Governance: An Agent Activity Record

The governance column’s public example — authority, policy, expectation, act

The scenario

Done In Seven LLC grants a deployment agent authority for a single release window, evaluates its release policy, expects a deploy inside the window, and records the performed deploy with a passing verdict.

How FORAY models it

Governance events run through the same four components with zero special fields: the authority grant is an Arrangement between principal and agent; the policy evaluation is an Accrual whose formula block records the checks that ran; the expected behavior is an Anticipation; the performed act is an Action with the verdict in status (F15). The grant's attested artifact is a digest in artifact references (F29); the run's trace id rides in residue.

The event has no monetary substance, so the required monetary facts — the transaction amount (F7) and the Action's settled amount (F9) — are 0: the honest value, not an omission.

Why an amount on a governance record at all? The four components record commitments, judgments, expectations, and events — and commitments are assets in the accountant's sense: a receivable is a promise, and so is a grant of authority. Where a commitment is bounded, the amount can carry its measure — a 50,000 USD approval ceiling, say. Where an event has no measure, the amount carries the honest value 0 — an assertion that nothing was measured, not an omission. How the catalog defines the amount's measure per transaction-type family is an open item of the general-audit coverage pass.

What to observe in the record

  • The policy evaluation’s formula identifier proves which policy definition was declared and that it is unaltered since — not that the policy ran, or ran correctly.
  • F29 carries a digest-identified external artifact — the attested release artifact.
  • Business and governance records validate under the same rules; the columns differ in content, not structure.

Wire 4.2 record

This record is a teaching example, emitted by the FORAY generator (template governance-agent-activity) — not hand-written. No blockchain anchoring has occurred or is implied; anchor-related fields are placeholders. Parties, amounts, and dates are illustrative. Wire keys are catalog codes (F-codes); the readable names used in the prose above are the implementer register, which never appears in hashed bytes.

{
  "F1": "GOV_2026_Q3_AGENT_DEPLOY_A17",
  "F2": "GOV_2026_Q3_AGENT_DEPLOY_A17",
  "F3": "Done In Seven LLC",
  "F7": 0,
  "F8": "USD",
  "F26": "agent_activity_record",
  "schema_version": "4.2",
  "timestamp": "2026-07-24T11:20:00Z",
  "arrangements": [
    {
      "F4": "authority_grant",
      "F5": [
        {
          "jurisdiction": "US-FL",
          "name": "Done In Seven LLC",
          "role": "Principal"
        },
        {
          "jurisdiction": "US-FL",
          "name": "deploy-agent-a17",
          "role": "Agent"
        }
      ],
      "F11": "2026-07-24T09:00:00Z",
      "F14": "2026-07-24T23:59:59Z",
      "F25": {
        "grant_scope": "production deploy of service worker, single release window"
      },
      "F29": [
        "sha256:c4a1f2e8d7b9035612384756a9c0e1f2d3b4a5c6e7f8091a2b3c4d5e6f708192"
      ],
      "id": "ARR_AUTH_GRANT_A17"
    }
  ],
  "accruals": [
    {
      "F4": "policy_evaluation",
      "F13": "2026-07-24T11:00:00Z",
      "F14": "2026-07-24T11:05:00Z",
      "F17": "Calculated",
      "F18": "hash_2b7e1a9c4f6d80351927c5e8a0b3d6f1",
      "F19": {
        "boot_check": 1,
        "release_window_open": 1,
        "tests_green": 1
      },
      "F20": 1,
      "F22": [
        "ARR_AUTH_GRANT_A17"
      ],
      "id": "ACC_POLICY_EVAL_A17"
    }
  ],
  "anticipations": [
    {
      "F4": "expected_agent_behavior",
      "F22": [
        "ARR_AUTH_GRANT_A17"
      ],
      "F23": [
        "ACC_POLICY_EVAL_A17"
      ],
      "F27": "2026-07-24T11:30:00Z",
      "F28": 0.99,
      "id": "ANT_EXPECTED_DEPLOY"
    }
  ],
  "actions": [
    {
      "F4": "agent_deploy_action",
      "F6": "production environment",
      "F9": 0,
      "F12": "2026-07-24T11:18:42Z",
      "F15": "verdict_pass",
      "F22": [
        "ARR_AUTH_GRANT_A17"
      ],
      "F23": [
        "ACC_POLICY_EVAL_A17"
      ],
      "F24": [
        "ANT_EXPECTED_DEPLOY"
      ],
      "F25": {
        "release_version": "d15673ea",
        "trace_id": "wf-2026-07-24-a17-0042"
      },
      "id": "ACT_DEPLOY_EXECUTED"
    }
  ],
  "component_hashes": {
    "accruals": "sha256:PLACEHOLDER",
    "actions": "sha256:PLACEHOLDER",
    "anticipations": "sha256:PLACEHOLDER",
    "arrangements": "sha256:PLACEHOLDER"
  },
  "merkle_root": "sha256:PLACEHOLDER",
  "blockchain_anchor": {
    "anchored_at": null,
    "block_height": null,
    "confirmation_time_ms": null,
    "kaspa_tx_id": null
  }
}

Canonical form — the hashed bytes

The canonical byte form is a single line: F-coded members in ascending numeric order, envelope members in their ruled enumeration, one legal spelling per number. The hash below is computed over exactly the bytes shown — copy the line into any SHA-256 tool to reproduce it.

{"F1":"GOV_2026_Q3_AGENT_DEPLOY_A17","F2":"GOV_2026_Q3_AGENT_DEPLOY_A17","F3":"Done In Seven LLC","F7":0,"F8":"USD","F26":"agent_activity_record","schema_version":"4.2","timestamp":"2026-07-24T11:20:00Z","arrangements":[{"F4":"authority_grant","F5":[{"jurisdiction":"US-FL","name":"Done In Seven LLC","role":"Principal"},{"jurisdiction":"US-FL","name":"deploy-agent-a17","role":"Agent"}],"F11":"2026-07-24T09:00:00Z","F14":"2026-07-24T23:59:59Z","F25":{"grant_scope":"production deploy of service worker, single release window"},"F29":["sha256:c4a1f2e8d7b9035612384756a9c0e1f2d3b4a5c6e7f8091a2b3c4d5e6f708192"],"id":"ARR_AUTH_GRANT_A17"}],"accruals":[{"F4":"policy_evaluation","F13":"2026-07-24T11:00:00Z","F14":"2026-07-24T11:05:00Z","F17":"Calculated","F18":"hash_2b7e1a9c4f6d80351927c5e8a0b3d6f1","F19":{"boot_check":1,"release_window_open":1,"tests_green":1},"F20":1,"F22":["ARR_AUTH_GRANT_A17"],"id":"ACC_POLICY_EVAL_A17"}],"anticipations":[{"F4":"expected_agent_behavior","F22":["ARR_AUTH_GRANT_A17"],"F23":["ACC_POLICY_EVAL_A17"],"F27":"2026-07-24T11:30:00Z","F28":0.99,"id":"ANT_EXPECTED_DEPLOY"}],"actions":[{"F4":"agent_deploy_action","F6":"production environment","F9":0,"F12":"2026-07-24T11:18:42Z","F15":"verdict_pass","F22":["ARR_AUTH_GRANT_A17"],"F23":["ACC_POLICY_EVAL_A17"],"F24":["ANT_EXPECTED_DEPLOY"],"F25":{"release_version":"d15673ea","trace_id":"wf-2026-07-24-a17-0042"},"id":"ACT_DEPLOY_EXECUTED"}],"component_hashes":{"accruals":"sha256:PLACEHOLDER","actions":"sha256:PLACEHOLDER","anticipations":"sha256:PLACEHOLDER","arrangements":"sha256:PLACEHOLDER"},"merkle_root":"sha256:PLACEHOLDER","blockchain_anchor":{"anchored_at":null,"block_height":null,"confirmation_time_ms":null,"kaspa_tx_id":null}}

Canonical-bytes SHA-256: ba094b2b36589d5cf84eef0b7285fdbfde58e5c5decf1079d271a01062c0385b

Validated against the live validator (POST /api/validate-foray): 0 errors, 0 warnings.