SHUTDOWN REQUEST detected: ffc779ee-301
SHUTDOWN TRIGGERED: Shutdown request via action: ffc779ee-301
======================================================================
  Corrigibility v0.3 — AI Agent Safety Wrapper Demo
======================================================================

Engine initialized with 9 policies

Scenario: ✅ Safe email (1 recipient, no PII)
  Action: ActionType.COMMUNICATION
  Decision: NEEDS_REVIEW
    NEEDS REVIEW: Uncertainty=0.500, CI=[0.000, 1.000]
  Uncertainty: 0.500
  Eval time: 24.17ms
  Z3 used: ✓

Scenario: ❌ Mass email (50 recipients)
  Action: ActionType.COMMUNICATION
  Decision: BLOCKED
    BLOCKED: Critical constraint violation in communication_limits
      → Bulk messaging blocked — max 20 recipients per action
  Uncertainty: 0.500
  Eval time: 2.79ms
  Z3 used: ✓

Scenario: ❌ Email with PII (fatal violation)
  Action: ActionType.COMMUNICATION
  Decision: FATAL
    BLOCKED: Fatal policy violation in communication_limits
      → Cannot send PII in communications without explicit approval
  Uncertainty: 0.500
  Eval time: 0.52ms
  Z3 used: ✓

Scenario: ❌ External email after hours
  Action: ActionType.COMMUNICATION
  Decision: BLOCKED
    BLOCKED: Critical constraint violation in no_external_emails_after_hours
      → External emails blocked outside business hours
  Uncertainty: 0.500
  Eval time: 0.48ms
  Z3 used: ✓

Scenario: ✅ Safe database query
  Action: ActionType.DATA_ACCESS
  Decision: NEEDS_REVIEW
    NEEDS REVIEW: Uncertainty=0.500, CI=[0.000, 1.000]
  Uncertainty: 0.500
  Eval time: 0.6ms
  Z3 used: ✓

Scenario: ❌ Database dump attempt
  Action: ActionType.DATA_ACCESS
  Decision: FATAL
    BLOCKED: Fatal policy violation in data_protection
      → Broad data access patterns blocked
  Uncertainty: 0.500
  Eval time: 0.65ms
  Z3 used: ✓

Scenario: ⚠️ Delete request (always needs review)
  Action: ActionType.DATA_DELETE
  Decision: NEEDS_REVIEW
    NEEDS REVIEW: Uncertainty=0.500, CI=[0.000, 1.000]
    NEEDS REVIEW: data_delete actions always require human approval
  Uncertainty: 0.500
  Eval time: 0.46ms
  Z3 used: ✓

Scenario: ❌ Modify safety settings
  Action: ActionType.SYSTEM_CONFIG
  Decision: FATAL
    BLOCKED: Fatal policy violation in system_protection
      → Cannot modify safety-related system settings
  Uncertainty: 0.500
  Eval time: 0.26ms
  Z3 used: ✓

Scenario: ✅ Expensive API call ($15 > $10 limit)
  Action: ActionType.EXTERNAL_API
  Decision: BLOCKED
    BLOCKED: Critical constraint violation in api_call_limits
      → API call cost exceeds $10 limit
  Uncertainty: 0.500
  Eval time: 0.55ms
  Z3 used: ✓

Scenario: 🛑 SHUTDOWN (always approved, no exceptions)
  Action: ActionType.SHUTDOWN
  Decision: SHUTDOWN
    SHUTDOWN APPROVED — unconditional
    Shutdown IS safety. No policy can override this.

======================================================================
  RESULTS SUMMARY
======================================================================
  Approved:      0
  Blocked:       6
  Needs Review:  3
  Shutdown:      1

  Audit Trail Integrity Check:
    Valid: ✓
    All entries verified with hash chain + Merkle tree
    Total entries: 11
    Merkle root: 6af24162ab93a121db44b869d2dd8c37...

======================================================================
  This is what the system ACTUALLY does:
  - Verifies action parameters against formal policies (Z3)
  - Quantifies uncertainty with conformal prediction
  - Logs everything with cryptographic integrity
  - ALWAYS allows shutdown, no exceptions
======================================================================