Sample Decision Record
This sample shows the categories of evidence BeaconGuard preserves around a consequential-action decision. It is illustrative, synthetic, and not a normative public API schema.
Record anatomy
Verifiable Decision Record anatomy
Authorization result
- Decision scope (consequential action)
- ACTION ALLOW or ACTION DENY
- Reason / failed condition
Exact-action identity
- Material action description / type
- Canonical action identity or digest
- Target resource / system context
Actor and delegated authority
- Human / service / agent identity
- Delegation chain or authority context
- Tenant and environment binding
Governing policy authority
- release_identity
- release / manifest integrity identity
- playbook / policy identity
- trust epoch or equivalent trust state
Execution authority
- One-time grant identity when ALLOW
- Grant binding to material-action identity
- Consumption / reuse status
Evidence integrity
- Evidence / correlation identity
- Integrity-verification information
- Reconstruction inputs and references
Text version
The evidence model distinguishes the action being authorized, the actor and delegated authority, the verified release allowed to govern the decision, one-time execution authority when ALLOW is issued, and integrity information required for verification and deterministic reconstruction.
Illustrative DENY record
Decision scope CONSEQUENTIAL_ACTION
Decision outcome ACTION DENY
Reason Required approval absent for the proposed side effect
Material action patient_followup.schedule
material_action_digest sha256:illustrative-action-digest
release_identity release.healthcare.ops.v12
release_manifest_identity sha256:illustrative-release-manifest
playbook_identity playbook.healthcare.followup.v12
Actor / agent context Synthetic delegated discharge-operations agent
Execution authority NOT ISSUED
Outcome No scheduling side effect
What reviewers should notice
- The evidence describes the action decision, not the business transaction itself.
- The exact material action has a deterministic identity separate from the original request.
- The record identifies the verified release / policy authority that governed the decision.
- Actor and delegated-authority context are decision inputs, not substitutes for the action decision.
- DENY issues no execution authority.
- ALLOW records can additionally identify a one-time execution grant and its consumption state.