Loaded environment from /tmp/symbi-lifecycle-n_jq5g2d/2/.env
Invocation ID: 03c91d8d-9871-4410-ae4b-d815559681d3
Audit run: f249cd13-6465-4ac1-9891-550e60b4c004
Audit journal: /tmp/symbi-lifecycle-n_jq5g2d/2/.symbiont/governed/ca51c662-9edf-4e34-a8ab-82ce3328e909.f249cd13-6465-4ac1-9891-550e60b4c004.jsonl
Audit public key: 60d1cbe67adbb47ee0b5c2bf0caab7def7a730cf1f6ff630b3adb7374cd7a5df
→ Running agent: fixture (agents/fixture.symbi)
→ Input: accepted_partial_response

✓ Cedar policy gate wired (1 policy file(s) loaded)

Approval request (complete JSON with escaped text):
{
  "id": "90c5178a9712f978",
  "agent_id": "ca51c662-9edf-4e34-a8ab-82ce3328e909",
  "kind": "tool_call",
  "summary": "tool_call record",
  "reason": "exact-call human approval required",
  "context_snapshot": {
    "approval_id": "ba769fc7-1a64-4ea9-9bdb-21436c32b7c9",
    "invocation": {
      "fingerprint": "sha256:dc21ea7373d2f69638d15023d294e0dda951ac59a9395e22403638a50d7218af",
      "action": {
        "ToolCall": {
          "call_id": "call-1",
          "name": "record",
          "arguments": "{\"input\":\"order-001\",\"output\":\"receipt-001\"}"
        }
      },
      "arguments": {
        "input": "order-001",
        "output": "receipt-001"
      },
      "contract": {
        "name": "record",
        "version": "1",
        "digest": "sha256:c942c2db6452daadea21d82361eb11500fa3e45d6aafe9d83dceb9d6a47e5779",
        "action_type": "Action",
        "action_id": "tool_call::record",
        "resource_type": "Resource",
        "resource_id": "default",
        "requires_approval": true
      },
      "resolved": {
        "command_boundary": {
          "tier": "landlock",
          "profile_digest": "sha256:59346818c8ff5fbe874759f4082bcb078d8e6ef2a3374ee62c7bad268d15f110",
          "landlock": {
            "abi_detected": 8,
            "abi_floor": 6,
            "abi_required": 6,
            "boundary_version": 5,
            "supervision": "delegated_cgroup_v1",
            "resources": {
              "memory_bytes": 536870912,
              "cpu_nanos": 1000000000
            },
            "pids_limit": 128,
            "max_lifetime_ms": 300000,
            "supervisor_state_dir": "/tmp/symbi-lifecycle-n_jq5g2d/state",
            "scopes": [
              "signal",
              "abstract_unix_socket"
            ],
            "socket_policy": "private_unix_stream_pair_only",
            "io_uring": "denied",
            "namespace_mutation": "denied_after_setup",
            "inherited_descriptors": "stdio_only",
            "network_restricted": true,
            "broker_source_roots": [],
            "broker_output_roots": [],
            "executable": null,
            "process_metadata": [],
            "workspace": null
          },
          "filesystem": {
            "read": [],
            "create": [],
            "max_file_bytes": 0,
            "input_snapshots": true,
            "overwrite": false,
            "output_parent_identity": null
          }
        },
        "execution_transport": "native_http_broker",
        "risk_tier": "low",
        "base_tool": "record",
        "http_method": "POST",
        "http_url": "http://198.18.0.1:37499/orders/accepted_partial_response"
      },
      "source_policy": {
        "semantics": "inline_effect_policy_v1",
        "source_hash": "sha256:46505b9f94f710c65f3993f9894cc450857c1fa37690d6b60425d3fcd4b84d87",
        "declaration_hash": "sha256:84d7e8b4cd1bb3bc0c84a085c4e8483e1f16b6c5780b5f7f6e425e956ca70bee",
        "agent_name": "fixture",
        "policies": []
      }
    },
    "session_started_at": "2026-10-25T22:15:07.156702768Z",
    "iteration": 1
  },
  "created_at": "2026-10-25T22:15:07.467160261Z",
  "expires_at": "2026-10-25T22:15:27.467160261Z",
  "status": "pending"
}
Type approve 90c5178a9712f978 to approve; any other answer denies:
> approve 90c5178a9712f978
Tool error (inspect audit for effect status): "[Error] ToolClad error: HTTP response read failed: error decoding response body"
Invocation requires reconciliation; no work repeated. Inspect its protected run journal.
