A trade was denied. Choose what to disclose. The verifier proves authenticity from the bundle alone.
① Decision
pol_smb_trade_authFAIL_CLOSED
Request
actionexecute
resource/api/trading/orders
user.idanalyst-4417
user.roleanalyst
user.deskfixed-income
timestamp2026-02-01T06:12:44Z
Evaluation
analyst-role-checkPERMISSION
user.role = "analyst" → in [analyst, trader, desk_head] → ✓
trading-hours-gateCONSTRAINT
06:12 UTC → within 08:00–17:30 UTC → ✗
✗DENY
FAIL_CLOSED
Entry #6 · prev 7f2b8c4…
② Disclose · ③ Bundle
Selective disclosure
Decision verdictdecisionalways
Timestamptimestampalways
Policy IDpolicy_id
Failing rulerule_id
Actor IDPIIactor_id
Request contextPIIrequest_context
Tamper test
decision DENY → ALLOW
Evidence bundle
schema_version: 1
Generating keys…
④ Verify
…Waiting…
pendingsign(entry_hash)
ECDSA P-256 authorship
pendingleaf → root
Selective disclosure
pendingSHA256(root‖prev)
entry_hash integrity
Hidden fields are absent from the bundle. The verifier proves every disclosed field is authentic without seeing the hidden ones. Toggle actor_id off to shield the analyst's identity.