agent-result.jsonProvider status, stdout, structured output, return code and error information.
policy.jsonPatch-policy decision. passed: false means validation results must not be treated as acceptance evidence.
Typical findings:
scope_violation — a changed file is outside allowed_paths;snapshot-before.json and snapshot-after.jsonCommit, dirty-state information and SHA-256 hashes for controlled files.
snapshot-diff.jsonLists added, removed and modified files and whether the commit changed.
verification.jsonOne object per validation command, including pass/fail state, output and return code.
patch.diffBinary-capable output of git diff --binary from the isolated worktree.
A simulation is successful only when:
agent status == success
AND policy.passed == true
AND every required validation passed