{
  "schema_version": "1.0.0",
  "audit_event": {
    "event_id": "evt_aml_synthetic_blocked_autoclose_20260728_01",
    "event_type": "agent.action.denied",
    "occurred_at": "2026-07-28T09:18:38.340Z",
    "recorded_at": "2026-07-28T09:18:38.400Z",
    "sequence": 5,
    "correlation": {
      "correlation_id": "corr_aml_synthetic_20260728_01",
      "execution_id": "run_aml_synthetic_20260728_01",
      "trace_id": "4bf92f3577b34da6a3ce929d0e0e4736",
      "span_id": "3c17e14f07af84de"
    },
    "scope": {
      "organization_ref": "orgref_synthetic_eu_bank_01",
      "environment": "publication-example",
      "region": "eu-synthetic",
      "retention_class": "illustrative-aml-lawful-period",
      "legal_hold": false
    },
    "actors": {
      "requester": {
        "id": "usr_synthetic_l1_analyst_014",
        "type": "user",
        "display_name": "Morgan Lee (synthetic L1 analyst)",
        "identity_provider": "synthetic-workforce-iam"
      },
      "delegated_user": {
        "id": "usr_synthetic_l1_analyst_014",
        "type": "user",
        "identity_provider": "synthetic-workforce-iam"
      },
      "service_identity": {
        "id": "svc_synthetic_aml_triage_release_12",
        "type": "service",
        "identity_provider": "synthetic-workload-identity"
      },
      "agent": {
        "id": "agent_synthetic_aml_alert_triage",
        "type": "agent",
        "display_name": "AML alert-triage agent (synthetic)"
      },
      "accountable_owner": {
        "id": "role_synthetic_head_financial_crime",
        "type": "organization",
        "display_name": "Head of financial crime (synthetic)"
      }
    },
    "components": {
      "agent": {
        "id": "aml-alert-triage-agent",
        "version": "illustrative-release-2026.07.28.12",
        "configuration_digest": "sha256:b19375e6eac8b86aff5824d20f61c155af9e85d599a1750176424b27331846a4"
      },
      "model": {
        "id": "synthetic-aml-recommendation-model",
        "version": "illustrative-2026-07-10",
        "configuration_digest": "sha256:2878a23d62a7cfd1d2cb7146f2aa4f3544f80b4f4a244a9374351613b1257bab"
      },
      "prompt_template": {
        "id": "synthetic-aml-alert-summary-prompt",
        "version": "illustrative-8.3.1",
        "configuration_digest": "sha256:2f845cc216efadab4a56cc889571643042401a37b7ab889ee4f133a3a71803d7"
      },
      "orchestrator": {
        "id": "synthetic-aml-triage-process",
        "version": "illustrative-12",
        "configuration_digest": "sha256:0fe8f53a00d40a83f68777532abeb95d5187cde4aa91dc51a2293d08787b54e2"
      }
    },
    "requested_action": {
      "action": "aml.alert.close",
      "purpose": "auto-close-alert-after-agent-triage",
      "resource": {
        "type": "aml_alert",
        "id": "ALRT-SYN-77214"
      },
      "data_boundary_ref": "boundary_synthetic_aml_case_restricted",
      "environment": "publication-example",
      "amount": {
        "value": "48000.00",
        "currency": "EUR"
      },
      "requested_at": "2026-07-28T09:18:38.200Z"
    },
    "policy": {
      "decision_id": "dec_aml_synthetic_blocked_autoclose_20260728_01",
      "policy_id": "illustrative-aml-alert-triage-policy",
      "policy_version": "illustrative-1.4.0",
      "policy_digest": "sha256:a4fc1465e4457217f909989f119ae46268619154501211421479176d201d278a",
      "inputs_digest": "sha256:2ea17a6909088e3e401874ea23f858cffb48873f9901fdb67fab398710fc6326",
      "decision": "block",
      "evaluated_at": "2026-07-28T09:18:38.300Z",
      "matched_rule_ids": [
        "aml-elevated-risk-review",
        "aml-amount-review-25000",
        "aml-autoclose-linked-case-open"
      ],
      "reason_codes": [
        "AML_ELEVATED_RISK_REVIEW",
        "AML_AMOUNT_REVIEW_25000",
        "AML_AUTOCLOSE_LINKED_CASE_OPEN"
      ]
    },
    "tool_calls": [],
    "execution": {
      "status": "not_started",
      "business_outcome": {
        "status": "not_achieved",
        "summary": "The synthetic alert remained open because policy blocked auto-close while a linked case was open.",
        "reference": "outcome_synthetic_blocked_autoclose_20260728_01"
      }
    },
    "lineage": {
      "lineage_record_id": "lin_aml_synthetic_20260728_01",
      "ordered_event_ids": [
        "evt_aml_synthetic_blocked_autoclose_20260728_01"
      ]
    },
    "evidence": {
      "manifest_ref": "bundle_manifest_aml_synthetic_20260728_01",
      "artifacts": [
        {
          "artifact_id": "artifact_blocked_auto_close_proposal_01",
          "artifact_type": "blocked-action-proposal",
          "content_digest": "sha256:1ac86ad77e356f5f920c973f06b2b3da26c77e348542f492324aca37215ad148"
        },
        {
          "artifact_id": "artifact_policy_denial_01",
          "artifact_type": "policy-decision",
          "content_digest": "sha256:cd2eb0837c9b4c962c22d2ff8b5441b7b45805887dcc65d14f916888635af041"
        }
      ]
    },
    "privacy": {
      "classification": "restricted",
      "redaction_status": "tokenized",
      "redactions": [
        {
          "json_pointer": "/actors/requester/id",
          "method": "tokenized"
        },
        {
          "json_pointer": "/requested_action/resource/id",
          "method": "tokenized"
        }
      ],
      "access_policy_ref": "illustrative-evidence-access-aml-restricted"
    }
  },
  "integrity": {
    "canonicalization": "RFC8785-JCS",
    "hash_algorithm": "SHA-256",
    "record_hash": "sha256:05dceff936064f1236dfcd80bd7e9f7f466918549031ec725a7653db05fee645",
    "signature": {
      "algorithm": "Ed25519",
      "key_id": "aml-publication-sample-event-01-v2-2026-07-28",
      "public_key_spki": "MCowBQYDK2VwAyEA+eR9T4dE89nWJdAJFUiy4hnloj44u16/a3NnJyon4U8=",
      "value": "JrgniCBjUrh8tBQJN50U2f6HiI7mBW2zaF179pFB/MPEP/PactjE6eIsgIgyqElFIgcE9Qh/uMQ0z4Oqbmt+Bg=="
    },
    "verification": {
      "status": "valid",
      "verified_at": "2026-07-28T09:18:38.600Z",
      "verifier": {
        "id": "vendor-neutral-reference-verifier",
        "version": "1.0.0"
      },
      "failure_codes": []
    }
  }
}