{"$defs":{"Channel":{"description":"Normalized leakage channels.\n\nA *channel* is *where* data appears in an agentic system. The product\nthesis is that the dangerous channels are the internal ones (tool calls,\nshared memory, logs) that output-only audits never inspect.","enum":["user_input","final_output","inter_agent_message","shared_memory","tool_call","tool_response","log","generated_file"],"title":"Channel","type":"string"}},"description":"A single observable event in an agent execution.","properties":{"event_id":{"default":"","description":"Stable id; auto-filled if empty","title":"Event Id","type":"string"},"channel":{"$ref":"#/$defs/Channel"},"source":{"default":"unknown","description":"Who emitted the event","title":"Source","type":"string"},"target":{"default":"unknown","description":"Where it was headed","title":"Target","type":"string"},"content":{"anyOf":[{"type":"string"},{"additionalProperties":true,"type":"object"},{"items":{},"type":"array"}],"default":"","title":"Content"},"metadata":{"additionalProperties":true,"title":"Metadata","type":"object"},"timestamp":{"format":"date-time","title":"Timestamp","type":"string"}},"required":["channel"],"title":"Event","type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","x-agentleak-schema-version":"2026.07"}