Skip to content

HAC-324: the authoritative filmed run, captured while it happened #34

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
qmarcelle merged 1 commit into from
Aug 24, 2026
Merged

HAC-324: the authoritative filmed run, captured while it happened #34

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
103 changes: 103 additions & 0 deletions experiments/hac-324/evidence/capture-package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,103 @@
{
"packageId": "HAC-324-authoritative-filmed-run",
"proofClass": "GOOGLE CLOUD PARTICIPATION",
"filmedRunId": "ilk-hac340-cloud-1787536029323",
"correlationId": "ilk-hac340-cloud-1787536029323",
"receiptId": "rcpt-e742d4f3-85d4-46b8-a1e0-320fa429358d",
"receiptDigest": "sha256:7fb65efe30d89bab241d1f5b8ea00ca58fb732a30b9fb87288a09deab411743f",
"runtimeSourceSha": "ae6d0d3c405b6169d5f0495c22aaf05d8fc1de4a",
"productRevision": "director 0beeb4a40283687ccfc518f16115e9e3a3277664",
"gcpProject": "interlock-film-260823",
"region": "us-central1",
"vertexLocation": "global",
"model": "gemini-3.5-flash",
"adk": "Google ADK 1.35.1 / Vertex AI",
"revisions": {
"agent": "interlock-hac340-agent-00001-hbk",
"proxy": "interlock-hac340-proxy-00001-s76",
"target": "interlock-hac340-target-00001-sng"
},
"externalCallerPrincipal": "serviceAccount:interlock-hac340-observer@interlock-film-260823.iam.gserviceaccount.com",
"principalSubstitution": "NON_MATERIAL \u2014 human user replaced by dedicated keyless observer SA; adjudicated, and controls returned identical 403/401/403",
"capturedAt": "2026-08-24T01:49:43.617Z",
"frames": [
{
"sceneId": "agent-traversal",
"source": "live agent traversal executed during capture",
"path": "/tmp/il-film-capture/out/.work/recordings/scene-agent-traversal.png",
"sha256": "102cafb35c0c02f9df1d9518e3be9fd9f361480f12d6f7bb37b3f1e640a1a490",
"bytes": 93288,
"qualityPass": true,
"qualityFailures": [],
"distinctColors": 467,
"luminanceStdDev": 18.71
},
{
"sceneId": "gemini-adk-attribution",
"source": "live Cloud Run config: model + pinned ADK image",
"path": "/tmp/il-film-capture/out/.work/recordings/scene-gemini-adk-attribution.png",
"sha256": "ee007e9c29c5fea3719fcec6d63d68c1ead5af33fceef4d90a8d1775f24f85c0",
"bytes": 146792,
"qualityPass": true,
"qualityFailures": [],
"distinctColors": 523,
"luminanceStdDev": 26.49
},
{
"sceneId": "cloud-run-topology",
"source": "live Cloud Run services and revisions",
"path": "/tmp/il-film-capture/out/.work/recordings/scene-cloud-run-topology.png",
"sha256": "ae6bd02c7f4ebf0dc2b55ad76eb5b91d03ec32eba672672433480dd75b80e779",
"bytes": 99108,
"qualityPass": true,
"qualityFailures": [],
"distinctColors": 498,
"luminanceStdDev": 20.67
},
{
"sceneId": "cloud-logging-correlation",
"source": "live Cloud Logging filtered to this run",
"path": "/tmp/il-film-capture/out/.work/recordings/scene-cloud-logging-correlation.png",
"sha256": "ccd916391f6a8f38dde906477c6e16423db8a509bde55f64b59945517087fee8",
"bytes": 133422,
"qualityPass": true,
"qualityFailures": [],
"distinctColors": 504,
"luminanceStdDev": 23.8
},
{
"sceneId": "receipt-mutation-observation",
"source": "evidence packet emitted by scene 1's traversal",
"path": "/tmp/il-film-capture/out/.work/recordings/scene-receipt-mutation-observation.png",
"sha256": "381c629fa64bbafec37b07ad4b22c8d074cb2f67a24b2f25e1b2fddd54860d8c",
"bytes": 233212,
"qualityPass": true,
"qualityFailures": [],
"distinctColors": 509,
"luminanceStdDev": 34.18
}
],
"allFramesPassQuality": true,
"knownDiscrepancies": [
{
"field": "filmed-run.json \u2192 resources.observerPrincipal",
"recorded": "user:qwynn@marcellelabs.io",
"actual": "serviceAccount:interlock-hac340-observer@interlock-film-260823.iam.gserviceaccount.com",
"why": "10-provision.sh records the caller from `gcloud config get-value account` at provision time. The traversal authenticated by impersonating the dedicated keyless observer SA, because gcloud 580 refuses audience-scoped ID tokens for user accounts. The packet field was not edited \u2014 evidence is recorded as emitted, and the correction lives here.",
"classification": "NON_MATERIAL \u2014 adjudicated principal-type substitution; controls returned identical 403/401/403"
},
{
"field": "raw gcloud --format=json live-surface dumps",
"recorded": "captured during preflight, outside the hardened path",
"actual": "excluded from this package",
"why": "`gcloud run services list --format=json` embeds the proxy's INTERLOCK_SIGNING_KEY_PEM (an Ed25519 private key) verbatim in the service env. Those dumps were taken with plain gcloud before the redaction adapter existed and were removed rather than committed. Every frame in this package went through the hardened path, whose redaction covers private-key blocks; none of them contain key material. The project has since been deleted, so the key is dead either way.",
"classification": "EXCLUDED \u2014 superseded by the provenance-bound frames"
}
],
"teardown": {
"status": "completed",
"deletedAt": "2026-08-24T01:50:43.559Z",
"projectLifecycleState": "DELETE_REQUESTED"
},
"packetVerification": "HAC-340 packet verified \u2014 all 19 assertions including teardown"
}
111 changes: 111 additions & 0 deletions experiments/hac-324/evidence/filmed-run.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,111 @@
{
"commitSha": "ae6d0d3c405b6169d5f0495c22aaf05d8fc1de4a",
"model": "gemini-3.5-flash",
"adkPath": "Google ADK 1.35.1 / Vertex AI",
"resources": {
"projectId": "interlock-film-260823",
"region": "us-central1",
"vertexLocation": "global",
"agentUrl": "https://interlock-hac340-agent-butemkskqa-uc.a.run.app",
"proxyUrl": "https://interlock-hac340-proxy-butemkskqa-uc.a.run.app",
"targetUrl": "https://interlock-hac340-target-butemkskqa-uc.a.run.app",
"agentServiceAccount": "serviceAccount:interlock-hac340-agent@interlock-film-260823.iam.gserviceaccount.com",
"proxyServiceAccount": "serviceAccount:interlock-hac340-proxy@interlock-film-260823.iam.gserviceaccount.com",
"targetServiceAccount": "serviceAccount:interlock-hac340-target@interlock-film-260823.iam.gserviceaccount.com",
"observerPrincipal": "user:qwynn@marcellelabs.io",
"nodeImage": "us-central1-docker.pkg.dev/interlock-film-260823/interlock-hac340/interlock-node:ae6d0d3",
"agentImage": "us-central1-docker.pkg.dev/interlock-film-260823/interlock-hac340/interlock-adk:ae6d0d3"
},
"correlationId": "ilk-hac340-cloud-1787536029323",
"decision": "ALLOW",
"receiptId": "rcpt-e742d4f3-85d4-46b8-a1e0-320fa429358d",
"receiptDigest": "sha256:7fb65efe30d89bab241d1f5b8ea00ca58fb732a30b9fb87288a09deab411743f",
"protectedMutation": {
"status": "EXECUTED",
"correlationId": "ilk-hac340-cloud-1787536029323",
"receiptId": "rcpt-e742d4f3-85d4-46b8-a1e0-320fa429358d",
"revisionBefore": "sha256:c78fe996446426339788c38a6a6edaf6b1b8ab72f984c9c72786637148615a10",
"revisionAfter": "sha256:6a8acad8a0f7f4df96548ba9b60714b4a7e350cc480c1ef86f4d677db62b8a27",
"state": {
"totalReservable": 130,
"services": {
"alpha": 45,
"beta": 40,
"gamma": 20
}
},
"invariant": {
"holds": true,
"total": 105,
"totalReservable": 130,
"detail": "total 105 <= 130"
}
},
"observation": {
"revision": "sha256:6a8acad8a0f7f4df96548ba9b60714b4a7e350cc480c1ef86f4d677db62b8a27",
"state": {
"totalReservable": 130,
"services": {
"alpha": 45,
"beta": 40,
"gamma": 20
}
}
},
"runtimeProof": {
"proxyLogEntries": [
{
"insertId": "6a8ba2ad00064c4b17d4ba8b",
"jsonPayload": {
"correlationId": "ilk-hac340-cloud-1787536029323",
"event": "proxy.request",
"identity": "interlock-hac340-agent@interlock-film-260823.iam.gserviceaccount.com",
"identitySource": "oidc-id-token/platform-verified:email",
"transport": "mcp"
},
"labels": {
"instanceId": "00a41e8c1d49b36ee26b08d3534054faba426aac33b91e8d6fdc8c140e52b9ca403bbbf58028049b7d91b7fe35c99b3b2d087f30ed862da58ebc8ceebd6d8f9317525208aa4efa04e8d8fa1162dc"
},
"logName": "projects/interlock-film-260823/logs/run.googleapis.com%2Fstdout",
"receiveTimestamp": "2026-08-24T01:47:25.708547374Z",
"resource": {
"labels": {
"configuration_name": "interlock-hac340-proxy",
"location": "us-central1",
"project_id": "interlock-film-260823",
"revision_name": "interlock-hac340-proxy-00001-s76",
"service_name": "interlock-hac340-proxy"
},
"type": "cloud_run_revision"
},
"timestamp": "2026-08-24T01:47:25.412747Z"
}
],
"agentHttpStatus": 200
},
"expectedConfiguration": {
"projectId": "interlock-film-260823",
"region": "us-central1",
"vertexLocation": "global",
"agentUrl": "https://interlock-hac340-agent-butemkskqa-uc.a.run.app",
"proxyUrl": "https://interlock-hac340-proxy-butemkskqa-uc.a.run.app",
"targetUrl": "https://interlock-hac340-target-butemkskqa-uc.a.run.app",
"agentServiceAccount": "serviceAccount:interlock-hac340-agent@interlock-film-260823.iam.gserviceaccount.com",
"proxyServiceAccount": "serviceAccount:interlock-hac340-proxy@interlock-film-260823.iam.gserviceaccount.com",
"targetServiceAccount": "serviceAccount:interlock-hac340-target@interlock-film-260823.iam.gserviceaccount.com",
"observerPrincipal": "user:qwynn@marcellelabs.io",
"nodeImage": "us-central1-docker.pkg.dev/interlock-film-260823/interlock-hac340/interlock-node:ae6d0d3",
"agentImage": "us-central1-docker.pkg.dev/interlock-film-260823/interlock-hac340/interlock-adk:ae6d0d3"
},
"observedConfiguration": {
"agentRevision": "https://interlock-hac340-agent-butemkskqa-uc.a.run.app",
"proxyRevision": "https://interlock-hac340-proxy-butemkskqa-uc.a.run.app",
"targetRevision": "https://interlock-hac340-target-butemkskqa-uc.a.run.app"
},
"controls": {
"forgedHeaderStatus": 403,
"wrongAudienceStatus": 401,
"directBypassStatus": 403
},
"teardown": "pending"
}
4 changes: 4 additions & 0 deletions experiments/hac-324/evidence/teardown.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
{
"deletedAt": "2026-08-24T01:50:43.559Z",
"status": "completed"
}
Binary file added experiments/hac-324/frames/scene-agent-traversal.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added experiments/hac-324/frames/scene-cloud-logging-correlation.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added experiments/hac-324/frames/scene-cloud-run-topology.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added experiments/hac-324/frames/scene-gemini-adk-attribution.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added experiments/hac-324/frames/scene-receipt-mutation-observation.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading