{
  "run_id": "Infisical--agent-vault-claude-haiku-5-5-1793108006659311593",
  "checker": {
    "claims": [
      {
        "claim": "A credential for ANTHROPIC_API_KEY can be created and read back from a vault",
        "command": "./agent-vault vault credential get --vault demo-vault ANTHROPIC_API_KEY",
        "evidence": "sk-test-12345",
        "expected": "credential get returns sk-test-12345",
        "input": "vault demo-vault, key ANTHROPIC_API_KEY=sk-test-12345 (set earlier)",
        "kind": "claim",
        "outcome": "Real input produced the expected result: sk-test-12345",
        "returncode": 0,
        "source": "For example, you can create a credential for `ANTHROPIC_API_KEY` and create a service rule for Agent Vault to substitute a dummy value `__anthropic_api_key__` for the real key.",
        "source_checked": true,
        "source_file": "README.md",
        "verdict": "yes"
      },
      {
        "claim": "Agent Vault attaches the stored credential to a request routed through the proxy",
        "command": "curl -s -m 10 -x http:<email>:14322 -H 'Authorization: <secret>' http://echo.upstream.test:18080/hello",
        "evidence": "Bearer secret-echo-789\"}",
        "expected": "upstream receives Bearer secret-echo-789",
        "input": "HTTP request via proxy 127.0.0.1:14322 to echo.upstream.test:18080 with dummy Bearer __echo_token__; service local-echo maps ECHO_TOKEN=secret-echo-789",
        "kind": "claim",
        "outcome": "Real input produced the expected result: Bearer secret-echo-789",
        "returncode": 0,
        "source": "Agent Vault intercepts every request and attaches credentials onto it before forwarding the request to the target outbound API.",
        "source_checked": true,
        "source_file": "README.md",
        "verdict": "yes"
      }
    ],
    "cycle_checks": [
      {
        "claim": "Scheduled or looping main behavior",
        "command": "",
        "evidence": "No README-documented cron, scheduler, or --once mode. The only periodic loop is the external credential store poll interval (--poll-interval-seconds) for Infisical-backed stores, which is not configured in this guest.",
        "expected": "identify the product trigger",
        "input": "source inspection",
        "kind": "cycle",
        "outcome": "No README-documented cron, scheduler, or --once mode. The only periodic loop is the external credential store poll interval (--poll-interval-seconds) for Infisical-backed stores, which is not configured in this guest.",
        "source": "repository entry points",
        "verdict": "yes"
      }
    ],
    "details": {
      "argv": [
        "./agent-vault",
        "vault",
        "credential",
        "get",
        "--vault",
        "demo-vault",
        "ANTHROPIC_API_KEY"
      ],
      "kind": "cli",
      "needs_browser": false,
      "needs_credentials": false,
      "returncode": 0,
      "scope": "product operation",
      "stderr": "",
      "stdout": "sk-test-12345",
      "working": true
    },
    "evidence_strength": "readme_checked",
    "example_checks": [
      {
        "claim": "Documented development test suite",
        "command": "make test",
        "deferred": false,
        "evidence": "cached)\nok  \tgithub.com/Infisical/agent-vault/internal/oauth\t(cached)\nok  \tgithub.com/Infisical/agent-vault/internal/pidfile\t(cached)\nok  \tgithub.com/Infisical/agent-vault/internal/proposal\t(cached)\nok  \tgithub.com/Infisical/agent-vault/internal/ratelimit\t(cached)\n?   \tgithub.com/Infisical/agent-vault/internal/requestlog\t[no test files]\nok  \tgithub.com/Infisical/agent-vault/internal/server\t(cached)\nok  \tgithub.com/Infisical/agent-vault/internal/session\t(cached)\nok  \tgithub.com/Infisical/agent-vault/internal/store\t(cached)\n?   \tgithub.com/Infisical/agent-vault/internal/telemetry\t[no test files]",
        "expected": "all Go packages pass",
        "input": "make test (HOME isolated from the running server's ~/.agent-vault pidfile)",
        "kind": "example",
        "outcome": "command completed successfully",
        "returncode": 0,
        "source": "README.md",
        "verdict": "yes"
      },
      {
        "claim": "nginx public UI proxy example",
        "command": "",
        "deferred": false,
        "evidence": "requires Docker, which is not installed in this guest",
        "expected": "documented command completes successfully",
        "input": "",
        "kind": "example",
        "outcome": "requires Docker, which is not installed in this guest",
        "source": "README.md",
        "verdict": "blocked"
      },
      {
        "claim": "Daytona OpenAI realtime example",
        "command": "",
        "deferred": false,
        "evidence": "requires Daytona and OpenAI credentials, which were not provided (needs_credentials)",
        "expected": "documented command completes successfully",
        "input": "",
        "kind": "example",
        "outcome": "requires Daytona and OpenAI credentials, which were not provided (needs_credentials)",
        "source": "README.md",
        "verdict": "blocked"
      },
      {
        "claim": "Slack agent template example",
        "command": "",
        "deferred": false,
        "evidence": "requires a configured Slack app and tokens, which were not provided (needs_credentials)",
        "expected": "documented command completes successfully",
        "input": "",
        "kind": "example",
        "outcome": "requires a configured Slack app and tokens, which were not provided (needs_credentials)",
        "source": "README.md",
        "verdict": "blocked"
      }
    ],
    "status": "PASS"
  },
  "diagnosis": null
}