
===== 0 operator identity =====
uid=4300(eza-op) gid=4300(eza-op) groups=4300(eza-op)
sudo available: yes

===== 1 setup (section 3) =====
{
  "ok": true,
  "problems": []
}
run_id=run-20260918T014358Z-573c149e
release_dir=/tmp/eza-wt-002/release/EZA-001-R001-rc.9
root=/tmp/eza-wt-002
next: provision the domain, run acceptance.py, then export_evidence.sh BEFORE cleanup.sh
run-20260918T014358Z-573c149e

===== 1b W-01 reproduction: original uncorrected redirection form, from THIS shell =====
probe: > $ROOT/evidence/service.out opened by the operator shell before sudo
/tmp/wt/operator-session.sh: line 24: /tmp/eza-wt-002/evidence/service.out: Permission denied
uncorrected-form exit=1

===== 2 provision (section 3, corrected form) =====
{"approvals": "fixture-generated operator records; not independent validation", "audience": "service:objects", "bundle_sha256": "ad50d35a29616776777e06e4d3aa1e9660edf6cf6dd949a20f9990ee011d9759", "child_grant_id": "grant:child-d18e1a765a2080a5", "delegate": "agent:B", "domain": "domain:fedd87a4c60e7d70c92fa75b7c9a6463deeda5b7ddf5d808", "expires_at": 1789782238985, "initial_value": "initial-value-d18e1a765a2080a5", "lineage": ["grant:root-d18e1a765a2080a5", "grant:child-d18e1a765a2080a5"], "not_before": 1789695778985, "permitted_value": "approved-value-d18e1a765a2080a5", "principal": "user:d18e1a765a2080a5", "release_manifest_sha256": "fc44b015cbf152aef4e4cc25bc0bdc6d58f6763a0af871b81795de04e32f8f3e", "resource": "object:staging:d18e1a765a2080a5", "root_grant_id": "grant:root-d18e1a765a2080a5"}

===== 3 lifecycle helpers (section 4) =====

===== 4 start =====
ready pid=2852
2852
total 1
-rw-r--r-- 1 eza-svc eza-svc 6 Sep 18 01:43 ready
srw-rw---- 1 eza-svc eza-req 0 Sep 18 01:43 request.sock
-rw-r--r-- 1 eza-svc eza-svc 5 Sep 18 01:43 service.pid
{"at": 1789695839.2446778, "event": "listening", "gid": 4100, "groups": [4100, 4200], "pid": 2852, "socket": "/tmp/eza-wt-002/run/request.sock", "uid": 4100}

===== 4b build envelopes =====
/tmp/eza-wt-002/agent/authorized.envelope
/tmp/eza-wt-002/agent/no-authority.envelope
/tmp/eza-wt-002/agent/changed-value.envelope
048f7d4959c3dc113e6a4c62a1f8f3d4e9bbd92963aba2fdc1928f5201c6b996  /tmp/eza-wt-002/evidence/walkthrough/envelope-authorized.json
5e8806dae0507ad009e0a19cbf147724bf5c39a684890c0f494496d4e435b4ca  /tmp/eza-wt-002/evidence/walkthrough/envelope-changed-value.json
a00de8d4f3d286da72e90cce677e7d016b94c3aa1b5485207bfde4c89d2656ed  /tmp/eza-wt-002/evidence/walkthrough/envelope-no-authority.json

===== 5 observe, then two refusals =====
{"accesses": [], "consumed_roots": [], "domain": "domain:fedd87a4c60e7d70c92fa75b7c9a6463deeda5b7ddf5d808", "now": 1789695838985, "observer": {"gid": 4100, "groups": [4100, 4200], "uid": 4100}, "prepared": [], "resources": {"object:staging:d18e1a765a2080a5": "initial-value-d18e1a765a2080a5"}, "revision": 0}
{"requester": {"euid": 4101, "gid": 4101, "groups": [4101, 4200], "pid": 2881, "uid": 4101}, "response": {"handle": null, "record": {"audience": "service:objects", "authenticated_actor": "agent:B", "authority_lineage": [], "blocking_reason_code": "EZA-AUTHORITY-ABSENT", "decision": "REJECT", "delegate": "agent:B", "evaluated_at": 1789695840137, "execution": "NOT_EXECUTED", "phase": "committed", "policy_version": "policy:1", "principal": "user:d18e1a765a2080a5", "profile": "local-object-v1", "protected_effect_count": 0, "reason_code": "EZA-AUTHORITY-ABSENT", "release_manifest_sha256": "fc44b015cbf152aef4e4cc25bc0bdc6d58f6763a0af871b81795de04e32f8f3e", "request_digest": "sha256:6cbd69f323a99c95fef9e87d566be4862ddd3a157f6a6934da2a072b5bb0e92e", "request_id": "req-noauth-001", "spec": "EZA-001", "version": "0.1.0-draft.7"}, "result": null}, "transport": "COMPLETE"}
{"accesses": [], "consumed_roots": [], "domain": "domain:fedd87a4c60e7d70c92fa75b7c9a6463deeda5b7ddf5d808", "now": 1789695840138, "observer": {"gid": 4100, "groups": [4100, 4200], "uid": 4100}, "prepared": [], "resources": {"object:staging:d18e1a765a2080a5": "initial-value-d18e1a765a2080a5"}, "revision": 1}
{"requester": {"euid": 4101, "gid": 4101, "groups": [4101, 4200], "pid": 2893, "uid": 4101}, "response": {"handle": null, "record": {"audience": "service:objects", "authenticated_actor": "agent:B", "authority_lineage": ["grant:root-d18e1a765a2080a5", "grant:child-d18e1a765a2080a5"], "blocking_reason_code": "EZA-SCOPE-EXCEEDED", "decision": "REJECT", "delegate": "agent:B", "evaluated_at": 1789695840743, "execution": "NOT_EXECUTED", "phase": "committed", "policy_version": "policy:1", "principal": "user:d18e1a765a2080a5", "profile": "local-object-v1", "protected_effect_count": 0, "reason_code": "EZA-SCOPE-EXCEEDED", "release_manifest_sha256": "fc44b015cbf152aef4e4cc25bc0bdc6d58f6763a0af871b81795de04e32f8f3e", "request_digest": "sha256:e19c923d1bd883b3f842d77bf08c5efb1658094feefc15eeb2d2f2964065b94e", "request_id": "req-badvalue-001", "spec": "EZA-001", "version": "0.1.0-draft.7"}, "result": null}, "transport": "COMPLETE"}
{"accesses": [], "consumed_roots": [], "domain": "domain:fedd87a4c60e7d70c92fa75b7c9a6463deeda5b7ddf5d808", "now": 1789695840744, "observer": {"gid": 4100, "groups": [4100, 4200], "uid": 4100}, "prepared": [], "resources": {"object:staging:d18e1a765a2080a5": "initial-value-d18e1a765a2080a5"}, "revision": 2}

===== 5b requester bypass =====
{"attempt": "read", "denied": true, "errno": 13, "errno_name": "EACCES", "outcome": "permission-denied", "path": "/tmp/eza-wt-002/domain/protected/authority/state.sqlite", "requester": {"euid": 4101, "gid": 4101, "groups": [4101, 4200], "pid": 2904, "uid": 4101}, "strerror": "Permission denied"}

===== 6 authorized request =====
{"requester": {"euid": 4101, "gid": 4101, "groups": [4101, 4200], "pid": 2908, "uid": 4101}, "response": {"handle": null, "record": {"audience": "service:objects", "authenticated_actor": "agent:B", "authority_lineage": ["grant:root-d18e1a765a2080a5", "grant:child-d18e1a765a2080a5"], "blocking_reason_code": null, "decision": "EXECUTE", "delegate": "agent:B", "evaluated_at": 1789695841248, "execution": "SUCCEEDED", "phase": "committed", "policy_version": "policy:1", "principal": "user:d18e1a765a2080a5", "profile": "local-object-v1", "protected_effect_count": 1, "reason_code": "EZA-AUTHORIZED", "release_manifest_sha256": "fc44b015cbf152aef4e4cc25bc0bdc6d58f6763a0af871b81795de04e32f8f3e", "request_digest": "sha256:b2f0c2c430d5af7896acc4272d297515ada7cdad6fcb1bd1caa3d2733ad3f0d4", "request_id": "req-auth-001", "spec": "EZA-001", "version": "0.1.0-draft.7"}, "result": null}, "transport": "COMPLETE"}
{"accesses": [{"action": "write", "resource": "object:staging:d18e1a765a2080a5", "value": "approved-value-d18e1a765a2080a5"}], "consumed_roots": ["grant:root-d18e1a765a2080a5"], "domain": "domain:fedd87a4c60e7d70c92fa75b7c9a6463deeda5b7ddf5d808", "now": 1789695841249, "observer": {"gid": 4100, "groups": [4100, 4200], "uid": 4100}, "prepared": [], "resources": {"object:staging:d18e1a765a2080a5": "approved-value-d18e1a765a2080a5"}, "revision": 3}

===== 7 replay before restart =====
{"requester": {"euid": 4101, "gid": 4101, "groups": [4101, 4200], "pid": 2919, "uid": 4101}, "response": {"handle": null, "record": {"audience": "service:objects", "authenticated_actor": "agent:B", "authority_lineage": ["grant:root-d18e1a765a2080a5", "grant:child-d18e1a765a2080a5"], "blocking_reason_code": "EZA-REPLAY-DETECTED", "decision": "REJECT", "delegate": "agent:B", "evaluated_at": 1789695841634, "execution": "NOT_EXECUTED", "phase": "committed", "policy_version": "policy:1", "principal": "user:d18e1a765a2080a5", "profile": "local-object-v1", "protected_effect_count": 0, "reason_code": "EZA-REPLAY-DETECTED", "release_manifest_sha256": "fc44b015cbf152aef4e4cc25bc0bdc6d58f6763a0af871b81795de04e32f8f3e", "request_digest": "sha256:b2f0c2c430d5af7896acc4272d297515ada7cdad6fcb1bd1caa3d2733ad3f0d4", "request_id": "req-auth-001", "spec": "EZA-001", "version": "0.1.0-draft.7"}, "result": null}, "transport": "COMPLETE"}
{"accesses": [{"action": "write", "resource": "object:staging:d18e1a765a2080a5", "value": "approved-value-d18e1a765a2080a5"}], "consumed_roots": ["grant:root-d18e1a765a2080a5"], "domain": "domain:fedd87a4c60e7d70c92fa75b7c9a6463deeda5b7ddf5d808", "now": 1789695841634, "observer": {"gid": 4100, "groups": [4100, 4200], "uid": 4100}, "prepared": [], "resources": {"object:staging:d18e1a765a2080a5": "approved-value-d18e1a765a2080a5"}, "revision": 4}

===== 7b restart =====
stopped pid=2852
ready pid=2942

===== 7c replay after restart =====
{"requester": {"euid": 4101, "gid": 4101, "groups": [4101, 4200], "pid": 2951, "uid": 4101}, "response": {"handle": null, "record": {"audience": "service:objects", "authenticated_actor": "agent:B", "authority_lineage": ["grant:root-d18e1a765a2080a5", "grant:child-d18e1a765a2080a5"], "blocking_reason_code": "EZA-REPLAY-DETECTED", "decision": "REJECT", "delegate": "agent:B", "evaluated_at": 1789695843113, "execution": "NOT_EXECUTED", "phase": "committed", "policy_version": "policy:1", "principal": "user:d18e1a765a2080a5", "profile": "local-object-v1", "protected_effect_count": 0, "reason_code": "EZA-REPLAY-DETECTED", "release_manifest_sha256": "fc44b015cbf152aef4e4cc25bc0bdc6d58f6763a0af871b81795de04e32f8f3e", "request_digest": "sha256:b2f0c2c430d5af7896acc4272d297515ada7cdad6fcb1bd1caa3d2733ad3f0d4", "request_id": "req-auth-001", "spec": "EZA-001", "version": "0.1.0-draft.7"}, "result": null}, "transport": "COMPLETE"}
{"accesses": [{"action": "write", "resource": "object:staging:d18e1a765a2080a5", "value": "approved-value-d18e1a765a2080a5"}], "consumed_roots": ["grant:root-d18e1a765a2080a5"], "domain": "domain:fedd87a4c60e7d70c92fa75b7c9a6463deeda5b7ddf5d808", "now": 1789695843114, "observer": {"gid": 4100, "groups": [4100, 4200], "uid": 4100}, "prepared": [], "resources": {"object:staging:d18e1a765a2080a5": "approved-value-d18e1a765a2080a5"}, "revision": 5}

===== 8 retain =====
stopped pid=2942
total 19
-rw-r--r-- 1 root root   63 Sep 18 01:44 RECORD-CLASS.txt
-rw-r--r-- 1 root root  297 Sep 18 01:44 bypass-read-state.json
-rw------- 1 root root  804 Sep 18 01:43 envelope-authorized.json
-rw------- 1 root root  778 Sep 18 01:43 envelope-changed-value.json
-rw-r--r-- 1 root root  389 Sep 18 01:43 envelope-hashes.txt
-rw------- 1 root root  688 Sep 18 01:43 envelope-no-authority.json
-rw-r--r-- 1 root root  345 Sep 18 01:44 installed-code-hashes.txt
-r--r----- 1 root root 2220 Sep 18 01:44 installed.json
-rw-r--r-- 1 root root  309 Sep 18 01:43 observation-01-initial.json
-rw-r--r-- 1 root root  309 Sep 18 01:44 observation-02-after-no-authority.json
-rw-r--r-- 1 root root  309 Sep 18 01:44 observation-03-after-changed-value.json
-rw-r--r-- 1 root root  449 Sep 18 01:44 observation-04-after-authorized.json
-rw-r--r-- 1 root root  449 Sep 18 01:44 observation-05-after-replay-before-restart.json
-rw-r--r-- 1 root root  449 Sep 18 01:44 observation-06-after-replay-after-restart.json
-rw-r----- 1 root root  849 Sep 18 01:44 plan.json
-rw-r--r-- 1 root root  805 Sep 18 01:43 provision.out
-rw-r--r-- 1 root root  874 Sep 18 01:44 response-02-no-authority.json
-rw-r--r-- 1 root root  933 Sep 18 01:44 response-03-changed-value.json
-rw-r--r-- 1 root root  907 Sep 18 01:44 response-04-authorized.json
-rw-r--r-- 1 root root  931 Sep 18 01:44 response-05-replay-before-restart-authorized.json
-rw-r--r-- 1 root root  931 Sep 18 01:44 response-06-replay-after-restart-authorized.json
-r--r--r-- 1 root root   30 Sep 18 01:44 run-id.txt
-rw-r--r-- 1 root root  316 Sep 18 01:44 service-identities.jsonl
retain exit=0
