Deploy change audit

{
  "benchmarkRunId": "6c029a54-e946-4b6b-b8bf-95b6b87b5070",
  "benchmarkId": "benchmark/deploy-change-audit@1.0.0",
  "benchmarkTitle": "Deploy change audit",
  "packageId": "ens/givemd.eth/deploy-auditor@1.0.0",
  "packageHash": "sha256:b78ef842a629ad2c11a462b7b8ad7fd5d57a3170fbab78526330847550d9e780",
  "policyId": "policy/deploy-review@1.0.0",
  "policyHash": "sha256:9ac8d24bb7cb9cc417e6c8ca713ae6c8dfc52f83807b092fc04bd869815ab577",
  "runtime": "bun",
  "signer": "seed:deploy-auditor",
  "writeReceiptRequested": true,
  "status": "success",
  "executionBackend": "local",
  "requestedExecutionBackend": "local",
  "sandboxProfile": "elevated",
  "networkPolicy": "restricted",
  "networkAllowlist": [
    "https://api.github.com",
    "https://api.give.md"
  ],
  "timeoutMs": 10000,
  "benchmarkDefinitionHash": "sha256:462b8194910b43cc7ee2f54d36f3d4661b4175cb1a04750a1241fb6523b8b932",
  "replayInput": {
    "availableTools": [
      "git",
      "json",
      "markdown",
      "shell"
    ],
    "grantedPermissions": [
      "http:get",
      "process:exec",
      "storage:write"
    ],
    "requestedApiOrigins": [
      "https://api.github.com",
      "https://api.give.md"
    ],
    "requestedChains": [],
    "requestedTokens": []
  },
  "score": 10,
  "maxScore": 10,
  "summary": "Benchmark suite produced the expected deterministic output.",
  "startedAt": "2026-03-15T11:23:32.516Z",
  "createdAt": "2026-03-15T11:23:32.516Z",
  "evaluationChecks": [
    {
      "id": "runtime:bun",
      "status": "pass",
      "message": "Runtime bun is supported."
    },
    {
      "id": "namespace:verified",
      "status": "pass",
      "message": "Namespace is verified."
    },
    {
      "id": "tool:git",
      "status": "pass",
      "message": "Required tool git is available."
    },
    {
      "id": "tool:shell",
      "status": "pass",
      "message": "Required tool shell is available."
    },
    {
      "id": "tool:json",
      "status": "pass",
      "message": "Required tool json is available."
    },
    {
      "id": "tool:markdown",
      "status": "pass",
      "message": "Required tool markdown is available."
    },
    {
      "id": "permission:http:get",
      "status": "pass",
      "message": "Permission http:get is granted."
    },
    {
      "id": "permission:storage:write",
      "status": "pass",
      "message": "Permission storage:write is granted."
    },
    {
      "id": "permission:process:exec",
      "status": "pass",
      "message": "Permission process:exec is granted."
    },
    {
      "id": "policy:attached",
      "status": "pass",
      "message": "Attached policy policy/deploy-review@1.0.0 is available for evaluation."
    },
    {
      "id": "policy:expiry",
      "status": "pass",
      "message": "Policy remains valid until 2026-12-31T00:00:00Z."
    },
    {
      "id": "policy:origin:https://api.github.com",
      "status": "pass",
      "message": "API origin https://api.github.com is allowed."
    },
    {
      "id": "policy:origin:https://api.give.md",
      "status": "pass",
      "message": "API origin https://api.give.md is allowed."
    }
  ],
  "caseResults": [
    {
      "caseId": "identifies-risky-config-drift",
      "title": "Identifies risky config drift",
      "status": "pass",
      "score": 5,
      "maxScore": 5,
      "message": "Deploy audit flagged the expected risky drift."
    },
    {
      "caseId": "recommends-rollback-checks",
      "title": "Recommends rollback checks",
      "status": "pass",
      "score": 5,
      "maxScore": 5,
      "message": "Deploy audit produced the expected rollback checks."
    }
  ],
  "evaluationOk": true,
  "blockedByPreflight": false,
  "completedAt": "2026-03-15T11:23:32.550Z",
  "lastHeartbeatAt": "2026-03-15T11:23:32.550Z",
  "outputHash": "sha256:dad58a62103971a46299332e6a88aa16024bd1248b9d13b3c4f7e5c5e8afb787",
  "stdoutObjectKey": "6c029a54-e946-4b6b-b8bf-95b6b87b5070/output.md",
  "artifactsObjectPrefix": "6c029a54-e946-4b6b-b8bf-95b6b87b5070/",
  "judgeSummary": "Benchmark suite produced the expected deterministic output. The deploy audit successfully identified risky configuration drift related to the payout service's ROUTER_ALLOWLIST and CALLBACK_SECRET handling, and recommended appropriate rollback checks for these sensitive environment settings.",
  "receiptId": "842d2a42-5535-464a-9c21-2ab1d69ad31d"
}