proof-snapshot.json

{
  "schema": "atrib-google-stack-chain.visual.v1",
  "title": "Google stack proof chain",
  "status": "reference snapshot ready",
  "strategy": "atrib-google-stack-chain-proof-v3",
  "command": "pnpm --filter @atrib/integration google-stack-chain-proof",
  "snapshot": {
    "schema": "atrib-google-stack-chain.snapshot.v1",
    "timestamp_seconds": 1779840000,
    "stable_inputs": {
      "timestamp_seconds": 1779840000,
      "a2a_request_message_id": "google-stack-a2a-request-0001",
      "a2a_response_message_id": "google-stack-a2a-response-0001",
      "a2a_task_id": "google-stack-a2a-task-0001",
      "a2a_context_id": "google-stack-a2a-context-0001"
    }
  },
  "nodes": [
    {
      "id": "ap2",
      "label": "AP2 transaction",
      "protocol": "AP2",
      "actor": "ap2-local-participant",
      "event_type": "atrib.ap2.transaction_verified",
      "record_hash": "sha256:e5f103d959cbb1e316e6d658b35fabc547b6b9b3bd530d0165cfbe48155cc6db",
      "parents": [],
      "verifier": "@atrib/verify",
      "checks": [
        "AP2 detected",
        "VI evidence valid",
        "transaction accepted",
        "counterparty attestation required"
      ],
      "evidence": "AP2 / Verifiable Intent receipt evidence creates a signed atrib transaction record.",
      "value": "The authorization surface becomes a record that later agents can cite without copying the payment payload."
    },
    {
      "id": "a2a-remote",
      "label": "A2A remote evidence",
      "protocol": "A2A",
      "actor": "a2a-specialist-agent",
      "event_type": "atrib.a2a.remote_evidence_accepted",
      "record_hash": "sha256:23e25fd31fc81cf8f6d668cf68454d05c6018451f3a7467fc15f2649277e42f9",
      "parents": [
        "sha256:e5f103d959cbb1e316e6d658b35fabc547b6b9b3bd530d0165cfbe48155cc6db"
      ],
      "verifier": "@atrib/verify",
      "checks": [
        "signed Agent Card valid",
        "remote informed_by resolved",
        "no dangling AP2 parent"
      ],
      "evidence": "A2A handoff evidence accepts the AP2 transaction as the verified parent.",
      "value": "The handoff carries proof of what authorized the remote work."
    },
    {
      "id": "a2a-receiver",
      "label": "A2A receiver follow-up",
      "protocol": "A2A",
      "actor": "a2a-receiving-agent",
      "event_type": "atrib.a2a.receiver_followup_signed",
      "record_hash": "sha256:1225fb6849cab06d9bec936abdf28f5ff1a4e2872ea8f5a87c1b469c54c18fb2",
      "parents": [
        "sha256:23e25fd31fc81cf8f6d668cf68454d05c6018451f3a7467fc15f2649277e42f9"
      ],
      "verifier": "@atrib/verify",
      "checks": [
        "handoff accepted",
        "receiver follow-up signed",
        "remote record parent resolved"
      ],
      "evidence": "The receiving agent signs its follow-up after verifier-gated A2A evidence acceptance.",
      "value": "The receiver can continue from a verified handoff instead of a chat transcript."
    },
    {
      "id": "adk-decision",
      "label": "ADK allow decision",
      "protocol": "ADK Python",
      "actor": "google_adk_python_decision_allow_agent",
      "event_type": "atrib.adk_python.decision_allowed",
      "record_hash": "sha256:f52b375c72747cb07a26fd9ed0038b12803a2beee2b8104bc2a34a43b65aa34f",
      "parents": [
        "sha256:1225fb6849cab06d9bec936abdf28f5ff1a4e2872ea8f5a87c1b469c54c18fb2"
      ],
      "verifier": "@atrib/verify",
      "checks": [
        "BasePlugin before_tool_callback reached",
        "decision state allowed",
        "A2A parent resolved"
      ],
      "evidence": "The Google ADK Python plugin signs an allow decision before the FunctionTool callback runs.",
      "value": "The runtime action starts from a signed authority decision, not only a later audit record."
    },
    {
      "id": "adk-python",
      "label": "ADK Python callback",
      "protocol": "ADK Python",
      "actor": "google_adk_python_decision_allow_agent",
      "event_type": "atrib.adk_python.tool_callback_signed",
      "record_hash": "sha256:b68851adcf913713f2eba14e2dce27abd3212ebee7f52c87ad44ca77aed1f3af",
      "parents": [
        "sha256:f52b375c72747cb07a26fd9ed0038b12803a2beee2b8104bc2a34a43b65aa34f"
      ],
      "verifier": "@atrib/verify",
      "checks": [
        "FunctionTool callback reached",
        "hash-only public record",
        "ADK decision parent resolved"
      ],
      "evidence": "The Google ADK Python callback signs its own hash-only record after the allow decision.",
      "value": "The callback record cites the decision record that authorized it to run."
    },
    {
      "id": "adk-error-decision",
      "label": "ADK error-path decision",
      "protocol": "ADK Python",
      "actor": "google_adk_python_decision_handler_error_agent",
      "event_type": "atrib.adk_python.handler_error_decision_allowed",
      "record_hash": "sha256:49e8f7c207bcea047601dab8a5bdce53777bc559b20c99ab1ec357fb9b425d24",
      "parents": [
        "sha256:1225fb6849cab06d9bec936abdf28f5ff1a4e2872ea8f5a87c1b469c54c18fb2"
      ],
      "verifier": "@atrib/verify",
      "checks": [
        "BasePlugin before_tool_callback reached",
        "decision state allowed",
        "A2A parent resolved"
      ],
      "evidence": "The Google ADK Python plugin signs an allow decision for a FunctionTool path that will raise.",
      "value": "The failure path still starts from a signed authority decision tied to the A2A parent."
    },
    {
      "id": "adk-error-outcome",
      "label": "ADK terminal error outcome",
      "protocol": "ADK Python",
      "actor": "google_adk_python_decision_handler_error_agent",
      "event_type": "atrib.adk_python.handler_error_terminal_outcome_signed",
      "record_hash": "sha256:192d8c403e65a34ae37d184c4f9dacc4c1b6a84c1eb4b0270426737f5570e9c0",
      "parents": [
        "sha256:49e8f7c207bcea047601dab8a5bdce53777bc559b20c99ab1ec357fb9b425d24"
      ],
      "verifier": "@atrib/verify",
      "checks": [
        "FunctionTool raised after allow",
        "on_tool_error_callback signed outcome",
        "decision parent resolved"
      ],
      "evidence": "The ADK FunctionTool body raises after an allow decision, and on_tool_error_callback signs the terminal error outcome.",
      "value": "The record chain shows both why the call was allowed and how it ended when the handler failed."
    }
  ],
  "edges": [
    {
      "from": "ap2",
      "to": "a2a-remote",
      "relation": "informed_by",
      "verifier": "@atrib/verify"
    },
    {
      "from": "a2a-remote",
      "to": "a2a-receiver",
      "relation": "informed_by",
      "verifier": "@atrib/verify"
    },
    {
      "from": "a2a-receiver",
      "to": "adk-decision",
      "relation": "informed_by",
      "verifier": "@atrib/verify"
    },
    {
      "from": "adk-decision",
      "to": "adk-python",
      "relation": "informed_by",
      "verifier": "@atrib/verify"
    },
    {
      "from": "a2a-receiver",
      "to": "adk-error-decision",
      "relation": "informed_by",
      "verifier": "@atrib/verify"
    },
    {
      "from": "adk-error-decision",
      "to": "adk-error-outcome",
      "relation": "informed_by",
      "verifier": "@atrib/verify"
    }
  ],
  "analytics": {
    "schema": "atrib-google-stack-chain.bigquery-agent-analytics.fixture.v1",
    "source": "local-fixture",
    "rows": [
      {
        "node_id": "ap2",
        "timestamp": "2026-05-27T00:00:00.000Z",
        "event_type": "atrib.ap2.transaction_verified",
        "agent": "ap2-local-participant",
        "session_id": null,
        "invocation_id": null,
        "user_id": null,
        "trace_id": null,
        "span_id": null,
        "parent_span_id": null,
        "status": "OK",
        "error_message": null,
        "is_truncated": false,
        "atrib_record_hash": "sha256:e5f103d959cbb1e316e6d658b35fabc547b6b9b3bd530d0165cfbe48155cc6db",
        "atrib_parent_record_hashes": [],
        "protocol": "AP2"
      },
      {
        "node_id": "a2a-remote",
        "timestamp": "2026-05-27T00:00:01.000Z",
        "event_type": "atrib.a2a.remote_evidence_accepted",
        "agent": "a2a-specialist-agent",
        "session_id": "google-stack-a2a-context-0001",
        "invocation_id": "google-stack-a2a-request-0001",
        "user_id": null,
        "trace_id": "4f22c9bdbeaaf460f4aca6fd8fa817ef",
        "span_id": "b115b227841db8e4",
        "parent_span_id": null,
        "status": "OK",
        "error_message": null,
        "is_truncated": false,
        "atrib_record_hash": "sha256:23e25fd31fc81cf8f6d668cf68454d05c6018451f3a7467fc15f2649277e42f9",
        "atrib_parent_record_hashes": [
          "sha256:e5f103d959cbb1e316e6d658b35fabc547b6b9b3bd530d0165cfbe48155cc6db"
        ],
        "protocol": "A2A"
      },
      {
        "node_id": "a2a-receiver",
        "timestamp": "2026-05-27T00:00:01.000Z",
        "event_type": "atrib.a2a.receiver_followup_signed",
        "agent": "a2a-receiving-agent",
        "session_id": "google-stack-a2a-context-0001",
        "invocation_id": "google-stack-a2a-response-0001",
        "user_id": null,
        "trace_id": "4f22c9bdbeaaf460f4aca6fd8fa817ef",
        "span_id": "1d6154dbc8bded9a",
        "parent_span_id": "b115b227841db8e4",
        "status": "OK",
        "error_message": null,
        "is_truncated": false,
        "atrib_record_hash": "sha256:1225fb6849cab06d9bec936abdf28f5ff1a4e2872ea8f5a87c1b469c54c18fb2",
        "atrib_parent_record_hashes": [
          "sha256:23e25fd31fc81cf8f6d668cf68454d05c6018451f3a7467fc15f2649277e42f9"
        ],
        "protocol": "A2A"
      },
      {
        "node_id": "adk-decision",
        "timestamp": "2026-05-27T00:00:02.000Z",
        "event_type": "atrib.adk_python.decision_allowed",
        "agent": "google_adk_python_decision_allow_agent",
        "session_id": "google-stack-adk-python-session-0001",
        "invocation_id": "e-b7ca2de9-6454-413a-93f7-14d9e12d6dc6",
        "user_id": null,
        "trace_id": "4f22c9bdbeaaf460f4aca6fd8fa817ef",
        "span_id": "e434f38575bf4688",
        "parent_span_id": "1d6154dbc8bded9a",
        "status": "OK",
        "error_message": null,
        "is_truncated": false,
        "atrib_record_hash": "sha256:f52b375c72747cb07a26fd9ed0038b12803a2beee2b8104bc2a34a43b65aa34f",
        "atrib_parent_record_hashes": [
          "sha256:1225fb6849cab06d9bec936abdf28f5ff1a4e2872ea8f5a87c1b469c54c18fb2"
        ],
        "protocol": "ADK Python"
      },
      {
        "node_id": "adk-python",
        "timestamp": "2026-05-27T00:00:02.001Z",
        "event_type": "atrib.adk_python.tool_callback_signed",
        "agent": "google_adk_python_decision_allow_agent",
        "session_id": "google-stack-adk-python-session-0001",
        "invocation_id": "e-b7ca2de9-6454-413a-93f7-14d9e12d6dc6",
        "user_id": null,
        "trace_id": "4f22c9bdbeaaf460f4aca6fd8fa817ef",
        "span_id": "2a7b24b6f52f9a1f",
        "parent_span_id": "e434f38575bf4688",
        "status": "OK",
        "error_message": null,
        "is_truncated": false,
        "atrib_record_hash": "sha256:b68851adcf913713f2eba14e2dce27abd3212ebee7f52c87ad44ca77aed1f3af",
        "atrib_parent_record_hashes": [
          "sha256:f52b375c72747cb07a26fd9ed0038b12803a2beee2b8104bc2a34a43b65aa34f"
        ],
        "protocol": "ADK Python"
      },
      {
        "node_id": "adk-error-decision",
        "timestamp": "2026-05-27T00:00:04.000Z",
        "event_type": "atrib.adk_python.handler_error_decision_allowed",
        "agent": "google_adk_python_decision_handler_error_agent",
        "session_id": "google-stack-adk-python-handler-error-session-0001",
        "invocation_id": "e-8cc41729-ac2e-4efb-b69a-6a4730752319",
        "user_id": null,
        "trace_id": "849166752a8d0fcda4ae6b3e4640c1c6",
        "span_id": "788caf2ee5867281",
        "parent_span_id": "1d6154dbc8bded9a",
        "status": "OK",
        "error_message": null,
        "is_truncated": false,
        "atrib_record_hash": "sha256:49e8f7c207bcea047601dab8a5bdce53777bc559b20c99ab1ec357fb9b425d24",
        "atrib_parent_record_hashes": [
          "sha256:1225fb6849cab06d9bec936abdf28f5ff1a4e2872ea8f5a87c1b469c54c18fb2"
        ],
        "protocol": "ADK Python"
      },
      {
        "node_id": "adk-error-outcome",
        "timestamp": "2026-05-27T00:00:04.001Z",
        "event_type": "atrib.adk_python.handler_error_terminal_outcome_signed",
        "agent": "google_adk_python_decision_handler_error_agent",
        "session_id": "google-stack-adk-python-handler-error-session-0001",
        "invocation_id": "e-8cc41729-ac2e-4efb-b69a-6a4730752319",
        "user_id": null,
        "trace_id": "849166752a8d0fcda4ae6b3e4640c1c6",
        "span_id": "b2c05cce8c854872",
        "parent_span_id": "788caf2ee5867281",
        "status": "ERROR",
        "error_message": "quote_price handler failed after ADK allowed the call",
        "is_truncated": false,
        "atrib_record_hash": "sha256:192d8c403e65a34ae37d184c4f9dacc4c1b6a84c1eb4b0270426737f5570e9c0",
        "atrib_parent_record_hashes": [
          "sha256:49e8f7c207bcea047601dab8a5bdce53777bc559b20c99ab1ec357fb9b425d24"
        ],
        "protocol": "ADK Python"
      }
    ],
    "caveat": "This is a local BigQuery Agent Analytics-shaped fixture, not a BigQuery Storage Write API export or a managed Google Cloud run."
  },
  "value_add": [
    "AP2 authorization evidence, A2A handoff evidence, ADK decision evidence, ADK runtime evidence, and ADK terminal-error evidence are linked through verifier-resolved informed_by records.",
    "Each layer produces verifier-readable facts: AP2 receipt and VI checks, A2A accepted handoff records, ADK decision records, ADK hash-only tool callback records, and an ADK handler-error terminal outcome.",
    "Public records expose hashes and record metadata while local artifacts or sidecars keep payment, task, and tool payload material inspectable by the host.",
    "A support reviewer can see what was authorized, what was handed off, and what runtime action was signed before resolving a support or counterparty decision."
  ],
  "caveats": [
    "Boundary: atrib is the trust-transfer layer here. AP2 evidence is accepted first, A2A receives that signed parent, and ADK signs an allow decision before the tool callback cites that decision.",
    "AP2 source: committed AP2 / VI fixtures or merchant-supplied packet JSON. This proof does not use live payment credentials or move funds.",
    "A2A source: in-process JSON-RPC with signed receiving-agent follow-up. It proves verifier-gated handoff, not an A2A TCK result or public server deployment.",
    "ADK source: google-adk Python InMemoryRunner proof. The claim is decision, callback, and handler-error terminal-outcome signing, not managed Agent Platform Runtime, Gemini Enterprise, BigQuery Storage Write API export, or Memory Bank coverage.",
    "ADK handler-error coverage proves a real FunctionTool exception path. Timeout, cancellation, and process-crash completeness still need ADK-owned terminal emission semantics."
  ]
}