{
  "blueprint_summary": {
    "abilities": [
      "read-local",
      "cross-platform-packaging",
      "agent-pricing",
      "marketplace-payouts",
      "record-update"
    ],
    "channels": [
      "marketplace-portal",
      "sdk-publisher",
      "manager-console",
      "api-worker",
      "scheduled-job"
    ],
    "integrations": [
      "agent-marketplace",
      "marketplace-commerce",
      "agent-fleet",
      "deployment-platforms",
      "dev-tools",
      "documents"
    ],
    "name": "agent-marketplace-agent simulator",
    "preflight_passed": true,
    "risk_mode": "approval_required",
    "skills": [
      "marketplace-publishing",
      "marketplace-commerce",
      "template-trust-verification",
      "agent-fleet-ops",
      "evidence-pack"
    ],
    "template_id": "agent-marketplace-agent"
  },
  "simulator": {
    "events": [
      {
        "decisions": [
          {
            "decision": "allow",
            "reason": "matched tools.template.read",
            "rule": "tools.template.read",
            "tool": "template.read"
          },
          {
            "decision": "allow",
            "reason": "matched tools.manifest.validate",
            "rule": "tools.manifest.validate",
            "tool": "manifest.validate"
          },
          {
            "decision": "allow",
            "reason": "matched tools.pricing.draft",
            "rule": "tools.pricing.draft",
            "tool": "pricing.draft"
          },
          {
            "decision": "allow",
            "reason": "matched tools.listing.draft",
            "rule": "tools.listing.draft",
            "tool": "listing.draft"
          },
          {
            "decision": "allow",
            "reason": "matched tools.evidence.write",
            "rule": "tools.evidence.write",
            "tool": "evidence.write"
          },
          {
            "decision": "allow",
            "reason": "matched tools.report.write",
            "rule": "tools.report.write",
            "tool": "report.write"
          },
          {
            "decision": "ask",
            "reason": "matched tools.listing.publish",
            "rule": "tools.listing.publish",
            "tool": "listing.publish"
          },
          {
            "decision": "ask",
            "reason": "matched tools.price.set",
            "rule": "tools.price.set",
            "tool": "price.set"
          }
        ],
        "evidence_id": "sim-agent-marketplace-agent-1",
        "expected_policy": "human_review_required",
        "id": "creator-submit",
        "input": {
          "creator": "Acme Agents",
          "template": "appointment-setter-agent"
        },
        "title": "Creator submits a new agent"
      },
      {
        "decisions": [
          {
            "decision": "allow",
            "reason": "matched tools.template.read",
            "rule": "tools.template.read",
            "tool": "template.read"
          },
          {
            "decision": "allow",
            "reason": "matched tools.manifest.validate",
            "rule": "tools.manifest.validate",
            "tool": "manifest.validate"
          },
          {
            "decision": "allow",
            "reason": "matched tools.pricing.draft",
            "rule": "tools.pricing.draft",
            "tool": "pricing.draft"
          },
          {
            "decision": "allow",
            "reason": "matched tools.listing.draft",
            "rule": "tools.listing.draft",
            "tool": "listing.draft"
          },
          {
            "decision": "allow",
            "reason": "matched tools.evidence.write",
            "rule": "tools.evidence.write",
            "tool": "evidence.write"
          },
          {
            "decision": "allow",
            "reason": "matched tools.report.write",
            "rule": "tools.report.write",
            "tool": "report.write"
          },
          {
            "decision": "ask",
            "reason": "matched tools.listing.publish",
            "rule": "tools.listing.publish",
            "tool": "listing.publish"
          },
          {
            "decision": "ask",
            "reason": "matched tools.price.set",
            "rule": "tools.price.set",
            "tool": "price.set"
          }
        ],
        "evidence_id": "sim-agent-marketplace-agent-2",
        "expected_policy": "human_review_required",
        "id": "price-change",
        "input": {
          "model": "subscription",
          "price_cents": 4900
        },
        "title": "Creator sets price"
      },
      {
        "decisions": [
          {
            "decision": "allow",
            "reason": "matched tools.template.read",
            "rule": "tools.template.read",
            "tool": "template.read"
          },
          {
            "decision": "allow",
            "reason": "matched tools.manifest.validate",
            "rule": "tools.manifest.validate",
            "tool": "manifest.validate"
          },
          {
            "decision": "allow",
            "reason": "matched tools.pricing.draft",
            "rule": "tools.pricing.draft",
            "tool": "pricing.draft"
          },
          {
            "decision": "allow",
            "reason": "matched tools.listing.draft",
            "rule": "tools.listing.draft",
            "tool": "listing.draft"
          },
          {
            "decision": "allow",
            "reason": "matched tools.evidence.write",
            "rule": "tools.evidence.write",
            "tool": "evidence.write"
          },
          {
            "decision": "allow",
            "reason": "matched tools.report.write",
            "rule": "tools.report.write",
            "tool": "report.write"
          },
          {
            "decision": "ask",
            "reason": "matched tools.listing.publish",
            "rule": "tools.listing.publish",
            "tool": "listing.publish"
          },
          {
            "decision": "ask",
            "reason": "matched tools.price.set",
            "rule": "tools.price.set",
            "tool": "price.set"
          }
        ],
        "evidence_id": "sim-agent-marketplace-agent-3",
        "expected_policy": "human_review_required",
        "id": "buyer-install",
        "input": {
          "buyer": "Northwind",
          "workspace": "sales"
        },
        "title": "Buyer installs verified agent"
      }
    ],
    "id": "cassette-agent-marketplace-agent",
    "permission_labels": [
      {
        "action": "allow",
        "category": "AI",
        "explanation": "Allowed within the mission and recorded.",
        "id": "can-use-local-llm",
        "label": "Can use local LLM",
        "risk": "low",
        "tool": "llm.local.call"
      },
      {
        "action": "ask",
        "category": "AI",
        "explanation": "Requires human approval before execution.",
        "id": "may-use-public-llm",
        "label": "May use public LLM",
        "risk": "medium",
        "tool": "llm.public.call"
      },
      {
        "action": "ask",
        "category": "Accounting",
        "explanation": "Requires human approval before execution.",
        "id": "uses-accounting-tool-accounting-update",
        "label": "Uses Accounting tool: accounting.update",
        "risk": "medium",
        "tool": "accounting.update"
      },
      {
        "action": "ask",
        "category": "Agent",
        "explanation": "Requires human approval before execution.",
        "id": "uses-agent-tool-agent-deploy",
        "label": "Uses Agent tool: agent.deploy",
        "risk": "medium",
        "tool": "agent.deploy"
      },
      {
        "action": "allow",
        "category": "Agent",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-agent-tool-agent-inventory",
        "label": "Uses Agent tool: agent.inventory",
        "risk": "medium",
        "tool": "agent.inventory"
      },
      {
        "action": "allow",
        "category": "Api",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-api-tool-api-receive",
        "label": "Uses Api tool: api.receive",
        "risk": "medium",
        "tool": "api.receive"
      },
      {
        "action": "ask",
        "category": "Api",
        "explanation": "Requires human approval before execution.",
        "id": "uses-api-tool-api-respond",
        "label": "Uses Api tool: api.respond",
        "risk": "medium",
        "tool": "api.respond"
      },
      {
        "action": "ask",
        "category": "Approval",
        "explanation": "Requires human approval before execution.",
        "id": "uses-approval-tool-approval-request",
        "label": "Uses Approval tool: approval.request",
        "risk": "medium",
        "tool": "approval.request"
      },
      {
        "action": "ask",
        "category": "Ats",
        "explanation": "Requires human approval before execution.",
        "id": "uses-ats-tool-ats-update",
        "label": "Uses Ats tool: ats.update",
        "risk": "medium",
        "tool": "ats.update"
      },
      {
        "action": "deny",
        "category": "Bank",
        "explanation": "Blocked by default.",
        "id": "uses-bank-tool-bank-transfer",
        "label": "Uses Bank tool: bank.transfer",
        "risk": "medium",
        "tool": "bank.transfer"
      },
      {
        "action": "deny",
        "category": "Benefits",
        "explanation": "Blocked by default.",
        "id": "uses-benefits-tool-benefits-guarantee",
        "label": "Uses Benefits tool: benefits.guarantee",
        "risk": "medium",
        "tool": "benefits.guarantee"
      },
      {
        "action": "deny",
        "category": "Calendar",
        "explanation": "Blocked by default.",
        "id": "uses-calendar-tool-calendar-delete-autonomous",
        "label": "Uses Calendar tool: calendar.delete.autonomous",
        "risk": "medium",
        "tool": "calendar.delete.autonomous"
      },
      {
        "action": "deny",
        "category": "Clinical",
        "explanation": "Blocked by default.",
        "id": "uses-clinical-tool-clinical-signoff-autonomous",
        "label": "Uses Clinical tool: clinical.signoff.autonomous",
        "risk": "medium",
        "tool": "clinical.signoff.autonomous"
      },
      {
        "action": "deny",
        "category": "Confidential",
        "explanation": "Blocked by default.",
        "id": "uses-confidential-tool-confidential-share-unapproved",
        "label": "Uses Confidential tool: confidential.share.unapproved",
        "risk": "medium",
        "tool": "confidential.share.unapproved"
      },
      {
        "action": "ask",
        "category": "Connector",
        "explanation": "Requires human approval before execution.",
        "id": "uses-connector-tool-connector-enable",
        "label": "Uses Connector tool: connector.enable",
        "risk": "medium",
        "tool": "connector.enable"
      },
      {
        "action": "deny",
        "category": "Contact",
        "explanation": "Blocked by default.",
        "id": "uses-contact-tool-contact-without-consent",
        "label": "Uses Contact tool: contact.without_consent",
        "risk": "medium",
        "tool": "contact.without_consent"
      },
      {
        "action": "deny",
        "category": "Content",
        "explanation": "Blocked by default.",
        "id": "uses-content-tool-content-exfiltrate",
        "label": "Uses Content tool: content.exfiltrate",
        "risk": "medium",
        "tool": "content.exfiltrate"
      },
      {
        "action": "deny",
        "category": "Credential",
        "explanation": "Blocked by default.",
        "id": "uses-credential-tool-credential-attack",
        "label": "Uses Credential tool: credential.attack",
        "risk": "medium",
        "tool": "credential.attack"
      },
      {
        "action": "deny",
        "category": "Credential",
        "explanation": "Blocked by default.",
        "id": "uses-credential-tool-credential-capture",
        "label": "Uses Credential tool: credential.capture",
        "risk": "medium",
        "tool": "credential.capture"
      },
      {
        "action": "ask",
        "category": "Customer data",
        "explanation": "Requires human approval before execution.",
        "id": "can-update-crm-customer-records",
        "label": "Can update CRM/customer records",
        "risk": "high",
        "tool": "crm.update"
      },
      {
        "action": "deny",
        "category": "Data",
        "explanation": "Blocked by default.",
        "id": "uses-data-tool-data-exfiltrate",
        "label": "Uses Data tool: data.exfiltrate",
        "risk": "medium",
        "tool": "data.exfiltrate"
      },
      {
        "action": "allow",
        "category": "Debug",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-debug-tool-debug-report",
        "label": "Uses Debug tool: debug.report",
        "risk": "medium",
        "tool": "debug.report"
      },
      {
        "action": "allow",
        "category": "Dependency",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-dependency-tool-dependency-audit",
        "label": "Uses Dependency tool: dependency.audit",
        "risk": "medium",
        "tool": "dependency.audit"
      },
      {
        "action": "deny",
        "category": "Destructive",
        "explanation": "Blocked by default.",
        "id": "uses-destructive-tool-destructive-replay-autonomous",
        "label": "Uses Destructive tool: destructive.replay.autonomous",
        "risk": "medium",
        "tool": "destructive.replay.autonomous"
      },
      {
        "action": "ask",
        "category": "Document",
        "explanation": "Requires human approval before execution.",
        "id": "uses-document-tool-document-export",
        "label": "Uses Document tool: document.export",
        "risk": "medium",
        "tool": "document.export"
      },
      {
        "action": "allow",
        "category": "Document",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-document-tool-document-read",
        "label": "Uses Document tool: document.read",
        "risk": "medium",
        "tool": "document.read"
      },
      {
        "action": "allow",
        "category": "Document",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-document-tool-document-search",
        "label": "Uses Document tool: document.search",
        "risk": "medium",
        "tool": "document.search"
      },
      {
        "action": "ask",
        "category": "Document",
        "explanation": "Requires human approval before execution.",
        "id": "uses-document-tool-document-write",
        "label": "Uses Document tool: document.write",
        "risk": "medium",
        "tool": "document.write"
      },
      {
        "action": "deny",
        "category": "Email",
        "explanation": "Blocked by default.",
        "id": "can-delete-email",
        "label": "Can delete email",
        "risk": "critical",
        "tool": "email.delete.autonomous"
      },
      {
        "action": "deny",
        "category": "Emergency",
        "explanation": "Blocked by default.",
        "id": "uses-emergency-tool-emergency-ignore",
        "label": "Uses Emergency tool: emergency.ignore",
        "risk": "medium",
        "tool": "emergency.ignore"
      },
      {
        "action": "allow",
        "category": "Evidence",
        "explanation": "Allowed within the mission and recorded.",
        "id": "records-evidence",
        "label": "Records evidence",
        "risk": "low",
        "tool": "evidence.write"
      },
      {
        "action": "allow",
        "category": "Evidence",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-evidence-tool-evidence-read",
        "label": "Uses Evidence tool: evidence.read",
        "risk": "medium",
        "tool": "evidence.read"
      },
      {
        "action": "ask",
        "category": "Feature Flag",
        "explanation": "Requires human approval before execution.",
        "id": "uses-feature-flag-tool-feature-flag-update",
        "label": "Uses Feature Flag tool: feature_flag.update",
        "risk": "medium",
        "tool": "feature_flag.update"
      },
      {
        "action": "allow",
        "category": "File",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-file-tool-file-read",
        "label": "Uses File tool: file.read",
        "risk": "medium",
        "tool": "file.read"
      },
      {
        "action": "deny",
        "category": "Financial",
        "explanation": "Blocked by default.",
        "id": "uses-financial-tool-financial-advice-personalized",
        "label": "Uses Financial tool: financial.advice.personalized",
        "risk": "medium",
        "tool": "financial.advice.personalized"
      },
      {
        "action": "allow",
        "category": "Framework",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-framework-tool-framework-map",
        "label": "Uses Framework tool: framework.map",
        "risk": "medium",
        "tool": "framework.map"
      },
      {
        "action": "deny",
        "category": "Guardrail",
        "explanation": "Blocked by default.",
        "id": "uses-guardrail-tool-guardrail-disable",
        "label": "Uses Guardrail tool: guardrail.disable",
        "risk": "medium",
        "tool": "guardrail.disable"
      },
      {
        "action": "allow",
        "category": "Health",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-health-tool-health-monitor",
        "label": "Uses Health tool: health.monitor",
        "risk": "medium",
        "tool": "health.monitor"
      },
      {
        "action": "deny",
        "category": "Hidden",
        "explanation": "Blocked by default.",
        "id": "uses-hidden-tool-hidden-recording",
        "label": "Uses Hidden tool: hidden.recording",
        "risk": "medium",
        "tool": "hidden.recording"
      },
      {
        "action": "ask",
        "category": "Http",
        "explanation": "Requires human approval before execution.",
        "id": "uses-http-tool-http-request",
        "label": "Uses Http tool: http.request",
        "risk": "medium",
        "tool": "http.request"
      },
      {
        "action": "deny",
        "category": "Identity",
        "explanation": "Blocked by default.",
        "id": "uses-identity-tool-identity-modify",
        "label": "Uses Identity tool: identity.modify",
        "risk": "medium",
        "tool": "identity.modify"
      },
      {
        "action": "ask",
        "category": "Infrastructure",
        "explanation": "Requires human approval before execution.",
        "id": "can-deploy-software",
        "label": "Can deploy software",
        "risk": "critical",
        "tool": "shell.deploy"
      },
      {
        "action": "deny",
        "category": "Infrastructure",
        "explanation": "Blocked by default.",
        "id": "can-run-destructive-shell-actions",
        "label": "Can run destructive shell actions",
        "risk": "critical",
        "tool": "shell.destructive"
      },
      {
        "action": "allow",
        "category": "Job",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-job-tool-job-read",
        "label": "Uses Job tool: job.read",
        "risk": "medium",
        "tool": "job.read"
      },
      {
        "action": "ask",
        "category": "Job",
        "explanation": "Requires human approval before execution.",
        "id": "uses-job-tool-job-run",
        "label": "Uses Job tool: job.run",
        "risk": "medium",
        "tool": "job.run"
      },
      {
        "action": "allow",
        "category": "Knowledge",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-knowledge-tool-knowledge-search",
        "label": "Uses Knowledge tool: knowledge.search",
        "risk": "medium",
        "tool": "knowledge.search"
      },
      {
        "action": "deny",
        "category": "Legal",
        "explanation": "Blocked by default.",
        "id": "uses-legal-tool-legal-advice-personalized",
        "label": "Uses Legal tool: legal.advice.personalized",
        "risk": "medium",
        "tool": "legal.advice.personalized"
      },
      {
        "action": "ask",
        "category": "License",
        "explanation": "Requires human approval before execution.",
        "id": "uses-license-tool-license-assign",
        "label": "Uses License tool: license.assign",
        "risk": "medium",
        "tool": "license.assign"
      },
      {
        "action": "deny",
        "category": "License",
        "explanation": "Blocked by default.",
        "id": "uses-license-tool-license-bypass",
        "label": "Uses License tool: license.bypass",
        "risk": "medium",
        "tool": "license.bypass"
      },
      {
        "action": "allow",
        "category": "License",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-license-tool-license-preview",
        "label": "Uses License tool: license.preview",
        "risk": "medium",
        "tool": "license.preview"
      },
      {
        "action": "allow",
        "category": "Listing",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-listing-tool-listing-draft",
        "label": "Uses Listing tool: listing.draft",
        "risk": "medium",
        "tool": "listing.draft"
      },
      {
        "action": "ask",
        "category": "Llm",
        "explanation": "Requires human approval before execution.",
        "id": "uses-llm-tool-llm-prompt-send",
        "label": "Uses Llm tool: llm.prompt.send",
        "risk": "medium",
        "tool": "llm.prompt.send"
      },
      {
        "action": "allow",
        "category": "Log",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-log-tool-log-write",
        "label": "Uses Log tool: log.write",
        "risk": "medium",
        "tool": "log.write"
      },
      {
        "action": "deny",
        "category": "Malicious",
        "explanation": "Blocked by default.",
        "id": "uses-malicious-tool-malicious-agent-publish",
        "label": "Uses Malicious tool: malicious.agent.publish",
        "risk": "medium",
        "tool": "malicious.agent.publish"
      },
      {
        "action": "allow",
        "category": "Manifest",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-manifest-tool-manifest-validate",
        "label": "Uses Manifest tool: manifest.validate",
        "risk": "medium",
        "tool": "manifest.validate"
      },
      {
        "action": "ask",
        "category": "Marketplace",
        "explanation": "Requires human approval before execution.",
        "id": "can-issue-licenses",
        "label": "Can issue licenses",
        "risk": "high",
        "tool": "license.issue"
      },
      {
        "action": "ask",
        "category": "Marketplace",
        "explanation": "Requires human approval before execution.",
        "id": "can-prepare-creator-payouts",
        "label": "Can prepare creator payouts",
        "risk": "critical",
        "tool": "creator.payout"
      },
      {
        "action": "ask",
        "category": "Marketplace",
        "explanation": "Requires human approval before execution.",
        "id": "can-publish-marketplace-listings",
        "label": "Can publish marketplace listings",
        "risk": "high",
        "tool": "listing.publish"
      },
      {
        "action": "ask",
        "category": "Marketplace",
        "explanation": "Requires human approval before execution.",
        "id": "can-set-marketplace-prices",
        "label": "Can set marketplace prices",
        "risk": "high",
        "tool": "price.set"
      },
      {
        "action": "ask",
        "category": "Mcp",
        "explanation": "Requires human approval before execution.",
        "id": "uses-mcp-tool-mcp-tool-call",
        "label": "Uses Mcp tool: mcp.tool.call",
        "risk": "medium",
        "tool": "mcp.tool.call"
      },
      {
        "action": "deny",
        "category": "Medical",
        "explanation": "Blocked by default.",
        "id": "uses-medical-tool-medical-advice",
        "label": "Uses Medical tool: medical.advice",
        "risk": "medium",
        "tool": "medical.advice"
      },
      {
        "action": "deny",
        "category": "Message",
        "explanation": "Blocked by default.",
        "id": "uses-message-tool-message-send-without-review",
        "label": "Uses Message tool: message.send.without_review",
        "risk": "medium",
        "tool": "message.send.without_review"
      },
      {
        "action": "deny",
        "category": "Messaging",
        "explanation": "Blocked by default.",
        "id": "can-delete-messages",
        "label": "Can delete messages",
        "risk": "critical",
        "tool": "message.delete.autonomous"
      },
      {
        "action": "ask",
        "category": "Migration",
        "explanation": "Requires human approval before execution.",
        "id": "uses-migration-tool-migration-run",
        "label": "Uses Migration tool: migration.run",
        "risk": "medium",
        "tool": "migration.run"
      },
      {
        "action": "deny",
        "category": "Minor",
        "explanation": "Blocked by default.",
        "id": "uses-minor-tool-minor-contact-unsupervised",
        "label": "Uses Minor tool: minor.contact.unsupervised",
        "risk": "medium",
        "tool": "minor.contact.unsupervised"
      },
      {
        "action": "ask",
        "category": "Model",
        "explanation": "Requires human approval before execution.",
        "id": "uses-model-tool-model-route",
        "label": "Uses Model tool: model.route",
        "risk": "medium",
        "tool": "model.route"
      },
      {
        "action": "deny",
        "category": "Network",
        "explanation": "Blocked by default.",
        "id": "uses-network-tool-network-exfiltrate",
        "label": "Uses Network tool: network.exfiltrate",
        "risk": "medium",
        "tool": "network.exfiltrate"
      },
      {
        "action": "deny",
        "category": "Optout",
        "explanation": "Blocked by default.",
        "id": "uses-optout-tool-optout-ignore",
        "label": "Uses Optout tool: optout.ignore",
        "risk": "medium",
        "tool": "optout.ignore"
      },
      {
        "action": "ask",
        "category": "Order",
        "explanation": "Requires human approval before execution.",
        "id": "uses-order-tool-order-update",
        "label": "Uses Order tool: order.update",
        "risk": "medium",
        "tool": "order.update"
      },
      {
        "action": "ask",
        "category": "Package",
        "explanation": "Requires human approval before execution.",
        "id": "uses-package-tool-package-install",
        "label": "Uses Package tool: package.install",
        "risk": "medium",
        "tool": "package.install"
      },
      {
        "action": "deny",
        "category": "Password",
        "explanation": "Blocked by default.",
        "id": "uses-password-tool-password-store",
        "label": "Uses Password tool: password.store",
        "risk": "medium",
        "tool": "password.store"
      },
      {
        "action": "deny",
        "category": "Payout",
        "explanation": "Blocked by default.",
        "id": "uses-payout-tool-payout-autonomous",
        "label": "Uses Payout tool: payout.autonomous",
        "risk": "medium",
        "tool": "payout.autonomous"
      },
      {
        "action": "allow",
        "category": "Payout",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-payout-tool-payout-preview",
        "label": "Uses Payout tool: payout.preview",
        "risk": "medium",
        "tool": "payout.preview"
      },
      {
        "action": "deny",
        "category": "Persistence",
        "explanation": "Blocked by default.",
        "id": "uses-persistence-tool-persistence-create",
        "label": "Uses Persistence tool: persistence.create",
        "risk": "medium",
        "tool": "persistence.create"
      },
      {
        "action": "deny",
        "category": "Platform",
        "explanation": "Blocked by default.",
        "id": "uses-platform-tool-platform-evasion",
        "label": "Uses Platform tool: platform.evasion",
        "risk": "medium",
        "tool": "platform.evasion"
      },
      {
        "action": "allow",
        "category": "Policy",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-policy-tool-policy-evaluate",
        "label": "Uses Policy tool: policy.evaluate",
        "risk": "medium",
        "tool": "policy.evaluate"
      },
      {
        "action": "allow",
        "category": "Policy",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-policy-tool-policy-lint",
        "label": "Uses Policy tool: policy.lint",
        "risk": "medium",
        "tool": "policy.lint"
      },
      {
        "action": "ask",
        "category": "Policy",
        "explanation": "Requires human approval before execution.",
        "id": "uses-policy-tool-policy-publish",
        "label": "Uses Policy tool: policy.publish",
        "risk": "medium",
        "tool": "policy.publish"
      },
      {
        "action": "deny",
        "category": "Prescription",
        "explanation": "Blocked by default.",
        "id": "uses-prescription-tool-prescription-send-autonomous",
        "label": "Uses Prescription tool: prescription.send.autonomous",
        "risk": "medium",
        "tool": "prescription.send.autonomous"
      },
      {
        "action": "allow",
        "category": "Pricing",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-pricing-tool-pricing-draft",
        "label": "Uses Pricing tool: pricing.draft",
        "risk": "medium",
        "tool": "pricing.draft"
      },
      {
        "action": "deny",
        "category": "Privacy",
        "explanation": "Blocked by default.",
        "id": "uses-privacy-tool-privacy-exfiltrate",
        "label": "Uses Privacy tool: privacy.exfiltrate",
        "risk": "medium",
        "tool": "privacy.exfiltrate"
      },
      {
        "action": "ask",
        "category": "Refund",
        "explanation": "Requires human approval before execution.",
        "id": "uses-refund-tool-refund-request",
        "label": "Uses Refund tool: refund.request",
        "risk": "medium",
        "tool": "refund.request"
      },
      {
        "action": "allow",
        "category": "Release",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-release-tool-release-plan",
        "label": "Uses Release tool: release.plan",
        "risk": "medium",
        "tool": "release.plan"
      },
      {
        "action": "allow",
        "category": "Replay",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-replay-tool-replay-verify",
        "label": "Uses Replay tool: replay.verify",
        "risk": "medium",
        "tool": "replay.verify"
      },
      {
        "action": "allow",
        "category": "Report",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-report-tool-report-write",
        "label": "Uses Report tool: report.write",
        "risk": "medium",
        "tool": "report.write"
      },
      {
        "action": "allow",
        "category": "Repository",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-repository-tool-repository-diff",
        "label": "Uses Repository tool: repository.diff",
        "risk": "medium",
        "tool": "repository.diff"
      },
      {
        "action": "ask",
        "category": "Repository",
        "explanation": "Requires human approval before execution.",
        "id": "uses-repository-tool-repository-push",
        "label": "Uses Repository tool: repository.push",
        "risk": "medium",
        "tool": "repository.push"
      },
      {
        "action": "deny",
        "category": "Review",
        "explanation": "Blocked by default.",
        "id": "uses-review-tool-review-fake",
        "label": "Uses Review tool: review.fake",
        "risk": "medium",
        "tool": "review.fake"
      },
      {
        "action": "ask",
        "category": "Rollback",
        "explanation": "Requires human approval before execution.",
        "id": "uses-rollback-tool-rollback-execute",
        "label": "Uses Rollback tool: rollback.execute",
        "risk": "medium",
        "tool": "rollback.execute"
      },
      {
        "action": "allow",
        "category": "Rules",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-rules-tool-rules-evaluate",
        "label": "Uses Rules tool: rules.evaluate",
        "risk": "medium",
        "tool": "rules.evaluate"
      },
      {
        "action": "deny",
        "category": "Secret",
        "explanation": "Blocked by default.",
        "id": "uses-secret-tool-secret-read",
        "label": "Uses Secret tool: secret.read",
        "risk": "medium",
        "tool": "secret.read"
      },
      {
        "action": "deny",
        "category": "Secrets",
        "explanation": "Blocked by default.",
        "id": "can-read-secrets",
        "label": "Can read secrets",
        "risk": "critical",
        "tool": "secrets.read"
      },
      {
        "action": "ask",
        "category": "Security",
        "explanation": "Requires human approval before execution.",
        "id": "uses-security-tool-security-review",
        "label": "Uses Security tool: security.review",
        "risk": "medium",
        "tool": "security.review"
      },
      {
        "action": "ask",
        "category": "Shell",
        "explanation": "Requires human approval before execution.",
        "id": "uses-shell-tool-shell-install",
        "label": "Uses Shell tool: shell.install",
        "risk": "medium",
        "tool": "shell.install"
      },
      {
        "action": "ask",
        "category": "Shell",
        "explanation": "Requires human approval before execution.",
        "id": "uses-shell-tool-shell-network",
        "label": "Uses Shell tool: shell.network",
        "risk": "medium",
        "tool": "shell.network"
      },
      {
        "action": "allow",
        "category": "Shell",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-shell-tool-shell-search",
        "label": "Uses Shell tool: shell.search",
        "risk": "medium",
        "tool": "shell.search"
      },
      {
        "action": "deny",
        "category": "Shell",
        "explanation": "Blocked by default.",
        "id": "uses-shell-tool-shell-secret",
        "label": "Uses Shell tool: shell.secret",
        "risk": "medium",
        "tool": "shell.secret"
      },
      {
        "action": "allow",
        "category": "Shell",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-shell-tool-shell-test",
        "label": "Uses Shell tool: shell.test",
        "risk": "medium",
        "tool": "shell.test"
      },
      {
        "action": "deny",
        "category": "Spam",
        "explanation": "Blocked by default.",
        "id": "uses-spam-tool-spam-broadcast",
        "label": "Uses Spam tool: spam.broadcast",
        "risk": "medium",
        "tool": "spam.broadcast"
      },
      {
        "action": "deny",
        "category": "Submit",
        "explanation": "Blocked by default.",
        "id": "uses-submit-tool-submit-without-review",
        "label": "Uses Submit tool: submit.without_review",
        "risk": "medium",
        "tool": "submit.without_review"
      },
      {
        "action": "allow",
        "category": "Template",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-template-tool-template-clone",
        "label": "Uses Template tool: template.clone",
        "risk": "medium",
        "tool": "template.clone"
      },
      {
        "action": "ask",
        "category": "Template",
        "explanation": "Requires human approval before execution.",
        "id": "uses-template-tool-template-install",
        "label": "Uses Template tool: template.install",
        "risk": "medium",
        "tool": "template.install"
      },
      {
        "action": "allow",
        "category": "Template",
        "explanation": "Allowed within the mission and recorded.",
        "id": "uses-template-tool-template-read",
        "label": "Uses Template tool: template.read",
        "risk": "medium",
        "tool": "template.read"
      },
      {
        "action": "deny",
        "category": "Trusted Sender",
        "explanation": "Blocked by default.",
        "id": "uses-trusted-sender-tool-trusted-sender-impersonate",
        "label": "Uses Trusted Sender tool: trusted_sender.impersonate",
        "risk": "medium",
        "tool": "trusted_sender.impersonate"
      },
      {
        "action": "ask",
        "category": "Version",
        "explanation": "Requires human approval before execution.",
        "id": "uses-version-tool-version-release",
        "label": "Uses Version tool: version.release",
        "risk": "medium",
        "tool": "version.release"
      },
      {
        "action": "deny",
        "category": "Wiretap",
        "explanation": "Blocked by default.",
        "id": "uses-wiretap-tool-wiretap-hidden",
        "label": "Uses Wiretap tool: wiretap.hidden",
        "risk": "medium",
        "tool": "wiretap.hidden"
      },
      {
        "action": "ask",
        "category": "Workflow",
        "explanation": "Requires human approval before execution.",
        "id": "can-update-service-tickets",
        "label": "Can update service tickets",
        "risk": "high",
        "tool": "ticket.update"
      }
    ],
    "preflight": {
      "checks": [
        {
          "id": "pf-secret-access",
          "passed": true,
          "remediation": "shell.secret must be denied.",
          "title": "Secret reads are denied"
        },
        {
          "id": "pf-destructive",
          "passed": true,
          "remediation": "shell.destructive must be denied.",
          "title": "Destructive shell actions are denied"
        },
        {
          "id": "pf-network",
          "passed": true,
          "remediation": "shell.network should be ask or deny.",
          "title": "External network access is gated"
        },
        {
          "id": "pf-package-install",
          "passed": true,
          "remediation": "shell.install should require approval.",
          "title": "Package installs are reviewed"
        },
        {
          "id": "pf-human-approval",
          "passed": true,
          "remediation": "Set an approval manager.",
          "title": "Human approval is configured"
        },
        {
          "id": "pf-local-first",
          "passed": true,
          "remediation": "Set an evidence path.",
          "title": "Local-first evidence path exists in bundle config"
        },
        {
          "id": "pf-skills",
          "passed": true,
          "remediation": "Assign skills to define what the agent can do.",
          "title": "At least one skill is assigned"
        },
        {
          "id": "pf-abilities",
          "passed": true,
          "remediation": "Assign abilities to define allowed execution surfaces.",
          "title": "At least one ability is assigned"
        },
        {
          "id": "pf-integrations",
          "passed": true,
          "remediation": "Select integrations such as CRM, database, voice, messaging, or documents.",
          "title": "At least one integration family is selected"
        },
        {
          "id": "pf-channels",
          "passed": true,
          "remediation": "Select channels such as web chat, API worker, voice, SMS, or email.",
          "title": "At least one channel is selected"
        },
        {
          "id": "pf-sdk",
          "passed": true,
          "remediation": "Select Python, TypeScript, MCP, or framework adapters.",
          "title": "At least one SDK target is selected"
        },
        {
          "id": "pf-flow-graph",
          "passed": true,
          "remediation": "Add at least two connected flow nodes.",
          "title": "Visual flow graph is exportable"
        },
        {
          "id": "pf-runtime",
          "passed": true,
          "remediation": "Choose headed, headless, embedded, API, MCP, webhook, or edge runtime.",
          "title": "Runtime mode is selected"
        },
        {
          "id": "pf-llm-mode",
          "passed": true,
          "remediation": "Choose public, local, hybrid, small-model, rules-only, or no-LLM mode.",
          "title": "LLM mode is explicit"
        },
        {
          "id": "pf-enforcement",
          "passed": true,
          "remediation": "Enable AgentGuard enforcement and action recording.",
          "title": "AgentGuard records and decides every action"
        },
        {
          "id": "pf-agent-flow-ir",
          "passed": true,
          "remediation": "Fix the portable AgentFlow schema before export.",
          "title": "Universal AgentFlow IR validates"
        },
        {
          "id": "pf-roe",
          "passed": true,
          "remediation": "Complete target scope, authorization, test window, and rate limit.",
          "title": "Rules of engagement are complete"
        }
      ],
      "passed": true,
      "score": 100,
      "summary": "17/17 checks passed",
      "validation": {
        "issues": [],
        "passed": true,
        "warnings": []
      }
    },
    "sha256": "473be2466a5d6cb120480bc1dabbea8a74368b63c4a3151fe1f6ef093b8ce22a",
    "template_id": "agent-marketplace-agent"
  }
}