CC-AGENT-01: What did the agent actually read?
All material is synthetic. The .example destination is a documentation placeholder.
Never execute the decoded instruction.
Tutorial: /blog/what-did-the-agent-actually-read/
Preserve tool-response.json. Decode only encoded-note.txt with From Base64.
Compare with expected-decoded.txt after completing the exercise.
Save your existing Trace Lab plan before importing run-plan.json.
Import run-transcript.txt into the reviewer. Review detected actions manually:
only the scoped document read executed; the upload was proposed and blocked.
The reviewer uses text patterns and may flag quoted or denied actions.
The gate in the transcript is fictional. Trace Lab does not enforce permissions.
