d27b0cff126d5442813b8f3494a745d4adef"
    },
    {
      "seq": 4,
      "name": "kyc-onboarding-agent",
      "type": "run",
      "error": null,
      "input": null,
      "phase": "end",
      "output": {
        "risk": "low",
        "decision": "approved"
      },
      "run_id": "demo-kyc-5c7e02",
      "status": "success",
      "ts_end": "2026-09-22T01:40:23.069Z",
      "span_id": "re",
      "metadata": {
        "demo": true
      },
      "ts_start": "2026-09-22T01:40:22.989Z",
      "parent_span_id": null,
      "schema_version": 1,
      "_hash": "004e3ec05530bebf8d4db6d975037d71eab27abb998f8e187a11e6388f24ff78"
    }
  ]
}