Record external effects and verify across clusters

Overview

A model/tool trace alone does not independently prove a database update or HTTP side effect. Instrument the actual trusted operation with supported evidence helpers and record a redacted, bounded description or digest. Verification and authorization remain separate concerns.

Instrument the effect where it occurs

A model asking a tool to update a ticket is not proof that the ticket system accepted the change. Wrap the actual trusted HTTP/database/storage operation with the supported evidence helper and record its bounded, redacted outcome. This ties the observed effect to causal context without putting secrets or entire documents into an evidence record.

Business atomicity needs its own design

Evidence capture and the external write can fail independently unless your application coordinates them through a suitable transaction/outbox or external audit mechanism. A signature protects the recorded evidence; it does not make two separate systems atomic. Reconciliation must be able to tell whether the request succeeded when the caller lost its response.

Record a trusted external effect

1. Wrap the request/Graph operation with RecordHttpCallAsync, RecordDbEffectAsync, RecordStorageEffectAsync or RecordLibraryCallAsync as appropriate.
2. Bind outcome, causal context and redacted metadata to the evidence. Use transactional/outbox or external audit evidence when the business guarantee requires it.
3. Export stable chunks without rewriting signatures, certificates or records. Verify against the correct trust bundle across clusters.

using FabrCore.Core.VerifiableExecution;
using FabrCore.Sdk.VerifiableExecution;

private IVerifiableExecutionContext? _evidence;

public Task InitializeAsync(AgentConfiguration config, IServiceProvider serviceProvider)
{
    _evidence = serviceProvider.GetService<IVerifiableExecutionContext>();
    return Task.CompletedTask;
}

var result = await _evidence.RecordDbEffectAsync(
    operation: "UpdateOrderStatus",
    target: "Orders",
    subject: orderId,
    effect: () => ExecuteUpdateAsync(orderId, status),
    metadata: new Dictionary<string, string?>
    {
        ["db.system"] = "sqlserver",
        ["db.name"] = "orders",
        ["row_key_hash"] = VerifiableExecutionHash.HashText(orderId),
        ["command_hash"] = VerifiableExecutionHash.HashText(commandText),
        ["parameter_hash"] = VerifiableExecutionHash.HashText(redactedParametersJson),
        ["transaction_id"] = txId,
        ["rowversion"] = rowVersion
    });

var affectedRows = result.Value;

Go deeper

Explore the related documentation.

• FabrCore Telemetry
• FabrCore Monitoring
• FabrCore Verifiable Execution
• FabrCore Testing
• External Effects