{"trace_version":"0.1.0","event_id":"evt-000","session_id":"reference-sandbox-network-v1-session-002","sequence":0,"timestamp":"2026-08-10T00:15:00Z","type":"session.start","actor":{"kind":"harness","id":"reference-agent"},"payload":{"max_turns":8,"tool_count":1},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]}}
{"trace_version":"0.1.0","event_id":"evt-001","session_id":"reference-sandbox-network-v1-session-002","sequence":1,"timestamp":"2026-08-10T00:15:01Z","type":"user.message","actor":{"kind":"user","id":"learner"},"payload":{"content":"Inspect package metadata without contacting any other host."},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-000"}
{"trace_version":"0.1.0","event_id":"evt-002","session_id":"reference-sandbox-network-v1-session-002","sequence":2,"timestamp":"2026-08-10T00:15:02Z","type":"model.request","actor":{"kind":"harness","id":"reference-agent"},"payload":{"turn":1,"message_count":1,"roles":["user"],"tools":["fetch_package_metadata"]},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-001"}
{"trace_version":"0.1.0","event_id":"evt-003","session_id":"reference-sandbox-network-v1-session-002","sequence":3,"timestamp":"2026-08-10T00:15:03Z","type":"model.response","actor":{"kind":"model","id":"scripted-model-v1"},"payload":{"turn":1,"content":"I will request metadata through the bounded profile.","stop":false,"tool_calls":[{"id":"call-package-metadata","name":"fetch_package_metadata","arguments":{"host":"packages.example.invalid","package":"reference-harness"}}]},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-002"}
{"trace_version":"0.1.0","event_id":"evt-004","session_id":"reference-sandbox-network-v1-session-002","sequence":4,"timestamp":"2026-08-10T00:15:04Z","type":"tool.request","actor":{"kind":"model","id":"scripted-model-v1"},"payload":{"tool_call_id":"call-package-metadata","tool":"fetch_package_metadata","arguments":{"host":"packages.example.invalid","package":"reference-harness"}},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-003"}
{"trace_version":"0.1.0","event_id":"evt-005","session_id":"reference-sandbox-network-v1-session-002","sequence":5,"timestamp":"2026-08-10T00:15:05Z","type":"approval.request","actor":{"kind":"harness","id":"reference-agent"},"payload":{"tool_call_id":"call-package-metadata","tool":"fetch_package_metadata","request_fingerprint":"b95fc51fca2e38cdbed8265a9a0fb7467293cc015ba85c2a98f235a09aefdfef","policy_effect":"allow","rule_id":"allow-bounded-metadata-fetch"},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-004"}
{"trace_version":"0.1.0","event_id":"evt-006","session_id":"reference-sandbox-network-v1-session-002","sequence":6,"timestamp":"2026-08-10T00:15:06Z","type":"approval.decision","actor":{"kind":"harness","id":"reference-agent"},"payload":{"tool_call_id":"call-package-metadata","tool":"fetch_package_metadata","request_fingerprint":"b95fc51fca2e38cdbed8265a9a0fb7467293cc015ba85c2a98f235a09aefdfef","outcome":"allow","policy_effect":"allow","rule_id":"allow-bounded-metadata-fetch","reason":"The semantic capability is allowed; the sandbox still enforces it.","source":"policy","grant_scope":"none"},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-005"}
{"trace_version":"0.1.0","event_id":"evt-007","session_id":"reference-sandbox-network-v1-session-002","sequence":7,"timestamp":"2026-08-10T00:15:07Z","type":"sandbox.configure","actor":{"kind":"harness","id":"sandbox-controller"},"payload":{"profile_id":"dependency-readonly","backend":"simulated-no-effects","required_capabilities":["process","network"],"allowed":true},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-006"}
{"trace_version":"0.1.0","event_id":"evt-008","session_id":"reference-sandbox-network-v1-session-002","sequence":8,"timestamp":"2026-08-10T00:15:08Z","type":"network.decision","actor":{"kind":"harness","id":"network-policy"},"payload":{"destinations":["packages.example.invalid:443"],"allowed":true,"reasons":[]},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-007"}
{"trace_version":"0.1.0","event_id":"evt-009","session_id":"reference-sandbox-network-v1-session-002","sequence":9,"timestamp":"2026-08-10T00:15:09Z","type":"tool.result","actor":{"kind":"tool","id":"fetch_package_metadata"},"payload":{"tool_call_id":"call-package-metadata","tool":"fetch_package_metadata","ok":true,"result":{"backend":"simulated-no-effects","command":"fetch-package-metadata","network":["packages.example.invalid:443"],"payload":{"package":"reference-harness","status":"metadata-only"}},"truncated":false},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-006"}
{"trace_version":"0.1.0","event_id":"evt-010","session_id":"reference-sandbox-network-v1-session-002","sequence":10,"timestamp":"2026-08-10T00:15:10Z","type":"model.request","actor":{"kind":"harness","id":"reference-agent"},"payload":{"turn":2,"message_count":3,"roles":["user","assistant","tool"],"tools":["fetch_package_metadata"]},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-009"}
{"trace_version":"0.1.0","event_id":"evt-011","session_id":"reference-sandbox-network-v1-session-002","sequence":11,"timestamp":"2026-08-10T00:15:11Z","type":"model.response","actor":{"kind":"model","id":"scripted-model-v1"},"payload":{"turn":2,"content":"The allowed destination returned simulated metadata.","stop":true,"tool_calls":[]},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-010"}
{"trace_version":"0.1.0","event_id":"evt-012","session_id":"reference-sandbox-network-v1-session-002","sequence":12,"timestamp":"2026-08-10T00:15:12Z","type":"session.stop","actor":{"kind":"harness","id":"reference-agent"},"payload":{"reason":"completed","turns":2},"provenance":{"agent_id":"reference-harness","snapshot_id":"reference-harness-2026-08-10-controlled","surface":"sdk","harness_mode":"controlled","run_id":"reference-sandbox-network-v1-run-002","experiment_id":"reference-sandbox-network-v1","model":"scripted-model-v1","provider":"local-fixture"},"redaction":{"status":"clean","fields":[]},"parent_event_id":"evt-011"}