{
  "schema_version": "1.4.0",
  "request_id": "act_2026-07-15_ap-agent_payment_9f3c1a20",
  "knowledge_version": "2026.07.11",
  "profile": "structured_agent_authorization",
  "action": {
    "actor": {
      "type": "ai-agent",
      "id": "agt_accounts_payable_ops",
      "display_name": "Accounts-Payable Operations Agent",
      "identity_mode": "attested_workload_identity",
      "owner": "finance-automation",
      "runtime": "kubernetes",
      "operates_on_behalf_of": "principal:finance-controller"
    },
    "intent": "Settle an approved vendor invoice by issuing an outbound ACH payment.",
    "operation": "payments.ach.create",
    "resource": {
      "type": "outbound-payment",
      "id": "pay_a1b2c3",
      "amount": 18500.0,
      "currency": "USD",
      "payee": {
        "id": "vendor_northwind_ltd",
        "bank_account_ref": "acct_ext_7742",
        "payee_status": "newly-added",
        "first_seen_at": "2026-07-15T13:52:00Z"
      },
      "external_effect": true
    },
    "purpose": "invoice-settlement",
    "consequence_tier": "high"
  },
  "evidence": [
    {
      "evidence_id": "evi:apeiris:II-02:2026-07-15-2b7d0e11",
      "control_refs": ["apeiris://identity/controls/II-02"],
      "result": "pass",
      "summary": "Agent workload identity attested at the required assurance level at action time."
    },
    {
      "evidence_id": "evi:apeiris:AB-01:2026-07-15-6c19af38",
      "control_refs": ["apeiris://agentic/controls/AB-01"],
      "result": "pass",
      "summary": "payments.ach.create is within the agent's authorized action-scope manifest."
    }
  ],
  "requested_domains": ["identity", "authority", "agentic"],
  "notes": "The action-event is the security object: one autonomous action on the wire, carrying the actor, the intent, the operation, the resource it acts on, and the evidence the workload presents at decision time. Apeiris evaluates THIS, not the model."
}