{
  "fixture": "agent-guard-delegated-task",
  "fixtureVersion": 1,
  "package": {
    "name": "@shieldaai/agent-guard-executor",
    "version": "0.1.0-alpha.2",
    "sourceCommit": "e8d8e82b31d7e4c60d565d9d37721953cc33c048"
  },
  "runtime": "v26.12.0",
  "methodology": "Reproduction of the article example using one loopback executor, temporary encrypted SQLite and synthetic handlers. No model, independent remote agent, real deployment or process crash.",
  "results": {
    "allowedRead": {
      "httpStatus": 200,
      "handlerCalls": 1
    },
    "forbiddenPreparation": {
      "status": 400,
      "body": {
        "error": "GRANT_DENIED"
      }
    },
    "forbiddenWiderChild": {
      "status": 400,
      "body": {
        "error": "DELEGATION_DENIED"
      }
    },
    "deploymentsFromSupportTree": 0,
    "taskScope": [
      {
        "task": "operations",
        "parent": "support",
        "chargedCalls": 1
      },
      {
        "task": "specialist",
        "parent": "operations",
        "chargedCalls": 1
      },
      {
        "task": "support",
        "parent": null,
        "chargedCalls": 1
      }
    ],
    "separatelyAuthorizedRelease": {
      "httpStatus": 200,
      "handlerCalls": 1
    },
    "afterGracefulRestart": {
      "persistedParentCalls": 1,
      "tools": [
        {
          "name": "prod.deploy",
          "approved": false
        },
        {
          "name": "ticket.read",
          "approved": false
        }
      ]
    }
  },
  "limitations": [
    "All task identities are governed by one executor; this is not distributed enforcement.",
    "The host simulates an authenticated reviewer; the fixture does not test a human login.",
    "Inventory shows declared scope. Refusal evidence comes from the HTTP response and handler counters."
  ]
}