{
  "schema": "MAKNOW_AIE012_LAB_FIXTURES_v1",
  "cases": [
    {
      "id": "C01",
      "description": "Allowed current source, read-only, public query, no injection, citation bound.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "docs.vendor-a.example",
        "redirect_domain": null,
        "requested_tool_scope": "READ_ONLY",
        "data_classification": "PUBLIC"
      },
      "source": {
        "injection_signal": false,
        "age_hours": 6,
        "citation_bound": true
      }
    },
    {
      "id": "C02",
      "description": "Search result from an unapproved blog.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "unapproved.blog.example",
        "redirect_domain": null,
        "requested_tool_scope": "READ_ONLY",
        "data_classification": "PUBLIC"
      },
      "source": {
        "injection_signal": false,
        "age_hours": 6,
        "citation_bound": true
      }
    },
    {
      "id": "C03",
      "description": "Allowed page contains instruction to upload configuration; factual claim still has a valid citation.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "docs.vendor-a.example",
        "redirect_domain": null,
        "requested_tool_scope": "READ_ONLY",
        "data_classification": "PUBLIC"
      },
      "source": {
        "injection_signal": true,
        "age_hours": 6,
        "citation_bound": true
      }
    },
    {
      "id": "C04",
      "description": "Allowed candidate redirects to a domain outside policy.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "docs.vendor-a.example",
        "redirect_domain": "verify.example",
        "requested_tool_scope": "READ_ONLY",
        "data_classification": "PUBLIC"
      },
      "source": {
        "injection_signal": false,
        "age_hours": 6,
        "citation_bound": true
      }
    },
    {
      "id": "C05",
      "description": "Allowed official source is older than the declared review window.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "standards.example",
        "redirect_domain": null,
        "requested_tool_scope": "READ_ONLY",
        "data_classification": "PUBLIC"
      },
      "source": {
        "injection_signal": false,
        "age_hours": 900,
        "citation_bound": true
      }
    },
    {
      "id": "C06",
      "description": "Allowed domain but request attempts to send private document text externally.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "docs.vendor-a.example",
        "redirect_domain": null,
        "requested_tool_scope": "READ_ONLY",
        "data_classification": "PRIVATE_DOCUMENT"
      },
      "source": {
        "injection_signal": false,
        "age_hours": 6,
        "citation_bound": true
      }
    },
    {
      "id": "C07",
      "description": "Research step asks for a write-capable action.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "docs.vendor-a.example",
        "redirect_domain": null,
        "requested_tool_scope": "WRITE_CAPABLE",
        "data_classification": "PUBLIC"
      },
      "source": {
        "injection_signal": false,
        "age_hours": 6,
        "citation_bound": true
      }
    },
    {
      "id": "C08",
      "description": "Allowed, current source but decisive claim has no citation binding.",
      "policy": {
        "allowed_domains": [
          "docs.vendor-a.example",
          "standards.example"
        ],
        "tool_scope": "READ_ONLY",
        "allowed_egress": [
          "PUBLIC"
        ],
        "max_age_hours": 720
      },
      "request": {
        "candidate_domain": "docs.vendor-a.example",
        "redirect_domain": null,
        "requested_tool_scope": "READ_ONLY",
        "data_classification": "PUBLIC"
      },
      "source": {
        "injection_signal": false,
        "age_hours": 6,
        "citation_bound": false
      }
    }
  ]
}