{
  "checks": [
    {
      "detail": "Generated manifest is available from template metadata.",
      "id": "manifest",
      "passed": true
    },
    {
      "detail": "Policy tools are defined.",
      "id": "policy",
      "passed": true
    },
    {
      "detail": "Permission labels are generated from policy.",
      "id": "permission_labels",
      "passed": true
    },
    {
      "detail": "Fake-data simulator has events.",
      "id": "simulator",
      "passed": true
    },
    {
      "detail": "Factory preflight passes.",
      "id": "preflight",
      "passed": true
    },
    {
      "detail": "Dangerous baseline tools are denied.",
      "id": "guardrails",
      "passed": true
    },
    {
      "detail": "Replay cassette hash is present.",
      "id": "replay",
      "passed": true
    },
    {
      "detail": "Marketplace support terms can be attached at listing time.",
      "id": "support",
      "passed": true
    }
  ],
  "name": "agent-marketplace-agent simulator",
  "permission_labels": [
    {
      "action": "allow",
      "category": "AI",
      "explanation": "Allowed within the mission and recorded.",
      "id": "can-use-local-llm",
      "label": "Can use local LLM",
      "risk": "low",
      "tool": "llm.local.call"
    },
    {
      "action": "ask",
      "category": "AI",
      "explanation": "Requires human approval before execution.",
      "id": "may-use-public-llm",
      "label": "May use public LLM",
      "risk": "medium",
      "tool": "llm.public.call"
    },
    {
      "action": "ask",
      "category": "Accounting",
      "explanation": "Requires human approval before execution.",
      "id": "uses-accounting-tool-accounting-update",
      "label": "Uses Accounting tool: accounting.update",
      "risk": "medium",
      "tool": "accounting.update"
    },
    {
      "action": "ask",
      "category": "Agent",
      "explanation": "Requires human approval before execution.",
      "id": "uses-agent-tool-agent-deploy",
      "label": "Uses Agent tool: agent.deploy",
      "risk": "medium",
      "tool": "agent.deploy"
    },
    {
      "action": "allow",
      "category": "Agent",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-agent-tool-agent-inventory",
      "label": "Uses Agent tool: agent.inventory",
      "risk": "medium",
      "tool": "agent.inventory"
    },
    {
      "action": "allow",
      "category": "Api",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-api-tool-api-receive",
      "label": "Uses Api tool: api.receive",
      "risk": "medium",
      "tool": "api.receive"
    },
    {
      "action": "ask",
      "category": "Api",
      "explanation": "Requires human approval before execution.",
      "id": "uses-api-tool-api-respond",
      "label": "Uses Api tool: api.respond",
      "risk": "medium",
      "tool": "api.respond"
    },
    {
      "action": "ask",
      "category": "Approval",
      "explanation": "Requires human approval before execution.",
      "id": "uses-approval-tool-approval-request",
      "label": "Uses Approval tool: approval.request",
      "risk": "medium",
      "tool": "approval.request"
    },
    {
      "action": "ask",
      "category": "Ats",
      "explanation": "Requires human approval before execution.",
      "id": "uses-ats-tool-ats-update",
      "label": "Uses Ats tool: ats.update",
      "risk": "medium",
      "tool": "ats.update"
    },
    {
      "action": "deny",
      "category": "Bank",
      "explanation": "Blocked by default.",
      "id": "uses-bank-tool-bank-transfer",
      "label": "Uses Bank tool: bank.transfer",
      "risk": "medium",
      "tool": "bank.transfer"
    },
    {
      "action": "deny",
      "category": "Benefits",
      "explanation": "Blocked by default.",
      "id": "uses-benefits-tool-benefits-guarantee",
      "label": "Uses Benefits tool: benefits.guarantee",
      "risk": "medium",
      "tool": "benefits.guarantee"
    },
    {
      "action": "deny",
      "category": "Calendar",
      "explanation": "Blocked by default.",
      "id": "uses-calendar-tool-calendar-delete-autonomous",
      "label": "Uses Calendar tool: calendar.delete.autonomous",
      "risk": "medium",
      "tool": "calendar.delete.autonomous"
    },
    {
      "action": "deny",
      "category": "Clinical",
      "explanation": "Blocked by default.",
      "id": "uses-clinical-tool-clinical-signoff-autonomous",
      "label": "Uses Clinical tool: clinical.signoff.autonomous",
      "risk": "medium",
      "tool": "clinical.signoff.autonomous"
    },
    {
      "action": "deny",
      "category": "Confidential",
      "explanation": "Blocked by default.",
      "id": "uses-confidential-tool-confidential-share-unapproved",
      "label": "Uses Confidential tool: confidential.share.unapproved",
      "risk": "medium",
      "tool": "confidential.share.unapproved"
    },
    {
      "action": "ask",
      "category": "Connector",
      "explanation": "Requires human approval before execution.",
      "id": "uses-connector-tool-connector-enable",
      "label": "Uses Connector tool: connector.enable",
      "risk": "medium",
      "tool": "connector.enable"
    },
    {
      "action": "deny",
      "category": "Contact",
      "explanation": "Blocked by default.",
      "id": "uses-contact-tool-contact-without-consent",
      "label": "Uses Contact tool: contact.without_consent",
      "risk": "medium",
      "tool": "contact.without_consent"
    },
    {
      "action": "deny",
      "category": "Content",
      "explanation": "Blocked by default.",
      "id": "uses-content-tool-content-exfiltrate",
      "label": "Uses Content tool: content.exfiltrate",
      "risk": "medium",
      "tool": "content.exfiltrate"
    },
    {
      "action": "deny",
      "category": "Credential",
      "explanation": "Blocked by default.",
      "id": "uses-credential-tool-credential-attack",
      "label": "Uses Credential tool: credential.attack",
      "risk": "medium",
      "tool": "credential.attack"
    },
    {
      "action": "deny",
      "category": "Credential",
      "explanation": "Blocked by default.",
      "id": "uses-credential-tool-credential-capture",
      "label": "Uses Credential tool: credential.capture",
      "risk": "medium",
      "tool": "credential.capture"
    },
    {
      "action": "ask",
      "category": "Customer data",
      "explanation": "Requires human approval before execution.",
      "id": "can-update-crm-customer-records",
      "label": "Can update CRM/customer records",
      "risk": "high",
      "tool": "crm.update"
    },
    {
      "action": "deny",
      "category": "Data",
      "explanation": "Blocked by default.",
      "id": "uses-data-tool-data-exfiltrate",
      "label": "Uses Data tool: data.exfiltrate",
      "risk": "medium",
      "tool": "data.exfiltrate"
    },
    {
      "action": "allow",
      "category": "Debug",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-debug-tool-debug-report",
      "label": "Uses Debug tool: debug.report",
      "risk": "medium",
      "tool": "debug.report"
    },
    {
      "action": "allow",
      "category": "Dependency",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-dependency-tool-dependency-audit",
      "label": "Uses Dependency tool: dependency.audit",
      "risk": "medium",
      "tool": "dependency.audit"
    },
    {
      "action": "deny",
      "category": "Destructive",
      "explanation": "Blocked by default.",
      "id": "uses-destructive-tool-destructive-replay-autonomous",
      "label": "Uses Destructive tool: destructive.replay.autonomous",
      "risk": "medium",
      "tool": "destructive.replay.autonomous"
    },
    {
      "action": "ask",
      "category": "Document",
      "explanation": "Requires human approval before execution.",
      "id": "uses-document-tool-document-export",
      "label": "Uses Document tool: document.export",
      "risk": "medium",
      "tool": "document.export"
    },
    {
      "action": "allow",
      "category": "Document",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-document-tool-document-read",
      "label": "Uses Document tool: document.read",
      "risk": "medium",
      "tool": "document.read"
    },
    {
      "action": "allow",
      "category": "Document",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-document-tool-document-search",
      "label": "Uses Document tool: document.search",
      "risk": "medium",
      "tool": "document.search"
    },
    {
      "action": "ask",
      "category": "Document",
      "explanation": "Requires human approval before execution.",
      "id": "uses-document-tool-document-write",
      "label": "Uses Document tool: document.write",
      "risk": "medium",
      "tool": "document.write"
    },
    {
      "action": "deny",
      "category": "Email",
      "explanation": "Blocked by default.",
      "id": "can-delete-email",
      "label": "Can delete email",
      "risk": "critical",
      "tool": "email.delete.autonomous"
    },
    {
      "action": "deny",
      "category": "Emergency",
      "explanation": "Blocked by default.",
      "id": "uses-emergency-tool-emergency-ignore",
      "label": "Uses Emergency tool: emergency.ignore",
      "risk": "medium",
      "tool": "emergency.ignore"
    },
    {
      "action": "allow",
      "category": "Evidence",
      "explanation": "Allowed within the mission and recorded.",
      "id": "records-evidence",
      "label": "Records evidence",
      "risk": "low",
      "tool": "evidence.write"
    },
    {
      "action": "allow",
      "category": "Evidence",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-evidence-tool-evidence-read",
      "label": "Uses Evidence tool: evidence.read",
      "risk": "medium",
      "tool": "evidence.read"
    },
    {
      "action": "ask",
      "category": "Feature Flag",
      "explanation": "Requires human approval before execution.",
      "id": "uses-feature-flag-tool-feature-flag-update",
      "label": "Uses Feature Flag tool: feature_flag.update",
      "risk": "medium",
      "tool": "feature_flag.update"
    },
    {
      "action": "allow",
      "category": "File",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-file-tool-file-read",
      "label": "Uses File tool: file.read",
      "risk": "medium",
      "tool": "file.read"
    },
    {
      "action": "deny",
      "category": "Financial",
      "explanation": "Blocked by default.",
      "id": "uses-financial-tool-financial-advice-personalized",
      "label": "Uses Financial tool: financial.advice.personalized",
      "risk": "medium",
      "tool": "financial.advice.personalized"
    },
    {
      "action": "allow",
      "category": "Framework",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-framework-tool-framework-map",
      "label": "Uses Framework tool: framework.map",
      "risk": "medium",
      "tool": "framework.map"
    },
    {
      "action": "deny",
      "category": "Guardrail",
      "explanation": "Blocked by default.",
      "id": "uses-guardrail-tool-guardrail-disable",
      "label": "Uses Guardrail tool: guardrail.disable",
      "risk": "medium",
      "tool": "guardrail.disable"
    },
    {
      "action": "allow",
      "category": "Health",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-health-tool-health-monitor",
      "label": "Uses Health tool: health.monitor",
      "risk": "medium",
      "tool": "health.monitor"
    },
    {
      "action": "deny",
      "category": "Hidden",
      "explanation": "Blocked by default.",
      "id": "uses-hidden-tool-hidden-recording",
      "label": "Uses Hidden tool: hidden.recording",
      "risk": "medium",
      "tool": "hidden.recording"
    },
    {
      "action": "ask",
      "category": "Http",
      "explanation": "Requires human approval before execution.",
      "id": "uses-http-tool-http-request",
      "label": "Uses Http tool: http.request",
      "risk": "medium",
      "tool": "http.request"
    },
    {
      "action": "deny",
      "category": "Identity",
      "explanation": "Blocked by default.",
      "id": "uses-identity-tool-identity-modify",
      "label": "Uses Identity tool: identity.modify",
      "risk": "medium",
      "tool": "identity.modify"
    },
    {
      "action": "ask",
      "category": "Infrastructure",
      "explanation": "Requires human approval before execution.",
      "id": "can-deploy-software",
      "label": "Can deploy software",
      "risk": "critical",
      "tool": "shell.deploy"
    },
    {
      "action": "deny",
      "category": "Infrastructure",
      "explanation": "Blocked by default.",
      "id": "can-run-destructive-shell-actions",
      "label": "Can run destructive shell actions",
      "risk": "critical",
      "tool": "shell.destructive"
    },
    {
      "action": "allow",
      "category": "Job",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-job-tool-job-read",
      "label": "Uses Job tool: job.read",
      "risk": "medium",
      "tool": "job.read"
    },
    {
      "action": "ask",
      "category": "Job",
      "explanation": "Requires human approval before execution.",
      "id": "uses-job-tool-job-run",
      "label": "Uses Job tool: job.run",
      "risk": "medium",
      "tool": "job.run"
    },
    {
      "action": "allow",
      "category": "Knowledge",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-knowledge-tool-knowledge-search",
      "label": "Uses Knowledge tool: knowledge.search",
      "risk": "medium",
      "tool": "knowledge.search"
    },
    {
      "action": "deny",
      "category": "Legal",
      "explanation": "Blocked by default.",
      "id": "uses-legal-tool-legal-advice-personalized",
      "label": "Uses Legal tool: legal.advice.personalized",
      "risk": "medium",
      "tool": "legal.advice.personalized"
    },
    {
      "action": "ask",
      "category": "License",
      "explanation": "Requires human approval before execution.",
      "id": "uses-license-tool-license-assign",
      "label": "Uses License tool: license.assign",
      "risk": "medium",
      "tool": "license.assign"
    },
    {
      "action": "deny",
      "category": "License",
      "explanation": "Blocked by default.",
      "id": "uses-license-tool-license-bypass",
      "label": "Uses License tool: license.bypass",
      "risk": "medium",
      "tool": "license.bypass"
    },
    {
      "action": "allow",
      "category": "License",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-license-tool-license-preview",
      "label": "Uses License tool: license.preview",
      "risk": "medium",
      "tool": "license.preview"
    },
    {
      "action": "allow",
      "category": "Listing",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-listing-tool-listing-draft",
      "label": "Uses Listing tool: listing.draft",
      "risk": "medium",
      "tool": "listing.draft"
    },
    {
      "action": "ask",
      "category": "Llm",
      "explanation": "Requires human approval before execution.",
      "id": "uses-llm-tool-llm-prompt-send",
      "label": "Uses Llm tool: llm.prompt.send",
      "risk": "medium",
      "tool": "llm.prompt.send"
    },
    {
      "action": "allow",
      "category": "Log",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-log-tool-log-write",
      "label": "Uses Log tool: log.write",
      "risk": "medium",
      "tool": "log.write"
    },
    {
      "action": "deny",
      "category": "Malicious",
      "explanation": "Blocked by default.",
      "id": "uses-malicious-tool-malicious-agent-publish",
      "label": "Uses Malicious tool: malicious.agent.publish",
      "risk": "medium",
      "tool": "malicious.agent.publish"
    },
    {
      "action": "allow",
      "category": "Manifest",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-manifest-tool-manifest-validate",
      "label": "Uses Manifest tool: manifest.validate",
      "risk": "medium",
      "tool": "manifest.validate"
    },
    {
      "action": "ask",
      "category": "Marketplace",
      "explanation": "Requires human approval before execution.",
      "id": "can-issue-licenses",
      "label": "Can issue licenses",
      "risk": "high",
      "tool": "license.issue"
    },
    {
      "action": "ask",
      "category": "Marketplace",
      "explanation": "Requires human approval before execution.",
      "id": "can-prepare-creator-payouts",
      "label": "Can prepare creator payouts",
      "risk": "critical",
      "tool": "creator.payout"
    },
    {
      "action": "ask",
      "category": "Marketplace",
      "explanation": "Requires human approval before execution.",
      "id": "can-publish-marketplace-listings",
      "label": "Can publish marketplace listings",
      "risk": "high",
      "tool": "listing.publish"
    },
    {
      "action": "ask",
      "category": "Marketplace",
      "explanation": "Requires human approval before execution.",
      "id": "can-set-marketplace-prices",
      "label": "Can set marketplace prices",
      "risk": "high",
      "tool": "price.set"
    },
    {
      "action": "ask",
      "category": "Mcp",
      "explanation": "Requires human approval before execution.",
      "id": "uses-mcp-tool-mcp-tool-call",
      "label": "Uses Mcp tool: mcp.tool.call",
      "risk": "medium",
      "tool": "mcp.tool.call"
    },
    {
      "action": "deny",
      "category": "Medical",
      "explanation": "Blocked by default.",
      "id": "uses-medical-tool-medical-advice",
      "label": "Uses Medical tool: medical.advice",
      "risk": "medium",
      "tool": "medical.advice"
    },
    {
      "action": "deny",
      "category": "Message",
      "explanation": "Blocked by default.",
      "id": "uses-message-tool-message-send-without-review",
      "label": "Uses Message tool: message.send.without_review",
      "risk": "medium",
      "tool": "message.send.without_review"
    },
    {
      "action": "deny",
      "category": "Messaging",
      "explanation": "Blocked by default.",
      "id": "can-delete-messages",
      "label": "Can delete messages",
      "risk": "critical",
      "tool": "message.delete.autonomous"
    },
    {
      "action": "ask",
      "category": "Migration",
      "explanation": "Requires human approval before execution.",
      "id": "uses-migration-tool-migration-run",
      "label": "Uses Migration tool: migration.run",
      "risk": "medium",
      "tool": "migration.run"
    },
    {
      "action": "deny",
      "category": "Minor",
      "explanation": "Blocked by default.",
      "id": "uses-minor-tool-minor-contact-unsupervised",
      "label": "Uses Minor tool: minor.contact.unsupervised",
      "risk": "medium",
      "tool": "minor.contact.unsupervised"
    },
    {
      "action": "ask",
      "category": "Model",
      "explanation": "Requires human approval before execution.",
      "id": "uses-model-tool-model-route",
      "label": "Uses Model tool: model.route",
      "risk": "medium",
      "tool": "model.route"
    },
    {
      "action": "deny",
      "category": "Network",
      "explanation": "Blocked by default.",
      "id": "uses-network-tool-network-exfiltrate",
      "label": "Uses Network tool: network.exfiltrate",
      "risk": "medium",
      "tool": "network.exfiltrate"
    },
    {
      "action": "deny",
      "category": "Optout",
      "explanation": "Blocked by default.",
      "id": "uses-optout-tool-optout-ignore",
      "label": "Uses Optout tool: optout.ignore",
      "risk": "medium",
      "tool": "optout.ignore"
    },
    {
      "action": "ask",
      "category": "Order",
      "explanation": "Requires human approval before execution.",
      "id": "uses-order-tool-order-update",
      "label": "Uses Order tool: order.update",
      "risk": "medium",
      "tool": "order.update"
    },
    {
      "action": "ask",
      "category": "Package",
      "explanation": "Requires human approval before execution.",
      "id": "uses-package-tool-package-install",
      "label": "Uses Package tool: package.install",
      "risk": "medium",
      "tool": "package.install"
    },
    {
      "action": "deny",
      "category": "Password",
      "explanation": "Blocked by default.",
      "id": "uses-password-tool-password-store",
      "label": "Uses Password tool: password.store",
      "risk": "medium",
      "tool": "password.store"
    },
    {
      "action": "deny",
      "category": "Payout",
      "explanation": "Blocked by default.",
      "id": "uses-payout-tool-payout-autonomous",
      "label": "Uses Payout tool: payout.autonomous",
      "risk": "medium",
      "tool": "payout.autonomous"
    },
    {
      "action": "allow",
      "category": "Payout",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-payout-tool-payout-preview",
      "label": "Uses Payout tool: payout.preview",
      "risk": "medium",
      "tool": "payout.preview"
    },
    {
      "action": "deny",
      "category": "Persistence",
      "explanation": "Blocked by default.",
      "id": "uses-persistence-tool-persistence-create",
      "label": "Uses Persistence tool: persistence.create",
      "risk": "medium",
      "tool": "persistence.create"
    },
    {
      "action": "deny",
      "category": "Platform",
      "explanation": "Blocked by default.",
      "id": "uses-platform-tool-platform-evasion",
      "label": "Uses Platform tool: platform.evasion",
      "risk": "medium",
      "tool": "platform.evasion"
    },
    {
      "action": "allow",
      "category": "Policy",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-policy-tool-policy-evaluate",
      "label": "Uses Policy tool: policy.evaluate",
      "risk": "medium",
      "tool": "policy.evaluate"
    },
    {
      "action": "allow",
      "category": "Policy",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-policy-tool-policy-lint",
      "label": "Uses Policy tool: policy.lint",
      "risk": "medium",
      "tool": "policy.lint"
    },
    {
      "action": "ask",
      "category": "Policy",
      "explanation": "Requires human approval before execution.",
      "id": "uses-policy-tool-policy-publish",
      "label": "Uses Policy tool: policy.publish",
      "risk": "medium",
      "tool": "policy.publish"
    },
    {
      "action": "deny",
      "category": "Prescription",
      "explanation": "Blocked by default.",
      "id": "uses-prescription-tool-prescription-send-autonomous",
      "label": "Uses Prescription tool: prescription.send.autonomous",
      "risk": "medium",
      "tool": "prescription.send.autonomous"
    },
    {
      "action": "allow",
      "category": "Pricing",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-pricing-tool-pricing-draft",
      "label": "Uses Pricing tool: pricing.draft",
      "risk": "medium",
      "tool": "pricing.draft"
    },
    {
      "action": "deny",
      "category": "Privacy",
      "explanation": "Blocked by default.",
      "id": "uses-privacy-tool-privacy-exfiltrate",
      "label": "Uses Privacy tool: privacy.exfiltrate",
      "risk": "medium",
      "tool": "privacy.exfiltrate"
    },
    {
      "action": "ask",
      "category": "Refund",
      "explanation": "Requires human approval before execution.",
      "id": "uses-refund-tool-refund-request",
      "label": "Uses Refund tool: refund.request",
      "risk": "medium",
      "tool": "refund.request"
    },
    {
      "action": "allow",
      "category": "Release",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-release-tool-release-plan",
      "label": "Uses Release tool: release.plan",
      "risk": "medium",
      "tool": "release.plan"
    },
    {
      "action": "allow",
      "category": "Replay",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-replay-tool-replay-verify",
      "label": "Uses Replay tool: replay.verify",
      "risk": "medium",
      "tool": "replay.verify"
    },
    {
      "action": "allow",
      "category": "Report",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-report-tool-report-write",
      "label": "Uses Report tool: report.write",
      "risk": "medium",
      "tool": "report.write"
    },
    {
      "action": "allow",
      "category": "Repository",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-repository-tool-repository-diff",
      "label": "Uses Repository tool: repository.diff",
      "risk": "medium",
      "tool": "repository.diff"
    },
    {
      "action": "ask",
      "category": "Repository",
      "explanation": "Requires human approval before execution.",
      "id": "uses-repository-tool-repository-push",
      "label": "Uses Repository tool: repository.push",
      "risk": "medium",
      "tool": "repository.push"
    },
    {
      "action": "deny",
      "category": "Review",
      "explanation": "Blocked by default.",
      "id": "uses-review-tool-review-fake",
      "label": "Uses Review tool: review.fake",
      "risk": "medium",
      "tool": "review.fake"
    },
    {
      "action": "ask",
      "category": "Rollback",
      "explanation": "Requires human approval before execution.",
      "id": "uses-rollback-tool-rollback-execute",
      "label": "Uses Rollback tool: rollback.execute",
      "risk": "medium",
      "tool": "rollback.execute"
    },
    {
      "action": "allow",
      "category": "Rules",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-rules-tool-rules-evaluate",
      "label": "Uses Rules tool: rules.evaluate",
      "risk": "medium",
      "tool": "rules.evaluate"
    },
    {
      "action": "deny",
      "category": "Secret",
      "explanation": "Blocked by default.",
      "id": "uses-secret-tool-secret-read",
      "label": "Uses Secret tool: secret.read",
      "risk": "medium",
      "tool": "secret.read"
    },
    {
      "action": "deny",
      "category": "Secrets",
      "explanation": "Blocked by default.",
      "id": "can-read-secrets",
      "label": "Can read secrets",
      "risk": "critical",
      "tool": "secrets.read"
    },
    {
      "action": "ask",
      "category": "Security",
      "explanation": "Requires human approval before execution.",
      "id": "uses-security-tool-security-review",
      "label": "Uses Security tool: security.review",
      "risk": "medium",
      "tool": "security.review"
    },
    {
      "action": "ask",
      "category": "Shell",
      "explanation": "Requires human approval before execution.",
      "id": "uses-shell-tool-shell-install",
      "label": "Uses Shell tool: shell.install",
      "risk": "medium",
      "tool": "shell.install"
    },
    {
      "action": "ask",
      "category": "Shell",
      "explanation": "Requires human approval before execution.",
      "id": "uses-shell-tool-shell-network",
      "label": "Uses Shell tool: shell.network",
      "risk": "medium",
      "tool": "shell.network"
    },
    {
      "action": "allow",
      "category": "Shell",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-shell-tool-shell-search",
      "label": "Uses Shell tool: shell.search",
      "risk": "medium",
      "tool": "shell.search"
    },
    {
      "action": "deny",
      "category": "Shell",
      "explanation": "Blocked by default.",
      "id": "uses-shell-tool-shell-secret",
      "label": "Uses Shell tool: shell.secret",
      "risk": "medium",
      "tool": "shell.secret"
    },
    {
      "action": "allow",
      "category": "Shell",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-shell-tool-shell-test",
      "label": "Uses Shell tool: shell.test",
      "risk": "medium",
      "tool": "shell.test"
    },
    {
      "action": "deny",
      "category": "Spam",
      "explanation": "Blocked by default.",
      "id": "uses-spam-tool-spam-broadcast",
      "label": "Uses Spam tool: spam.broadcast",
      "risk": "medium",
      "tool": "spam.broadcast"
    },
    {
      "action": "deny",
      "category": "Submit",
      "explanation": "Blocked by default.",
      "id": "uses-submit-tool-submit-without-review",
      "label": "Uses Submit tool: submit.without_review",
      "risk": "medium",
      "tool": "submit.without_review"
    },
    {
      "action": "allow",
      "category": "Template",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-template-tool-template-clone",
      "label": "Uses Template tool: template.clone",
      "risk": "medium",
      "tool": "template.clone"
    },
    {
      "action": "ask",
      "category": "Template",
      "explanation": "Requires human approval before execution.",
      "id": "uses-template-tool-template-install",
      "label": "Uses Template tool: template.install",
      "risk": "medium",
      "tool": "template.install"
    },
    {
      "action": "allow",
      "category": "Template",
      "explanation": "Allowed within the mission and recorded.",
      "id": "uses-template-tool-template-read",
      "label": "Uses Template tool: template.read",
      "risk": "medium",
      "tool": "template.read"
    },
    {
      "action": "deny",
      "category": "Trusted Sender",
      "explanation": "Blocked by default.",
      "id": "uses-trusted-sender-tool-trusted-sender-impersonate",
      "label": "Uses Trusted Sender tool: trusted_sender.impersonate",
      "risk": "medium",
      "tool": "trusted_sender.impersonate"
    },
    {
      "action": "ask",
      "category": "Version",
      "explanation": "Requires human approval before execution.",
      "id": "uses-version-tool-version-release",
      "label": "Uses Version tool: version.release",
      "risk": "medium",
      "tool": "version.release"
    },
    {
      "action": "deny",
      "category": "Wiretap",
      "explanation": "Blocked by default.",
      "id": "uses-wiretap-tool-wiretap-hidden",
      "label": "Uses Wiretap tool: wiretap.hidden",
      "risk": "medium",
      "tool": "wiretap.hidden"
    },
    {
      "action": "ask",
      "category": "Workflow",
      "explanation": "Requires human approval before execution.",
      "id": "can-update-service-tickets",
      "label": "Can update service tickets",
      "risk": "high",
      "tool": "ticket.update"
    }
  ],
  "score": 100,
  "simulator_cassette_id": "cassette-agent-marketplace-agent",
  "status": "verified",
  "template_id": "agent-marketplace-agent"
}