{"data":{"status":"fail","minimized":{"Version":"2012-10-17","Statement":[{"Sid":"Read","Effect":"Allow","Action":["s3:GetObject","s3:ListBucket"],"Resource":"arn:aws:s3:::my-bucket/*"}]},"statements":[{"index":0,"effect":"Allow","action":"narrowed","before":["s3:Get*","s3:ListBucket","logs:PutLogEvents"],"after":["s3:GetObject","s3:ListBucket"]}],"notGranted":[],"unverified":[],"witnesses":[{"ruleId":"wildcard-over-grant","detail":"s3:Get* grants 3 known action(s), 2 beyond the required list (first: s3:GetObjectAcl, s3:GetBucketPolicy).","path":"Statement[0].Action","expected":["s3:GetObject"],"actual":["s3:GetObjectAcl","s3:GetBucketPolicy"]},{"ruleId":"unused-action","detail":"logs:PutLogEvents is not in the required list.","path":"Statement[0].Action","actual":"logs:PutLogEvents"}],"versions":{"engine":"iam-minimize 1; IAM Action wildcard semantics (* and ?, case-insensitive) from docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_action.html, fetched 2026-11-04","action-catalog":"none bundled; caller-supplied knownActions"},"limits":["Minimal means every Allow action is an exact required action; a wildcard that provably grants exactly the required set (via knownActions) is accepted.","A wildcard that matches nothing in knownActions cannot be measured: the status is unknown, not pass. Patterns that are not service:ActionName within 128 characters are reported malformed and match nothing.","Wildcard matching is capped at 3000000 steps per call (patterns x catalog); past that the status is unknown with rule iam.work-bound."],"deterministic":true},"_provenance":{"version":"writerslogic-provenance/1","issuer":"did:web:agents.writerslogic.com","verify":{"endpoint":"POST /api/v1/verify-provenance","did":"did:web:agents.writerslogic.com"},"manifest":{"format":"application/json","instance_id":"xmp:iid:a077bd31-c225-4079-95a9-6adc125a8eaa","claim_generator_info":[{"name":"WritersLogic x402 Agent Hub","version":"2.0.0"}],"title":"IAM policy action minimizer: wildcards to the required action list","assertions":[{"label":"c2pa.actions.v2","data":{"actions":[{"action":"c2pa.created","when":"2026-11-06T01:30:29.628Z","softwareAgent":{"name":"writerslogic-agent-hub/iam-minimize","version":"2.0.0"},"digitalSourceType":"http://cv.iptc.org/newscodes/digitalsourcetype/algorithmicMedia","parameters":{"endpoint":"POST /api/v1/iam-minimize","inputDigest":{"alg":"sha256","hash":"7758c150c5b9b6a744970d8cfa0c00e81fb7b2988ca56044b0e1e930e9b4cf0d","canonicalization":"JCS"}}}]}},{"label":"c2pa.hash.data","data":{"alg":"sha256","hash":"bf16979e1899922bf1b76378d4a9a3b5487968c8d360a9f551b84958956c4493","name":"jcs-canonical-json(data)"}}]},"credential":{"@context":["https://www.w3.org/ns/credentials/v2"],"id":"urn:uuid:eead2662-0d5c-4b7f-a5c4-1636d4c28bf9","type":["VerifiableCredential","AgentOutputCredential"],"issuer":"did:web:agents.writerslogic.com","validFrom":"2026-11-06T01:30:29.628Z","credentialSubject":{"id":"urn:sha256:bf16979e1899922bf1b76378d4a9a3b5487968c8d360a9f551b84958956c4493","agent":"iam-minimize","endpoint":"POST /api/v1/iam-minimize","outputDigest":{"alg":"sha256","value":"bf16979e1899922bf1b76378d4a9a3b5487968c8d360a9f551b84958956c4493","canonicalization":"JCS"},"inputDigest":{"alg":"sha256","value":"7758c150c5b9b6a744970d8cfa0c00e81fb7b2988ca56044b0e1e930e9b4cf0d","canonicalization":"JCS"},"manifestDigest":{"alg":"sha256","value":"9b5cc746b65a34b56a44e40550790e833a4362797788805da9088f3b5e094ed6","canonicalization":"JCS"},"ingredients":[],"payment":{"scheme":"api-key","network":"eip155:8453","payer":"sample"}},"proof":{"type":"DataIntegrityProof","cryptosuite":"eddsa-jcs-2022","created":"2026-11-06T01:30:29.628Z","verificationMethod":"did:web:agents.writerslogic.com#key-1","proofPurpose":"assertionMethod","proofValue":"z2J1R586JS198TXBXQjg35XiBGKonkPdedxdsRVwrB86cq8nVakj5oJe4eKWePs1ptP5ba3g3fSMzeXQ85BVyU6Rd"}},"ethSignature":{"type":"EIP-191","signer":"did:pkh:eip155:8453:0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","address":"0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","message":"writerslogic-provenance:1e19f5116842f4399ed1c0c4b7a32190f4bc9d21a19d9fcdedc976ab4054398a","signature":"0xddcaac10e7b20c8022fe9655f78babce888c79b49ac5db3cd65f8626d88c93a260d3e53fc856af4cf736adf8f47eeafe0e816f0d009446e51b050e8ec1fb89d51c"}}}