Review a caller-supplied action envelope for decision, mandate, scope, approval,...

{ "body": { "approval": { "approval_reference": "approval_001", "decision_id": "dec_001", "expires_at": "2026-07-26T12:10:00.000Z", "status": "VALID" }, "decision": { "action_type": "API_PURCHASE", "agent_id": "agent-123", "amount": "2.50", "asset": "USDC", "decision_id": "dec_001", "mandate_id": "mandate_001", "network": "eip155:8453", "organization_id": "org-456", "policy_version": "action-envelope-policy-v1", "resource": "https://base-agent-preflight.bytoken2023.workers.dev/x402/v1/value/convert" }, "envelope": { "action_id": "act_001", "action_type": "API_PURCHASE", "agent_id": "agent-123", "amount": "2.50", "approval_reference": "approval_001", "asset": "USDC", "command": "call_x402_resource", "credential_scope": [], "decision_id": "dec_001", "envelope_hash": "sha256:client_supplied_hash", "expires_at": "2026-07-26T12:05:00.000Z", "filesystem_scope": [ "workspace/tmp" ], "issued_at": "2026-07-26T12:00:00.000Z", "mandate_id": "mandate_001", "network": "eip155:8453", "network_scope": [ "https://base-agent-preflight.bytoken2023.workers.dev" ], "organization_id": "org-456", "policy_version": "action-envelope-policy-v1", "resource": "https://base-agent-preflight.bytoken2023.workers.dev/x402/v1/value/convert", "resource_limits": { "cpu_limit": 2, "memory_mb": 1024, "timeout_seconds": 300 }, "sandbox_profile": "L2_GVISOR", "signature": { "algorithm": "Ed25519", "key_id": "org-action-envelope-key-v1", "status": "VALID" }, "structured_worker_instruction": true, "tool": "nomos_value_convert" }, "mandate": { "agent_id": "agent-123", "allowed_action_types": [ "API_PURCHASE" ], "allowed_assets": [ "USDC" ], "allowed_networks": [ "eip155:8453" ], "allowed_resources": [ "https://base-agent-preflight.bytoken2023.workers.dev/*" ], "credential_scope": [], "filesystem_scope": [ "workspace/tmp" ], "mandate_id": "mandate_001", "network_scope": [ "https://base-agent-preflight.bytoken2023.workers.dev" ], "organization_id": "org-456", "per_transaction_limit": "10.00", "policy_version": "action-envelope-policy-v1", "sandbox_profile": "L2_GVISOR", "status": "VALID" } }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "action_id": "act_001", "action_type": "API_PURCHASE", "agent_id": "agent-123", "approval_status": "INVALID_OR_REQUIRED", "binding_status": { "agent_authorization": "VALID", "decision": "BOUND", "mandate": "BOUND", "worker_instruction": "STRUCTURED_ENVELOPE_ONLY" }, "computed_envelope_hash": "sha256:8f042699eeeeb8900bd8d0b36faa3c0ad9bc2e530877872a075dac58e0c70b9a", "credential_access": false, "decision": "DENY", "decision_id": "dec_001", "deterministic": true, "envelope_hash": "sha256:client_supplied_hash", "evaluated_at": "2026-11-01T00:00:00.000Z", "expires_at": "2026-11-01T00:05:00.000Z", "llm_used": false, "mandate_id": "mandate_001", "organization_id": "org-456", "policy_version": "nomos-action-envelope-review-v1-20260726", "product": "nomos-action-envelope-review", "reason_codes": [ "APPROVAL_REFERENCE_INVALID", "ENVELOPE_HASH_MISMATCH", "ENVELOPE_EXPIRED", "INSUFFICIENT_INTEGRITY_PROOF" ], "result_id": "aer_20261101000000_1tgn", "schema_version": "1.0", "scope_status": { "action": "UNCHANGED", "credential": "UNCHANGED", "filesystem": "UNCHANGED", "network": "UNCHANGED", "sandbox": "ACCEPTED" }, "supported_reason_codes": [ "ACTION_ENVELOPE_MISSING", "ACTION_ENVELOPE_MALFORMED", "DECISION_BINDING_MISSING", "MANDATE_BINDING_MISSING", "ACTION_SCOPE_CHANGED", "AUTHORITY_AMPLIFICATION", "SANDBOX_PROFILE_DOWNGRADE", "NETWORK_SCOPE_EXPANDED", "FILESYSTEM_SCOPE_EXPANDED", "CREDENTIAL_SCOPE_EXPANDED", "APPROVAL_REFERENCE_INVALID", "POLICY_VERSION_MISMATCH", "ENVELOPE_HASH_MISMATCH", "ENVELOPE_EXPIRED", "REPLAY_DETECTED", "UNSTRUCTURED_WORKER_INSTRUCTION", "INSUFFICIENT_INTEGRITY_PROOF" ], "unknown_mcp_executed": false, "worker_receives_structured_envelope_only": true }, "type": "json" }