{
  "$schema": "https://aigovernanceengineer.com/schemas/control-observation.v1.json",
  "control_id": "AIGE-CTL-EVAL-002",
  "profile": "evaluation-environment",
  "control_version": "0.2",
  "subject": "eval-env-eu-west@2026-09-26",
  "subject_kind": "eval-environment",
  "expected": "Outbound connections only to the destinations on the run's egress allow-list; every other attempt refused and logged.",
  "observed": "Run 88213: 1 connection to an unlisted host succeeded; the task environment had no egress policy attached.",
  "status": "fail",
  "timestamp": "2026-09-26T09:42:17Z",
  "enforcement_point": "runtime",
  "verification_kind": "observe",
  "observer": "egress-flow-log-adapter",
  "evidence": [
    {
      "artefact": "flow log of run 88213",
      "url": "https://evidence.example/runs/88213/flows.jsonl",
      "hash": "sha256:9f2c4e1a7b3d5f8e0a2c4b6d8f1e3a5c7b9d0f2e4a6c8b1d3f5e7a9c0b2d4f6e"
    }
  ],
  "run_id": "88213",
  "notes": "Illustrative example, not the result of a real evaluation. The run was stopped, its result withheld and the environment template fixed."
}