{
  "tool_id": "art-237-validate-agent-audit-trail",
  "note": "AAT conformance validator aligned with IETF draft-sharif-agent-audit-trail-00 (alignment, not certified). RFC 8785 JCS + SHA-256 chain. sha256_prev_record must be 64 lowercase hex chars or empty (first record). ECDSA presence is optional per draft.",
  "vectors": [
    {
      "name": "fully_conformant_chained_ecdsa",
      "description": "Fully conformant chained record with all required fields and optional ECDSA present. sha256_prev_record is a valid 64-char hex. Known: chain_position=chained when sha256_prev_record non-empty.",
      "policy_parameters": {
        "agent_identity": "did:web:agent.example.com#key-1",
        "action_class": "EXECUTE",
        "outcome": "SUCCESS",
        "trust_level": "HIGH",
        "sha256_prev_record": "aabbccdd11223344aabbccdd11223344aabbccdd11223344aabbccdd11223344",
        "ecdsa_present": true,
        "record_id": "rec-001"
      },
      "output_payload": {
        "conformance_result": "CONFORMANT",
        "agent_identity": "did:web:agent.example.com#key-1",
        "action_class": "EXECUTE",
        "outcome": "SUCCESS",
        "trust_level": "HIGH",
        "sha256_prev_record": "aabbccdd11223344aabbccdd11223344aabbccdd11223344aabbccdd11223344",
        "chain_position": "chained",
        "sha256_chain_format_valid": true,
        "ecdsa_present": true,
        "aat_required_fields_present": true,
        "aat_completeness_score": 100,
        "validation_errors": [],
        "validation_warnings": [],
        "action_detail": null,
        "record_id": "rec-001",
        "alignment_note": "Aligned with IETF draft-sharif-agent-audit-trail-00 (I-D expires Sept 2026). Not a certified standard conformance check — no conformance authority exists for this draft.",
        "regulatory_basis": "IETF draft-sharif-agent-audit-trail-00; RFC 8785 (JSON Canonicalisation Scheme); EU AI Act (Reg. 2024/1689) Art 12(2)",
        "table_version": "AAT-DRAFT-SHARIF-00-2026"
      },
      "golden_hash": "ab7f29f2099a834aba962f4f4e8258b0873a2d14597cd519362bac9423ef0c9f"
    },
    {
      "name": "conformant_first_record_no_ecdsa",
      "description": "Conformant first record (sha256_prev_record empty = first in chain). ECDSA absent triggers a warning. Known: CHAIN_FIRST_RECORD flag set when sha256_prev_record is empty.",
      "policy_parameters": {
        "agent_identity": "agent-beta",
        "action_class": "READ",
        "outcome": "FAILURE",
        "trust_level": "BASIC",
        "sha256_prev_record": "",
        "ecdsa_present": false,
        "action_detail": "Query financial data API"
      },
      "output_payload": {
        "conformance_result": "CONFORMANT",
        "agent_identity": "agent-beta",
        "action_class": "READ",
        "outcome": "FAILURE",
        "trust_level": "BASIC",
        "sha256_prev_record": "",
        "chain_position": "first",
        "sha256_chain_format_valid": true,
        "ecdsa_present": false,
        "aat_required_fields_present": true,
        "aat_completeness_score": 100,
        "validation_errors": [],
        "validation_warnings": [
          "ecdsa_signature absent — AAT recommends optional ECDSA signature"
        ],
        "action_detail": "Query financial data API",
        "record_id": null,
        "alignment_note": "Aligned with IETF draft-sharif-agent-audit-trail-00 (I-D expires Sept 2026). Not a certified standard conformance check — no conformance authority exists for this draft.",
        "regulatory_basis": "IETF draft-sharif-agent-audit-trail-00; RFC 8785 (JSON Canonicalisation Scheme); EU AI Act (Reg. 2024/1689) Art 12(2)",
        "table_version": "AAT-DRAFT-SHARIF-00-2026"
      },
      "golden_hash": "3e8f35b77159cf4a2718704aa40c87f1dca358b353961386bc2bb185af189d90"
    },
    {
      "name": "empty_input_finite",
      "description": "Empty inputs return EMPTY_INPUT sentinel with finite zero-state. Confirms empty-input-finite gate.",
      "policy_parameters": {},
      "output_payload": {
        "conformance_result": "EMPTY_INPUT",
        "agent_identity": "",
        "action_class": "",
        "outcome": "",
        "trust_level": "",
        "sha256_prev_record": "",
        "chain_position": "unknown",
        "ecdsa_present": false,
        "aat_required_fields_present": false,
        "aat_completeness_score": 0,
        "validation_errors": [
          "agent_identity is required"
        ],
        "alignment_note": "Aligned with IETF draft-sharif-agent-audit-trail-00 (expires Sept 2026). Not a certified standard conformance check.",
        "regulatory_basis": "IETF draft-sharif-agent-audit-trail-00; RFC 8785 JCS; EU AI Act Art 12",
        "table_version": "AAT-DRAFT-SHARIF-00-2026"
      },
      "golden_hash": "45b183ad90a2e3695c7cbc2ace51f3ec90a151ea2d83e61fbd925fa1a950bea9"
    }
  ]
}