Offline eval runs
runs/<slug>/ with a summary.json
(akhara.harbor.trace_export.v1) plus per-step screenshots and verifier results.
The index (runs/index.json) records:
Live runtime enforcement
In production the PEP wraps the five stages around a real turn.A full member chat turn
A consequential action
The permit pattern shipped in this repo (medication renewal): the side-effecting service refuses to run without a fresh permit.Everything is evidence
Every authorize call (allow, warn, block, escalate) is written to the enforcement feed as apolicy_decision event:
SDK requirements
Runtimes, versions, network, and configuration the PEP needs.