Attempt a policy-gated task
A resource agent will only act if the requester presents a credential that passes every step below — real signature verification, not a vibe.
⚠️ One-click failure test
Run a concrete attack: SpooferBot forges a credential and claims Root Notary as issuer, then tries to steal TravelBot's real credential outright. Watch the policy engine catch both.
Verification trace
Run a task attempt to see the step-by-step decision here.