{
  "record": {
    "kind": "cybertwin-agent-authority-record",
    "org_name": "Acme Capital — SAMPLE (fictional)",
    "as_of": "2026-09-16",
    "agent_name": "support-copilot (sample)",
    "verdict": "REVIEW",
    "reaches": true,
    "crown_count": 1,
    "ale_p50_usd": 1600000,
    "ale_unpriced": false,
    "confused_deputy": {
      "is_candidate": true,
      "untrusted_surfaces": [
        "zendesk:read_tickets"
      ],
      "reachable_crowns": [
        "cardholder-db"
      ]
    },
    "strip_scopes": [
      "customer-api:query"
    ],
    "conditional_frame": "IF this AI agent is compromised",
    "confused_deputy_frame": "IF untrusted input steers this agent (prompt injection / tool poisoning), its LEGITIMATE authority — not a compromise of the agent — is what reaches the crown. A structural possibility from the declared scopes, never a prediction of behavior.",
    "disclaimers": [
      "SAMPLE RECORD for a FICTIONAL company (Acme Capital). Downloaded from cybertwin.io/demo to demonstrate the verify chain — the signature is real; the estate is not. Edit any field, including this sentence, and verification fails.",
      "Reach and dollars are MODELED — the foothold is the declared scopes, not an observed compromise. Some routes beyond the foothold ride only config-backed edges, others cross modeled template stitches (graded per route); the dollar figures are MODELED (FAIR). Not the agent’s behavior, and not an assertion the agent is or will be compromised.",
      "Confused-deputy candidacy is STRUCTURAL: the agent both ingests untrusted input AND has authority reaching a crown. Poisoned input could steer its legitimate permissions — a possibility from the declared scopes, never a prediction. EU AI Act Art. 14 places human oversight exactly here (binding for in-scope high-risk systems from 2 December 2027).",
      "A signature binds this record to the org’s key at the stated date; it does not extend the modeled scope."
    ],
    "reach_grade": "mixed"
  },
  "signature": {
    "algorithm": "ed25519",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAQDOq3lTbiAW8dvKHmUpcrG/7/1ASV9oJ8q7X6bYemVw=\n-----END PUBLIC KEY-----\n",
    "value": "BoEoAsYbyDEtjLJhvxYP8q0UB1Y6RTbxOCuc7Vxm2n98zvwA2aYwjabCHMC5vnnK4y95vr3VXhfm3b5cT6dxCg==",
    "signed_at": "2026-09-16T03:04:46.682Z"
  },
  "public_key_fingerprint": "a31bf8412203a3519ebaec3f605cc76960e245b489abd7def7c0a5edee509a9c",
  "spec": "cybertwin-agent-authority-record/v2 — canonical: kind|org|as_of|agent|verdict|reaches|crowns|ale_p50|cd_candidate|untrusted|reachable|strip|grade"
}