{
  "schema": "MAKNOW_LOC005_LAB_FIXTURES_v1",
  "cases": [
    {
      "id": "case_01",
      "cli_command": "status.health",
      "effect_class": "DIAGNOSTIC_READ_ONLY",
      "state_change": false,
      "normal_admin_path": true,
      "normal_scope_allowed": true,
      "break_glass_eligible": false,
      "required_actor": "local_operator",
      "break_glass_reason": null,
      "approval_ref": null,
      "local_authn_state": "VERIFIED",
      "local_authz_state": "ALLOWED",
      "command_scope": "diagnostic.read",
      "break_glass_active": false,
      "break_glass_scopes": [],
      "activated_at": null,
      "expires_at": null,
      "now": "2026-09-17T00:10:00Z",
      "revoked": false,
      "confirmation_state": "NOT_REQUIRED",
      "audit_event_id": "evt-001",
      "post_event_review": false,
      "identity_provider_available": false,
      "transfer": false
    },
    {
      "id": "case_02",
      "cli_command": "config.validate",
      "effect_class": "DIAGNOSTIC_READ_ONLY",
      "state_change": false,
      "normal_admin_path": true,
      "normal_scope_allowed": true,
      "break_glass_eligible": false,
      "required_actor": "local_operator",
      "break_glass_reason": null,
      "approval_ref": null,
      "local_authn_state": "VERIFIED",
      "local_authz_state": "ALLOWED",
      "command_scope": "config.validate",
      "break_glass_active": false,
      "break_glass_scopes": [],
      "activated_at": null,
      "expires_at": null,
      "now": "2026-09-17T00:11:00Z",
      "revoked": false,
      "confirmation_state": "NOT_REQUIRED",
      "audit_event_id": null,
      "post_event_review": false,
      "identity_provider_available": false,
      "transfer": false
    },
    {
      "id": "case_03",
      "cli_command": "config.rollback_one",
      "effect_class": "RECOVERY_STATE_CHANGE",
      "state_change": true,
      "normal_admin_path": false,
      "normal_scope_allowed": false,
      "break_glass_eligible": true,
      "required_actor": "site_recovery_operator",
      "break_glass_reason": "restore last known good configuration",
      "approval_ref": "apr-003",
      "local_authn_state": "VERIFIED",
      "local_authz_state": "ALLOWED",
      "command_scope": "recovery.rollback",
      "break_glass_active": true,
      "break_glass_scopes": [
        "recovery.rollback"
      ],
      "activated_at": "2026-09-17T00:00:00Z",
      "expires_at": "2026-09-17T00:30:00Z",
      "now": "2026-09-17T00:12:00Z",
      "revoked": false,
      "confirmation_state": "CONFIRMED",
      "audit_event_id": "evt-003",
      "post_event_review": false,
      "identity_provider_available": false,
      "transfer": false
    },
    {
      "id": "case_04",
      "cli_command": "data.purge",
      "effect_class": "DESTRUCTIVE_OR_HIGH_RISK",
      "state_change": true,
      "normal_admin_path": false,
      "normal_scope_allowed": false,
      "break_glass_eligible": false,
      "required_actor": "security_admin",
      "break_glass_reason": "site outage",
      "approval_ref": "apr-004",
      "local_authn_state": "VERIFIED",
      "local_authz_state": "ALLOWED",
      "command_scope": "data.purge",
      "break_glass_active": true,
      "break_glass_scopes": [
        "recovery.rollback",
        "credential.rotate_local"
      ],
      "activated_at": "2026-09-17T00:00:00Z",
      "expires_at": "2026-09-17T00:30:00Z",
      "now": "2026-09-17T00:13:00Z",
      "revoked": false,
      "confirmation_state": "CONFIRMED",
      "audit_event_id": "evt-004",
      "post_event_review": false,
      "identity_provider_available": false,
      "transfer": false
    },
    {
      "id": "case_05",
      "cli_command": "credential.rotate_local",
      "effect_class": "RECOVERY_STATE_CHANGE",
      "state_change": true,
      "normal_admin_path": false,
      "normal_scope_allowed": false,
      "break_glass_eligible": true,
      "required_actor": "site_recovery_operator",
      "break_glass_reason": "damaged local credential",
      "approval_ref": "apr-005",
      "local_authn_state": "VERIFIED",
      "local_authz_state": "ALLOWED",
      "command_scope": "credential.rotate_local",
      "break_glass_active": true,
      "break_glass_scopes": [
        "credential.rotate_local"
      ],
      "activated_at": "2026-09-17T00:00:00Z",
      "expires_at": "2026-09-17T00:10:00Z",
      "now": "2026-09-17T00:14:00Z",
      "revoked": false,
      "confirmation_state": "CONFIRMED",
      "audit_event_id": "evt-005",
      "post_event_review": false,
      "identity_provider_available": false,
      "transfer": false
    },
    {
      "id": "case_06",
      "cli_command": "config.rollback_one",
      "effect_class": "RECOVERY_STATE_CHANGE",
      "state_change": true,
      "normal_admin_path": false,
      "normal_scope_allowed": false,
      "break_glass_eligible": true,
      "required_actor": "site_recovery_operator",
      "break_glass_reason": "restore configuration",
      "approval_ref": "apr-006",
      "local_authn_state": "STALE",
      "local_authz_state": "ALLOWED",
      "command_scope": "recovery.rollback",
      "break_glass_active": true,
      "break_glass_scopes": [
        "recovery.rollback"
      ],
      "activated_at": "2026-09-17T00:00:00Z",
      "expires_at": "2026-09-17T00:30:00Z",
      "now": "2026-09-17T00:15:00Z",
      "revoked": false,
      "confirmation_state": "CONFIRMED",
      "audit_event_id": "evt-006",
      "post_event_review": false,
      "identity_provider_available": false,
      "transfer": false
    },
    {
      "id": "case_07",
      "cli_command": "credential.rotate_local",
      "effect_class": "RECOVERY_STATE_CHANGE",
      "state_change": true,
      "normal_admin_path": false,
      "normal_scope_allowed": false,
      "break_glass_eligible": true,
      "required_actor": "site_recovery_operator",
      "break_glass_reason": "credential recovery",
      "approval_ref": "apr-007",
      "local_authn_state": "VERIFIED",
      "local_authz_state": "ALLOWED",
      "command_scope": "credential.rotate_local",
      "break_glass_active": true,
      "break_glass_scopes": [
        "credential.rotate_local"
      ],
      "activated_at": "2026-09-17T00:00:00Z",
      "expires_at": "2026-09-17T00:30:00Z",
      "now": "2026-09-17T00:16:00Z",
      "revoked": true,
      "confirmation_state": "CONFIRMED",
      "audit_event_id": "evt-007",
      "post_event_review": false,
      "identity_provider_available": false,
      "transfer": false
    },
    {
      "id": "case_08",
      "cli_command": "breakglass.review_close",
      "effect_class": "RECOVERY_STATE_CHANGE",
      "state_change": true,
      "normal_admin_path": true,
      "normal_scope_allowed": true,
      "break_glass_eligible": false,
      "required_actor": "normal_admin",
      "break_glass_reason": null,
      "approval_ref": null,
      "local_authn_state": "VERIFIED",
      "local_authz_state": "ALLOWED",
      "command_scope": "incident.review.close",
      "break_glass_active": false,
      "break_glass_scopes": [],
      "activated_at": null,
      "expires_at": null,
      "now": "2026-09-17T00:45:00Z",
      "revoked": true,
      "confirmation_state": "CONFIRMED",
      "audit_event_id": "evt-008",
      "post_event_review": true,
      "identity_provider_available": true,
      "transfer": true
    }
  ]
}