{
  "schema_version": "1.0.0",
  "audit_event": {
    "event_id": "evt_aml_synthetic_escalated_disposition_20260728_02",
    "event_type": "agent.action.completed",
    "occurred_at": "2026-07-28T09:18:44.481Z",
    "recorded_at": "2026-07-28T09:18:44.612Z",
    "sequence": 6,
    "correlation": {
      "correlation_id": "corr_aml_synthetic_20260728_01",
      "execution_id": "run_aml_synthetic_20260728_02",
      "trace_id": "4bf92f3577b34da6a3ce929d0e0e4736",
      "span_id": "00f067aa0ba902b7",
      "parent_event_id": "evt_aml_synthetic_blocked_autoclose_20260728_01"
    },
    "scope": {
      "organization_ref": "orgref_synthetic_eu_bank_01",
      "environment": "publication-example",
      "region": "eu-synthetic",
      "retention_class": "illustrative-aml-lawful-period",
      "legal_hold": false
    },
    "actors": {
      "requester": {
        "id": "usr_synthetic_l1_analyst_014",
        "type": "user",
        "display_name": "Morgan Lee (synthetic L1 analyst)",
        "identity_provider": "synthetic-workforce-iam"
      },
      "delegated_user": {
        "id": "usr_synthetic_l1_analyst_014",
        "type": "user",
        "identity_provider": "synthetic-workforce-iam"
      },
      "service_identity": {
        "id": "svc_synthetic_aml_triage_release_12",
        "type": "service",
        "identity_provider": "synthetic-workload-identity"
      },
      "agent": {
        "id": "agent_synthetic_aml_alert_triage",
        "type": "agent",
        "display_name": "AML alert-triage agent (synthetic)"
      },
      "accountable_owner": {
        "id": "role_synthetic_head_financial_crime",
        "type": "organization",
        "display_name": "Head of financial crime (synthetic)"
      }
    },
    "components": {
      "agent": {
        "id": "aml-alert-triage-agent",
        "version": "illustrative-release-2026.07.28.12",
        "configuration_digest": "sha256:b19375e6eac8b86aff5824d20f61c155af9e85d599a1750176424b27331846a4"
      },
      "model": {
        "id": "synthetic-aml-recommendation-model",
        "version": "illustrative-2026-07-10",
        "configuration_digest": "sha256:2878a23d62a7cfd1d2cb7146f2aa4f3544f80b4f4a244a9374351613b1257bab"
      },
      "prompt_template": {
        "id": "synthetic-aml-alert-summary-prompt",
        "version": "illustrative-8.3.1",
        "configuration_digest": "sha256:2f845cc216efadab4a56cc889571643042401a37b7ab889ee4f133a3a71803d7"
      },
      "orchestrator": {
        "id": "synthetic-aml-triage-process",
        "version": "illustrative-12",
        "configuration_digest": "sha256:0fe8f53a00d40a83f68777532abeb95d5187cde4aa91dc51a2293d08787b54e2"
      }
    },
    "requested_action": {
      "action": "aml.case.write_disposition",
      "purpose": "record-reviewer-approved-escalation-after-blocked-auto-close",
      "resource": {
        "type": "aml_case",
        "id": "CASE-SYN-AML-2026-0728"
      },
      "data_boundary_ref": "boundary_synthetic_aml_case_restricted",
      "environment": "publication-example",
      "amount": {
        "value": "48000.00",
        "currency": "EUR"
      },
      "requested_at": "2026-07-28T09:18:39.122Z"
    },
    "policy": {
      "decision_id": "dec_aml_synthetic_escalation_20260728_01",
      "policy_id": "illustrative-aml-alert-triage-policy",
      "policy_version": "illustrative-1.4.0",
      "policy_digest": "sha256:a4fc1465e4457217f909989f119ae46268619154501211421479176d201d278a",
      "inputs_digest": "sha256:6bad7c722468ec1f1730f603453ad86505799c0b7a91ec2871c57f517d0eb594",
      "decision": "require_approval",
      "evaluated_at": "2026-07-28T09:18:39.188Z",
      "matched_rule_ids": [
        "aml-elevated-risk-review",
        "aml-amount-review-25000"
      ],
      "reason_codes": [
        "AML_ELEVATED_RISK_REVIEW",
        "AML_AMOUNT_REVIEW_25000"
      ]
    },
    "approval": {
      "request_id": "dr_aml_synthetic_20260728_01",
      "status": "decided",
      "requested_at": "2026-07-28T09:18:39.214Z",
      "expires_at": "2026-07-28T09:48:39.214Z",
      "required_role": "l2_financial_crime_investigator",
      "presented_evidence_digest": "sha256:f224e8ef1ef619f46587e96705cb4224fb302548149acfb19a0e9fb4aeef6cc4",
      "reviewer": {
        "id": "usr_synthetic_l2_investigator_031",
        "type": "user",
        "display_name": "Avery Quinn (synthetic L2 investigator)",
        "identity_provider": "synthetic-workforce-iam"
      },
      "decision": "approved",
      "reason_code": "synthetic_escalation_preserves_linked_case_review",
      "rationale_reference": "decision-note-synthetic-tokenized-031",
      "decided_at": "2026-07-28T09:18:42.902Z"
    },
    "tool_calls": [
      {
        "call_id": "call_aml_synthetic_case_disposition_01",
        "tool_id": "case-management.aml-disposition",
        "tool_version": "illustrative-2026-07-09",
        "action": "write_disposition",
        "destination": "synthetic-aml-case-system-of-record",
        "requested_at": "2026-07-28T09:18:42.944Z",
        "arguments_digest": "sha256:98af9aa314cf9fc2f4e5d2ba3dfd6b0ce8c1257d5e20fe322b41f244b21004f4",
        "idempotency_key": "run_aml_synthetic_20260728_02:write-escalation-disposition",
        "status": "succeeded",
        "completed_at": "2026-07-28T09:18:44.433Z",
        "result_digest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881",
        "downstream_effects": [
          {
            "system": "synthetic-aml-case-system-of-record",
            "effect_type": "case_disposition_updated",
            "effect_reference": "effect_synthetic_CASE-SYN-AML-2026-0728_01",
            "before_state_digest": "sha256:ec70c9a1c8fc8ec3d44de649f5d00a6c19352b965e8be9a757783cba06c8c131",
            "after_state_digest": "sha256:91cc2b32a36b12f15a0d6c6153b796f805c7064c07cb8a88e0f663e7085f8d2b"
          }
        ]
      }
    ],
    "execution": {
      "status": "succeeded",
      "started_at": "2026-07-28T09:18:42.920Z",
      "completed_at": "2026-07-28T09:18:44.481Z",
      "business_outcome": {
        "status": "achieved",
        "summary": "The synthetic case disposition changed from open_pending_triage to escalated_l3 after reviewer approval.",
        "reference": "outcome_synthetic_CASE-SYN-AML-2026-0728_01"
      },
      "rollback": {
        "status": "not_required",
        "reference": "illustrative-aml-case-compensation-policy"
      }
    },
    "lineage": {
      "lineage_record_id": "lin_aml_synthetic_20260728_02",
      "ordered_event_ids": [
        "evt_aml_synthetic_blocked_autoclose_20260728_01",
        "evt_aml_synthetic_escalated_disposition_20260728_02"
      ]
    },
    "evidence": {
      "manifest_ref": "bundle_manifest_aml_synthetic_20260728_01",
      "artifacts": [
        {
          "artifact_id": "artifact_policy_decision_01",
          "artifact_type": "policy-decision",
          "content_digest": "sha256:10cc9008e7e19e85e54a3b643c2b1eec5142a7d08435cc1dd754d663f249b173"
        },
        {
          "artifact_id": "artifact_l2_approval_01",
          "artifact_type": "approval-decision",
          "content_digest": "sha256:4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a"
        },
        {
          "artifact_id": "artifact_case_tool_receipt_01",
          "artifact_type": "tool-receipt",
          "content_digest": "sha256:9d6f965ac832e40a5df6c06afe983e3b41e705464b706fef489a51e6d02eb9e9"
        }
      ]
    },
    "privacy": {
      "classification": "restricted",
      "redaction_status": "tokenized",
      "redactions": [
        {
          "json_pointer": "/actors/requester/id",
          "method": "tokenized"
        },
        {
          "json_pointer": "/requested_action/resource/id",
          "method": "tokenized"
        }
      ],
      "access_policy_ref": "illustrative-evidence-access-aml-restricted"
    }
  },
  "integrity": {
    "canonicalization": "RFC8785-JCS",
    "hash_algorithm": "SHA-256",
    "record_hash": "sha256:a149d489e6d7ea38bd220fd7c43e4cc6731fb46b3ceab08657fd2ac1581a916b",
    "previous_event_hash": "sha256:05dceff936064f1236dfcd80bd7e9f7f466918549031ec725a7653db05fee645",
    "signature": {
      "algorithm": "Ed25519",
      "key_id": "aml-publication-sample-event-02-v3-2026-07-28",
      "public_key_spki": "MCowBQYDK2VwAyEAu32NyL/IJSpItAbRL+oVFFaRXC/P9Fq21UAfULsEnL0=",
      "value": "O1xO8zfe5OKZxEZXc9LeUO34Bd30HO04PeK0BYHC5orPisoytfjSC5xw/l4QpeUKoENBWtyaihiZ3d6H19PYDw=="
    },
    "verification": {
      "status": "valid",
      "verified_at": "2026-07-28T09:18:45.041Z",
      "verifier": {
        "id": "vendor-neutral-reference-verifier",
        "version": "1.0.0"
      },
      "failure_codes": []
    }
  }
}