One agent. One clear boundary.
Limited permissions → unauthorized access → server-side block → audit log.
Read a test reservation
reservations:read
Credential is valid for five minutes and only for this run.Export customer data
customers:export
Outside the task, no permission. Expected: HTTP 403.Export remains blocked
No call to the export adapter.
Block is logged before accessing export data.Start the complete test
The agent first reads permitted test information, then attempts the prohibited export. It next attempts to access the protected resource directly. This request must also fail.
Ready to test.
Protected resource access
These counters are set by the server inside the data adapter. The browser cannot supply them.
Run: —
What this test demonstrates
The agent receives a separate, fixed permission. The server decides using its stored grant before invoking a data adapter. Success is shown only when the server log matches the expected flow.
Public test area isolated per session. No user login or real business data yet. The operator starts a run through their session; the agent holds only its limited credential.
Server security log
| UTC | Event | HTTP | Reason |
|---|
Log: run, agent, task, time, decision, policy revision and HTTP status. The agent cannot read or write the log. Direct requests to the data adapter are captured in the host HTTP access log rather than this attributed agent log.
Technical test state is kept in private server files outside the web directory. Runs older than 24 hours are removed when a new run starts. Maximum ten starts per session per 30 minutes. The operator session uses a necessary cookie and expires after 30 minutes of inactivity. No permanent audit archive.