Decision replay
refusal-hl-47c1680f0fff
runtime signing refused because hard_cap:orders_per_session was reached
Decision loop
- observecomplete
runtime requested a Hyperliquid action signature
- hypothesizenot applicable
refusal occurred before strategy hypothesis execution
- sizerefused
signature request failed the live signing safety gate
- commitrefused
no signed action or live transition was committed
- resolvecomplete
refused: hard_cap:orders_per_session
- evolvepartial
operator/runtime may retry after resolving the refusal reason
- replaycomplete
stored decision_replay_frames row
evidence
outcome
- kind
- refusal
- venue
- hyperliquid
- occurred
- 2026-06-21T10:55:56.481Z
- symbol
- none
journal
- status
- partial
- stream
- safety_refusals
- entry
- none
- root
- none
No signed journal root has been attached to this replay yet.
signing boundary
- status
- not applicable
- private keys stored
- no
- payload
- 47c1680f0fff09b4e258f3bc8126f3399545ab71475baffe51da328313796a69
- allowed
- order, cancel, scheduleCancel
audit
- status
- partial
- score
- 75
- complete checks
- 5/10
- missing evidence
- decision loop, model, prompt, journal entry, journal root
Proof of record
refused
bounded signing scope (privy_policy) · no private keys stored
the runtime declined this act, and the record shows it.
- Content hash
- 47c1680f0fff09b4e258f3bc8126f3399545ab71475baffe51da328313796a69
- Signed entry
- none
- Chain position
- stream safety_refusals · no previous-entry link recorded
- Journal root
- none
- anchor
- unrecorded
no signed journal root is attached to this record yet — this page says so rather than pretending.
Verify in a terminal
curl -s https://getzero.dev/api/replays/refusal-hl-47c1680f0fffone request, no account, no API key. The response carries the content hash, the signed journal entry and the root hash above. Check the root offline with the open verifier (zero_verify_journal_root on the public MCP endpoint, or the open-source engine’s own verifier).