{
  "schemaVersion": "cg-agent-delegation-boundary-result-0.1.0",
  "benchmarkId": "CG-BENCHMARK-AGENT-DELEGATION-BOUNDARY-0.1.0",
  "version": "0.1.0",
  "implementationVersion": "0.1.0",
  "testedAt": "2026-07-29T00:00:00.000Z",
  "fixtureDigestSha256": "f21d2c184d0fd5771454fa914b17d5deb1bcaff8c6313b1d7daa5635a8a3db43",
  "caseCount": 12,
  "passedCaseCount": 12,
  "failedCaseCount": 0,
  "summary": {
    "acceptedCases": 1,
    "rejectedCases": 9,
    "exactlyOneAcceptedCases": 2,
    "totalAttempts": 14
  },
  "cases": [
    {
      "id": "CGADB-TV-001",
      "title": "Valid root-to-child delegation",
      "boundary": "signed chain",
      "mutation": "none",
      "expected": "accepted",
      "observed": "accepted",
      "signal": "valid-chain-verified",
      "attempts": 1,
      "acceptedCount": 1,
      "rejectedCount": 0,
      "passed": true
    },
    {
      "id": "CGADB-TV-002",
      "title": "Signed child field changed",
      "boundary": "signature integrity",
      "mutation": "terminal subject changed after signing",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "signature-invalid",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-003",
      "title": "Unknown envelope field",
      "boundary": "strict schema",
      "mutation": "undeclared authority field added",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "unknown-field-blocked",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-004",
      "title": "Request actor differs from child subject",
      "boundary": "actor binding",
      "mutation": "request actor changed",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "actor-subject-mismatch",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-005",
      "title": "Request outside delegated capability",
      "boundary": "capability scope",
      "mutation": "different file capability requested",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "out-of-scope-capability",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-006",
      "title": "Verification policy differs from issued policy",
      "boundary": "policy binding",
      "mutation": "policy identifier changed",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "policy-mismatch",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-007",
      "title": "Child attempts authority amplification",
      "boundary": "authority attenuation",
      "mutation": "network capability added outside parent set",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "authority-amplification-blocked",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-008",
      "title": "Child extends parent expiry",
      "boundary": "time attenuation",
      "mutation": "child expiry set after parent expiry",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "expiry-extension-blocked",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-009",
      "title": "Child attached to a different parent",
      "boundary": "parent digest",
      "mutation": "valid child paired with another root",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "parent-digest-mismatch",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-010",
      "title": "Delegation exceeds maximum depth",
      "boundary": "chain depth",
      "mutation": "grandchild requested after maxDepth",
      "expected": "rejected",
      "observed": "rejected",
      "signal": "max-depth-blocked",
      "attempts": 1,
      "acceptedCount": 0,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-011",
      "title": "Sequential double-consume",
      "boundary": "single use",
      "mutation": "same terminal envelope consumed twice in sequence",
      "expected": "exactly_one_accepted",
      "observed": "exactly_one_accepted",
      "signal": "sequential-replay-blocked",
      "attempts": 2,
      "acceptedCount": 1,
      "rejectedCount": 1,
      "passed": true
    },
    {
      "id": "CGADB-TV-012",
      "title": "Concurrent double-consume",
      "boundary": "atomic single use",
      "mutation": "same terminal envelope consumed twice concurrently",
      "expected": "exactly_one_accepted",
      "observed": "exactly_one_accepted",
      "signal": "concurrent-replay-blocked",
      "attempts": 2,
      "acceptedCount": 1,
      "rejectedCount": 1,
      "passed": true
    }
  ],
  "sourceUrls": [
    "https://csrc.nist.gov/pubs/sp/800/207/final",
    "https://www.rfc-editor.org/rfc/rfc8693.html",
    "https://openai.github.io/openai-agents-js/guides/handoffs/",
    "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/"
  ],
  "claimBoundary": "This publisher-operated synthetic benchmark records twelve declared outcomes from CapitalGuard Delegation Firewall 0.1.0 using fixed fixtures. It does not assess a customer system, compare vendors, independently attest the publisher-run execution, prove every malformed delegation is rejected, control handoffs that bypass the firewall, or guarantee agent security.",
  "runtimeClaimBoundary": "CapitalGuard authenticates and attenuates authority represented by delegation envelopes that are issued, derived, and consumed through this firewall. It does not start a target agent or control operations that bypass the firewall and Agent Action Gateway.",
  "limitations": [
    "All agents, requests, paths, policies, timestamps, keys, and repository roots are deterministic synthetic fixtures.",
    "The twelve cases cover declared boundaries, not the complete input or concurrency space of every agent framework or delegation protocol.",
    "The public verifier checks fixed envelope signatures, fixture and result bindings, and declared invariants; it does not independently execute or attest the proprietary firewall.",
    "Atomic single use depends on all relevant delegation and execution paths sharing the protected local ledger.",
    "Operations that bypass the Delegation Firewall and Agent Action Gateway remain outside this result."
  ],
  "privacy": {
    "customerDataUsed": false,
    "productionKeysUsed": false,
    "networkActionsExecuted": false,
    "externalAgentsExecuted": false,
    "sourceContentsIncluded": false,
    "absolutePathsIncluded": false
  },
  "runDigestSha256": "985ead1f08b1d44b17f2a8ca229c8f931602c25863b03180ecf932f5779dbd7c"
}