{"resource":"https://rs-payments.demo.cba.raidiam.io","counts":{"total":29,"allowed":9,"denied":20,"by_reason":{"missing_access_token":5,"invoice_already_settled":2,"insufficient_authority":1,"envelope_not_identified":10,"envelope_budget_exceeded":2}},"decisions":[{"id":"dfe4581c-5012-4132-a1d6-15fd44a9dbd4","tool":"execute_payment","transport":"mcp","subject":"54d24a9428a94dac01af1e7b","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"b43328df-4a56-41ee-8b1f-bf91d7992b93","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"54d24a9428a94dac01af1e7b","root_grant":null,"checked_at":"2026-08-31T04:28:41.287Z"},"service":"rs-payments","at":"2026-08-31T04:28:41.287Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"e62d8d8a-33a9-4ae8-bda2-58e35c78f713","tool":"execute_payment","transport":"mcp","subject":"72124e92807e2d9720b912e3","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"05322219-a15e-428b-b533-9efc4e3c6a0b","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"72124e92807e2d9720b912e3","root_grant":null,"checked_at":"2026-08-30T13:38:54.136Z"},"service":"rs-payments","at":"2026-08-30T13:38:54.137Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"072546e4-e30e-4f8b-8c6e-6fa848693efb","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"cb19b651-7196-43c3-9ff0-f887b40b6cb4","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":null,"checked_at":"2026-08-28T07:21:31.444Z"},"service":"rs-payments","at":"2026-08-28T07:21:31.444Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"6d315235-e5e9-442c-8340-2006b466bdb2","tool":"execute_payment","transport":"mcp","subject":"72124e92807e2d9720b912e3","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"90ce83b0-a4f0-4796-a63c-7274378baa53","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"72124e92807e2d9720b912e3","root_grant":null,"checked_at":"2026-08-27T09:48:20.486Z"},"service":"rs-payments","at":"2026-08-27T09:48:20.486Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"fdeeb4a5-3a98-4801-8556-a9bfd941194c","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"b1bdb8ca-999a-4e3f-aa82-5fe289fec96b","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":null,"checked_at":"2026-08-27T09:47:19.706Z"},"service":"rs-payments","at":"2026-08-27T09:47:19.706Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"898c79bb-6e17-4bd9-8960-fa8bb8c3a2c1","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > ap-orchestrator","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"7304e930-e9d6-4730-ac28-3e5d5788c15c","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","checked_at":"2026-08-27T02:15:44.409Z"},"service":"rs-payments","at":"2026-08-27T02:15:44.409Z","outcome":"deny","status":422,"reason":"envelope_budget_exceeded","message":"This payment of AUD 20,000.00 would take cumulative spend under this delegation to AUD 56,300.00, past the AUD 50,000.00 the customer approved. AUD 36,300.00 has already been settled across 3 payment legs, leaving AUD 13,700.00.","policy":"pay.cumulative_envelope","detail":{"requested":20000,"already_spent":36300,"envelope":50000,"remaining":13700,"would_total":56300,"currency":"AUD","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","dual_authorised":true},"remedy":{"action":"reauthorise","description":"The envelope is the customer approved ceiling for the whole delegation, and a second approver does not raise it. The customer must approve a larger envelope, or this invoice waits for the next one."}},{"id":"6bc6efc8-6f52-4968-b163-d88f4412eeb7","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > invoice-agent-INV-1044 > ap-orchestrator","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"5942cbcd-3933-4f37-a92f-8e5c8bc538df","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1044","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","checked_at":"2026-08-27T02:15:44.196Z"},"service":"rs-payments","at":"2026-08-27T02:15:44.197Z","outcome":"deny","status":422,"reason":"envelope_budget_exceeded","message":"This payment of AUD 20,000.00 would take cumulative spend under this delegation to AUD 56,300.00, past the AUD 50,000.00 the customer approved. AUD 36,300.00 has already been settled across 3 payment legs, leaving AUD 13,700.00.","policy":"pay.cumulative_envelope","detail":{"requested":20000,"already_spent":36300,"envelope":50000,"remaining":13700,"would_total":56300,"currency":"AUD","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","dual_authorised":true},"remedy":{"action":"reauthorise","description":"The envelope is the customer approved ceiling for the whole delegation, and a second approver does not raise it. The customer must approve a larger envelope, or this invoice waits for the next one."}},{"id":"70d13936-7f50-49a6-8101-85b34f94c64f","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > invoice-agent-INV-1043 > ap-orchestrator","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"4e1c741e-27f4-4621-be32-5f738362752b","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1043","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","checked_at":"2026-08-27T02:15:43.907Z"},"service":"rs-payments","at":"2026-08-27T02:15:43.908Z","outcome":"allow","status":200},{"id":"24c2104b-b0cf-44d4-8a44-ebd8e9f3a9c9","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > invoice-agent-INV-1042 > ap-orchestrator","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"02d762eb-063a-4d60-a4ae-00baa7576a08","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1042","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","checked_at":"2026-08-27T02:15:42.510Z"},"service":"rs-payments","at":"2026-08-27T02:15:42.510Z","outcome":"allow","status":200},{"id":"a7de0e11-3a0c-4479-87aa-60ea0255cc3e","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > invoice-agent-INV-1041 > ap-orchestrator","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"204a1390-eb45-4b66-bcd1-16b3334370c9","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1041","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"8-EdxxsXYOLJJYg4cZNqmB7fvi9VnUM7pRzY4Pwf1FN","checked_at":"2026-08-27T02:15:42.176Z"},"service":"rs-payments","at":"2026-08-27T02:15:42.177Z","outcome":"allow","status":200},{"id":"3971af06-e669-4b7a-9d04-3bc9e82e70b3","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > ap-orchestrator","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"f56a484e-1ea6-4436-b1c3-61877d8359ee","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","checked_at":"2026-08-27T02:07:36.289Z"},"service":"rs-payments","at":"2026-08-27T02:07:36.290Z","outcome":"deny","status":422,"reason":"invoice_already_settled","message":"Invoice INV-1044 was already settled under this delegation for AUD 20,000.00. A second sub agent asking to pay it again is refused.","policy":"pay.no_duplicate_settlement","detail":{"invoice":"INV-1044","original_settlement_id":"13443df8-31ec-45c0-9915-47cb57a68ca5","original_amount":20000,"originally_settled_at":"2026-08-27T02:07:36.075Z","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH"},"remedy":{"action":"none","description":"The invoice is paid. If the payment was wrong it is reversed through the bank, not by paying again."}},{"id":"b42fce81-6574-420b-9765-1b1a9a8fc17b","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > invoice-agent-INV-1044 > ap-orchestrator","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"2e4b74ca-f39b-4a53-a8fc-721fa376b33b","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1044","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","checked_at":"2026-08-27T02:07:36.071Z"},"service":"rs-payments","at":"2026-08-27T02:07:36.075Z","outcome":"allow","status":200},{"id":"bbd884ab-9406-4187-9348-f061ebeaae61","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > invoice-agent-INV-1042 > ap-orchestrator","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"1aee6cf2-8cd6-4be9-a8f4-4c93eccaa929","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1042","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","checked_at":"2026-08-27T02:06:47.386Z"},"service":"rs-payments","at":"2026-08-27T02:06:47.387Z","outcome":"allow","status":200},{"id":"4fe41ac7-2bb9-4e7e-b1c5-a72a48ab5e4b","tool":"execute_payment","transport":"mcp","subject":"50e4876873ae45e8ca060fc8","actor_chain":"payment-agent > invoice-agent-INV-1041 > ap-orchestrator","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"a68b4767-34c4-415c-a053-c470ea3c3c8d","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1041","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"50e4876873ae45e8ca060fc8","root_grant":"mO-hlezEVMAM3JjaB-BvLRZiHJFjM7B4CAwm9AR_IYH","checked_at":"2026-08-27T02:06:47.012Z"},"service":"rs-payments","at":"2026-08-27T02:06:47.024Z","outcome":"allow","status":200},{"id":"d13f8770-bec5-4120-b133-db1ce6ca16c5","tool":"execute_payment","transport":"mcp","subject":"72124e92807e2d9720b912e3","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"6c04582d-e7eb-4021-bed8-b5b58b14872f","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"72124e92807e2d9720b912e3","root_grant":null,"checked_at":"2026-08-26T10:15:09.996Z"},"service":"rs-payments","at":"2026-08-26T10:15:09.996Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"807b6636-1eae-4924-b383-095227aa7b9e","tool":"execute_payment","transport":"mcp","subject":"72124e92807e2d9720b912e3","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"8c3fd317-1d68-4bd6-99e9-fbc951310872","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"72124e92807e2d9720b912e3","root_grant":null,"checked_at":"2026-08-26T09:50:08.807Z"},"service":"rs-payments","at":"2026-08-26T09:50:08.808Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"f8716b25-a977-4db9-ac81-7db8aca88ecf","tool":"execute_payment","transport":"http","required_type":"payment_initiation","correlation_id":"2cbcf916-02d3-4d5c-b7bd-19a413bb3240","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":null,"trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"not_established","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":null,"root_grant":null,"checked_at":"2026-08-25T06:57:57.412Z"},"service":"rs-payments","at":"2026-08-25T06:57:57.412Z","outcome":"deny","status":401,"reason":"missing_access_token","message":"This resource requires an access token issued by https://commbiz.demo.cba.raidiam.io and carrying an authorization_details entry of type payment_initiation.","policy":"rs.authenticated_caller","detail":{"required_authorization_details_type":"payment_initiation","authorization_server":"https://commbiz.demo.cba.raidiam.io"},"remedy":{"action":"obtain_token","description":"Read the protected resource metadata, then request a token from the authorization server it names.","requires":["authorization_details type payment_initiation"]}},{"id":"6268c69c-6094-4c68-bc72-a2a3de3bb374","tool":"execute_payment","transport":"mcp","subject":"72124e92807e2d9720b912e3","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"03f33691-6134-469e-8069-e3ed20506b7f","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"72124e92807e2d9720b912e3","root_grant":null,"checked_at":"2026-08-25T06:27:35.354Z"},"service":"rs-payments","at":"2026-08-25T06:27:35.354Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"e32a3ec1-b459-45f1-98c3-7abb94626fe1","tool":"execute_payment","transport":"mcp","subject":"54d24a9428a94dac01af1e7b","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"7dbf8980-736e-40c4-8b18-fdba96ccd158","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"54d24a9428a94dac01af1e7b","root_grant":null,"checked_at":"2026-08-25T06:25:19.653Z"},"service":"rs-payments","at":"2026-08-25T06:25:19.653Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"1fbb4a44-e410-4873-a121-fc1bf7549707","tool":"execute_payment","transport":"mcp","required_type":"payment_initiation","correlation_id":"d1fab2c2-3b39-4927-b91b-977650648d12","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":null,"trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"not_established","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":null,"root_grant":null,"checked_at":"2026-08-25T03:47:21.609Z"},"service":"rs-payments","at":"2026-08-25T03:47:21.609Z","outcome":"deny","status":401,"reason":"missing_access_token","message":"This resource requires an access token issued by https://commbiz.demo.cba.raidiam.io and carrying an authorization_details entry of type payment_initiation.","policy":"rs.authenticated_caller","detail":{"required_authorization_details_type":"payment_initiation","authorization_server":"https://commbiz.demo.cba.raidiam.io"},"remedy":{"action":"obtain_token","description":"Read the protected resource metadata, then request a token from the authorization server it names.","requires":["authorization_details type payment_initiation"]}},{"id":"892aaea1-3422-4656-80ef-d9302bbbb5ec","tool":"execute_payment","transport":"mcp","required_type":"payment_initiation","correlation_id":"c862d86a-0fa5-4f4a-ad0c-704290844968","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":null,"trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"not_established","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":null,"root_grant":null,"checked_at":"2026-08-25T03:33:58.906Z"},"service":"rs-payments","at":"2026-08-25T03:33:58.906Z","outcome":"deny","status":401,"reason":"missing_access_token","message":"This resource requires an access token issued by https://commbiz.demo.cba.raidiam.io and carrying an authorization_details entry of type payment_initiation.","policy":"rs.authenticated_caller","detail":{"required_authorization_details_type":"payment_initiation","authorization_server":"https://commbiz.demo.cba.raidiam.io"},"remedy":{"action":"obtain_token","description":"Read the protected resource metadata, then request a token from the authorization server it names.","requires":["authorization_details type payment_initiation"]}},{"id":"b2a03a36-7d36-4002-8b32-6b38af63e73d","tool":"execute_payment","transport":"mcp","subject":"54d24a9428a94dac01af1e7b","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"c17b94b9-3869-48fb-8414-f4eb20626e87","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"54d24a9428a94dac01af1e7b","root_grant":null,"checked_at":"2026-08-25T02:22:10.271Z"},"service":"rs-payments","at":"2026-08-25T02:22:10.271Z","outcome":"deny","status":422,"reason":"envelope_not_identified","message":"The access token carries no root_grant claim, so this payment cannot be counted against a delegation envelope. Payments that cannot be counted are not made.","policy":"pay.envelope_required","detail":{"required_claim":"root_grant"},"remedy":{"action":"request_authority","description":"Obtain the token through the delegation chain that begins with the customer approval, so it carries the root_grant of that delegation.","requires":["root_grant"]}},{"id":"0094bdf3-d5f4-499c-b369-088e7a769b7d","tool":"execute_payment","transport":"mcp","required_type":"payment_initiation","correlation_id":"88b23e0e-eecd-4da0-9228-5c41dbfebfb8","correlation_source":"header","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":"54d24a9428a94dac01af1e7b","root_grant":null,"checked_at":"2026-08-25T02:15:37.023Z"},"subject":"54d24a9428a94dac01af1e7b","held_types":[],"service":"rs-payments","at":"2026-08-25T02:15:37.023Z","outcome":"deny","status":403,"reason":"insufficient_authority","message":"Calling execute_payment requires an authorization_details entry of type payment_initiation. This token carries no authorization_details at all, and none of those narrow to it.","policy":"rs.authority_gate","detail":{"required_authorization_details_type":"payment_initiation","held_authorization_details_types":[],"tool":"execute_payment"},"remedy":{"action":"request_authority","description":"Ask the authorization server for a token carrying payment_initiation. Delegation only ever narrows, so the delegating envelope must already contain it.","requires":["payment_initiation"]}},{"id":"38928ad6-0f85-445a-8bba-d55e3f05f6cc","tool":"execute_payment","transport":"mcp","subject":"ellery.tan@example.com","actor_chain":"payment-agent > ap-orchestrator","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"206969a6-7776-4be7-aebb-5d282fec93d7","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"ellery.tan@example.com","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","checked_at":"2026-08-24T00:21:25.226Z"},"service":"rs-payments","at":"2026-08-24T00:21:25.227Z","outcome":"deny","status":422,"reason":"invoice_already_settled","message":"Invoice INV-1044 was already settled under this delegation for AUD 20,000.00. A second sub agent asking to pay it again is refused.","policy":"pay.no_duplicate_settlement","detail":{"invoice":"INV-1044","original_settlement_id":"2939f0ce-59f8-413f-b585-332ce04d4d2b","original_amount":20000,"originally_settled_at":"2026-08-24T00:21:24.928Z","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574"},"remedy":{"action":"none","description":"The invoice is paid. If the payment was wrong it is reversed through the bank, not by paying again."}},{"id":"c5644a04-c5cc-4187-bf0f-6932388521b3","tool":"execute_payment","transport":"mcp","subject":"ellery.tan@example.com","actor_chain":"payment-agent > invoice-agent-INV-1044 > ap-orchestrator","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"e52e58b8-400c-4346-abae-e4494ff81a0a","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1044","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"ellery.tan@example.com","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","checked_at":"2026-08-24T00:21:24.927Z"},"service":"rs-payments","at":"2026-08-24T00:21:24.928Z","outcome":"allow","status":200},{"id":"309e2bab-f13b-49a1-a08c-27170732be6d","tool":"execute_payment","transport":"mcp","subject":"ellery.tan@example.com","actor_chain":"payment-agent > invoice-agent-INV-1042 > ap-orchestrator","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"80fb8b7f-3a99-416e-89a8-e807f616c3a4","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1042","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"ellery.tan@example.com","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","checked_at":"2026-08-24T00:20:38.166Z"},"service":"rs-payments","at":"2026-08-24T00:20:38.167Z","outcome":"allow","status":200},{"id":"b6f87402-bc00-4d86-85e4-27c124f66595","tool":"execute_payment","transport":"mcp","subject":"ellery.tan@example.com","actor_chain":"payment-agent > invoice-agent-INV-1041 > ap-orchestrator","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","held_types":["payment_initiation"],"required_type":"payment_initiation","correlation_id":"3951ba43-e411-4714-bba6-bb51a851a2f8","correlation_source":"arguments","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":"cba-op-commbiz-es","trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"verified","agent_identity":"payment-agent","agent_identity_chain":["payment-agent","invoice-agent-INV-1041","ap-orchestrator"],"agent_identity_source":"act_chain_asserted_by_authorization_server","delegating_subject":"ellery.tan@example.com","root_grant":"ea5f9dde-44fa-4d38-acdf-78558f668574","checked_at":"2026-08-24T00:20:37.820Z"},"service":"rs-payments","at":"2026-08-24T00:20:37.824Z","outcome":"allow","status":200},{"id":"2566cc58-85a4-4c50-97f1-d9e7475a0f19","tool":"execute_payment","transport":"http","required_type":"payment_initiation","correlation_id":"96a59c74-86f6-4cd1-880d-afc4cc7c0677","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":null,"trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"not_established","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":null,"root_grant":null,"checked_at":"2026-08-22T11:45:38.279Z"},"service":"rs-payments","at":"2026-08-22T11:45:38.279Z","outcome":"deny","status":401,"reason":"missing_access_token","message":"This resource requires an access token issued by https://commbiz.demo.cba.raidiam.io and carrying an authorization_details entry of type payment_initiation.","policy":"rs.authenticated_caller","detail":{"required_authorization_details_type":"payment_initiation","authorization_server":"https://commbiz.demo.cba.raidiam.io"},"remedy":{"action":"obtain_token","description":"Read the protected resource metadata, then request a token from the authorization server it names.","requires":["authorization_details type payment_initiation"]}},{"id":"d4f4d64d-e134-4fd9-99a1-a0bb973f5913","tool":"get_envelope_status","transport":"mcp","required_type":"payment_initiation","correlation_id":"fb4a4424-fb86-4a91-ba1e-a086ae825d8f","correlation_source":"generated","trust":{"authorization_server":"https://commbiz.demo.cba.raidiam.io","token_key_id":null,"trust_anchor":"https://authority.directory.cba.raidiam.io/authority/5a27c88b-97ed-4d37-a3c8-59c66b19aa25","authorization_server_chain":"not_established","agent_identity":null,"agent_identity_chain":[],"agent_identity_source":"not_present","delegating_subject":null,"root_grant":null,"checked_at":"2026-08-22T11:45:23.258Z"},"service":"rs-payments","at":"2026-08-22T11:45:23.258Z","outcome":"deny","status":401,"reason":"missing_access_token","message":"This resource requires an access token issued by https://commbiz.demo.cba.raidiam.io and carrying an authorization_details entry of type payment_initiation.","policy":"rs.authenticated_caller","detail":{"required_authorization_details_type":"payment_initiation","authorization_server":"https://commbiz.demo.cba.raidiam.io"},"remedy":{"action":"obtain_token","description":"Read the protected resource metadata, then request a token from the authorization server it names.","requires":["authorization_details type payment_initiation"]}}]}