{
  "pilot": "darkoza-intent-bound-agent-authority",
  "policy_version": "darkoza-intent-authority-v0.2",
  "date": "2026-11-03",
  "status": "research_prototype_not_production",
  "unit_tests": 37,
  "unit_tests_passed": 37,
  "unit_tests_failed": 0,
  "py_compile": "pass",
  "concurrency_test": "24 concurrent uses of one approval: 1 allow, 23 replay denials",
  "microbenchmark": {
    "benchmark": "darkoza-authority-gate-local-read-policy",
    "policy_version": "darkoza-intent-authority-v0.2",
    "environment": {
      "python": "3.14.4",
      "platform": "Linux-7.0.0-38-generic-x86_64-with-glibc2.43",
      "processor": ""
    },
    "warmup": 1000,
    "iterations": 50000,
    "operations": "evaluate scoped, in-memory read grants and generate integrity receipt; no executor, network, persistence, or signature verification",
    "latency_microseconds": {
      "median": 32.389,
      "p95": 48.763,
      "p99": 77.711,
      "min": 30.563,
      "max": 143.946
    },
    "status": "local microbenchmark only; not production capacity or end-to-end latency"
  },
  "limitations": [
    "no production authentication or identity provider",
    "approval verifier only a callback contract; test callback is not cryptographic",
    "replay and idempotency records are in-process memory and lost on restart",
    "no tool executor, sandbox, network or persistent audit store",
    "effect digest is supplied by caller in prototype, not computed by trusted production gateway",
    "not independently reviewed or red-teamed"
  ],
  "validated_properties": [
    "tenant-scoped idempotency",
    "tenant/principal/task/audience binding",
    "exact tool and effect digest binding",
    "one-time in-process approval",
    "24-way concurrent replay: exactly one allow"
  ]
}