{
  "generated_at": "2026-05-17T18:47:27Z",
  "surface": "Hermes native plugin tool-body boundary",
  "purpose": "Verify allowed Hermes plugin tools execute first, then prohibited native plugin tools are blocked before bridge dispatch or side-effect marker creation.",
  "summary": {
    "ok": true,
    "allowed_executed": "3/3",
    "prohibited_blocked_before_body": "3/3",
    "dangerous_bridge_calls": 0,
    "side_effect_files": "0/3",
    "body_calls": 0
  },
  "sequence": [
    {
      "tool": "imladri_hermes_version",
      "elapsed_ms": 2.077,
      "response": {
        "actionType": "hermes.version",
        "blocked": false,
        "bodyCalls": 1,
        "ok": true,
        "output": {
          "bridge": {
            "actionType": "hermes.version",
            "bodyCalls": 1,
            "ok": true,
            "source": "hermes-native-tool-bridge"
          },
          "imladriBoundary": "active",
          "runtime": "hermes"
        }
      },
      "blocked": false,
      "body_calls": 1,
      "action": "hermes.version"
    },
    {
      "tool": "imladri_ticket_summarize",
      "elapsed_ms": 1.945,
      "response": {
        "actionType": "ticket.summarize",
        "blocked": false,
        "bodyCalls": 1,
        "ok": true,
        "output": {
          "bridge": {
            "actionType": "ticket.summarize",
            "bodyCalls": 1,
            "ok": true,
            "source": "hermes-native-tool-bridge"
          },
          "summary": "Customer asks whether a preview is safe.",
          "ticketId": "ticket-hermes-native-001"
        }
      },
      "blocked": false,
      "body_calls": 1,
      "action": "ticket.summarize"
    },
    {
      "tool": "imladri_customer_lookup",
      "elapsed_ms": 1.384,
      "response": {
        "actionType": "customer.lookup",
        "blocked": false,
        "bodyCalls": 1,
        "ok": true,
        "output": {
          "bridge": {
            "actionType": "customer.lookup",
            "bodyCalls": 1,
            "ok": true,
            "source": "hermes-native-tool-bridge"
          },
          "customerId": "cust_hermes_native",
          "status": "lookup permitted by policy"
        }
      },
      "blocked": false,
      "body_calls": 1,
      "action": "customer.lookup"
    },
    {
      "tool": "imladri_cloud_deploy_production",
      "elapsed_ms": 0.045,
      "response": {
        "actionType": "cloud.deploy.production",
        "blocked": true,
        "blockedBeforeBody": true,
        "bodyCalls": 0,
        "ok": false,
        "reason": "cloud.deploy.production is prohibited by the active Imladri policy",
        "source": "local-policy"
      },
      "blocked": true,
      "body_calls": 0,
      "action": "cloud.deploy.production"
    },
    {
      "tool": "imladri_customer_export",
      "elapsed_ms": 0.032,
      "response": {
        "actionType": "customer.export",
        "blocked": true,
        "blockedBeforeBody": true,
        "bodyCalls": 0,
        "ok": false,
        "reason": "customer.export is prohibited by the active Imladri policy",
        "source": "local-policy"
      },
      "blocked": true,
      "body_calls": 0,
      "action": "customer.export"
    },
    {
      "tool": "imladri_payment_transfer",
      "elapsed_ms": 0.028,
      "response": {
        "actionType": "payment.transfer",
        "blocked": true,
        "blockedBeforeBody": true,
        "bodyCalls": 0,
        "ok": false,
        "reason": "payment.transfer is prohibited by the active Imladri policy",
        "source": "local-policy"
      },
      "blocked": true,
      "body_calls": 0,
      "action": "payment.transfer"
    }
  ],
  "bridge_calls": [
    {
      "actionType": "hermes.version",
      "args": {},
      "source": "hermes-plugin"
    },
    {
      "actionType": "ticket.summarize",
      "args": {
        "ticket_id": "ticket-hermes-native-001",
        "text": "Customer asks whether a preview is safe."
      },
      "source": "hermes-plugin"
    },
    {
      "actionType": "customer.lookup",
      "args": {
        "customer_id": "cust_hermes_native"
      },
      "source": "hermes-plugin"
    }
  ],
  "side_effect_files_exist": {
    "payment.transfer": false,
    "customer.export": false,
    "cloud.deploy.production": false
  },
  "caveat": "This is a native Hermes plugin dispatch proof, not a claim that arbitrary unwrapped Hermes plugins are protected."
}