capsule/examples/policy-denied-action.json at main · quantumpipes/capsule · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
{
  "id": "c3d4e5f6-a7b8-4c9d-0e1f-2a3b4c5d6e7f",
  "type": "tool",
  "domain": "agents",
  "parent_id": "b2c3d4e5-f6a7-4b8c-9d0e-1f2a3b4c5d6e",
  "sequence": 44,
  "previous_hash": "d8e9f0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9",
  "trigger": {
    "type": "agent",
    "source": "cleanup-agent",
    "timestamp": "2026-03-07T15:02:47+00:00",
    "request": "Delete stale test databases from production server",
    "correlation_id": "cleanup-2026-0307",
    "user_id": null
  },
  "context": {
    "agent_id": "cleanup-agent",
    "session_id": "sess-cleanup-01",
    "environment": {
      "server": "prod-db-01.example.com",
      "databases_found": ["test_20260301", "test_20260215", "payments_db"],
      "disk_usage_pct": 78
    }
  },
  "reasoning": {
    "analysis": "Found 3 databases on prod-db-01. Two are stale test databases (test_20260301, test_20260215). One is the production payments database. Will attempt to drop the test databases.",
    "options": [
      {
        "id": "opt_0",
        "description": "Drop stale test databases",
        "pros": [
          "Recovers disk space",
          "Removes unnecessary data from production server"
        ],
        "cons": [
          "Destructive operation on production server"
        ],
        "estimated_impact": {
          "scope": "production-server",
          "severity": "medium",
          "reversibility": "none"
        },
        "feasibility": 0.8,
        "risks": [
          "Accidentally dropping the wrong database"
        ],
        "selected": true,
        "rejection_reason": ""
      }
    ],
    "options_considered": [
      "Drop stale test databases"
    ],
    "selected_option": "Drop stale test databases",
    "reasoning": "Disk usage is at 78%. Stale test databases should be cleaned up.",
    "confidence": 0.75,
    "model": null,
    "prompt_hash": null
  },
  "authority": {
    "type": "policy",
    "approver": null,
    "policy_reference": "POLICY-DENY-DESTRUCTIVE-PROD",
    "chain": [
      {
        "level": 1,
        "actor": "policy-engine",
        "decision": "denied",
        "reason": "DROP DATABASE on production server requires human approval (POLICY-DENY-DESTRUCTIVE-PROD)"
      }
    ],
    "escalation_reason": null
  },
  "execution": {
    "tool_calls": [
      {
        "tool": "db_drop",
        "arguments": {
          "server": "prod-db-01.example.com",
          "database": "test_20260301"
        },
        "result": null,
        "success": false,
        "duration_ms": 0,
        "error": "Blocked by policy POLICY-DENY-DESTRUCTIVE-PROD: DROP DATABASE on production server requires human approval"
      }
    ],
    "duration_ms": 1,
    "resources_used": {}
  },
  "outcome": {
    "status": "failure",
    "result": null,
    "summary": "Destructive action denied by policy. DROP DATABASE blocked on production server.",
    "error": "Action blocked: POLICY-DENY-DESTRUCTIVE-PROD requires human approval for destructive operations on production servers",
    "side_effects": [
      "Alert sent to ops-team: cleanup-agent attempted DROP DATABASE on prod-db-01"
    ],
    "metrics": {}
  }
}