Examples
Agent actions, approvals and supporting evidence.
Explore four examples relevant to Agent Action Security Review. Published sample, not live customer evidence. No production verification or certification.
Start with the historical agent-action specimen below. For the current scope of Agent Action Security Review, see the current review. These examples illustrate individual actions and evidence limits; they are not complete deliverables from the current paid review.
Sample cases
Compromised API key rotation
Historical synthetic runAgent action exampleSituation
A historical synthetic example connects one bounded agent action with authority and execution evidence.
What you can inspect
Signed sample artifacts, browser verification and an offline verifier. This is not a complete sample of the current agent review, and these tools are not standard review deliverables.
Open example
Witnessed synthetic CRM action
Recorded synthetic runReplay + unsigned receiptSituation
A recorded bounded action changes only Acme from NEW to REVIEWED.
What you can inspect
Original run authority, replay-only consent, the fixed action sequence, independent read-back, and an unsigned exact-byte demonstration receipt.
Open example
Privileged access grant
Access pathExplanatory example onlySituation
Someone requested time-bounded administrative access for one task.
What you can inspect
How approval, provisioning, and entitlement evidence should connect and where replay often stays weak.
Open example
Approval-gated containment
Control pathExplanatory example onlySituation
A containment action must not run until approval is recorded.
What you can inspect
Gate enforcement, target-state evidence, and what a portable inspection path should include after the event.
Open example
Limits that always apply
- Not live customer evidence or a claim of completed verification for your environment.
- Not a legal compliance claim, certification, or audit opinion.
- Not a production deployment claim or complete AI governance program.
- A public receipt-only result names the checks that ran and remains indeterminate whenever required evidence or trust inputs were not independently checked.
Next steps
Verify a receipt
Check supported receipt JSON only. The key-rotation specimen has its own sample-specific verifier.
Open verifier
Illustrative sample report
An illustrative report about one automated deployment action, not a live customer report.
Open sample report
Start a review
Describe one situation without secrets. We confirm fit, scope, fee and evidence handling before work starts.
Request a break test
Expert help
Request path: /review/request
Discuss a review: engage@mail.witnessops.com
Do not send passwords, private keys, API keys, recovery codes, session tokens or other secrets.