{
  "schema": "OPS017_SYNTHETIC_FIXTURES_v1",
  "cases": [
    {
      "id": "baseline-allowed",
      "authenticated": true,
      "principal": "analyst-1",
      "roles": [
        "analyst"
      ],
      "attributes": {},
      "resource": "report:quarterly",
      "action": "report.read",
      "policy_model": "RBAC",
      "policy_allows": true,
      "authz_check_present": true,
      "runtime_outcome": "ALLOW",
      "reason": "ROLE_ANALYST_ALLOWED",
      "audit_event_present": true,
      "audit_actor": "analyst-1",
      "audit_action": "report.read",
      "request_id": "req-001",
      "audit_correlation": "req-001",
      "event_source": "server",
      "event_trust": "trusted-local",
      "logged_fields": [
        "actor=analyst-1",
        "action=report.read",
        "outcome=ALLOW"
      ],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-ALPHA",
      "transfer": false
    },
    {
      "id": "unauthenticated-protected-deny",
      "authenticated": false,
      "principal": null,
      "roles": [],
      "attributes": {},
      "resource": "report:quarterly",
      "action": "report.read",
      "policy_model": "RBAC",
      "policy_allows": false,
      "authz_check_present": true,
      "runtime_outcome": "DENY",
      "reason": "AUTHENTICATION_REQUIRED",
      "audit_event_present": true,
      "audit_actor": "anonymous",
      "audit_action": "report.read",
      "request_id": "req-002",
      "audit_correlation": "req-002",
      "event_source": "server",
      "event_trust": "trusted-local",
      "logged_fields": [
        "actor=anonymous",
        "action=report.read",
        "outcome=DENY"
      ],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-BETA",
      "transfer": false
    },
    {
      "id": "authenticated-low-privilege-deny",
      "authenticated": true,
      "principal": "viewer-7",
      "roles": [
        "viewer"
      ],
      "attributes": {},
      "resource": "admin:keyset",
      "action": "admin.rotate_key",
      "policy_model": "RBAC",
      "policy_allows": false,
      "authz_check_present": true,
      "runtime_outcome": "DENY",
      "reason": "ROLE_NOT_PERMITTED",
      "audit_event_present": true,
      "audit_actor": "viewer-7",
      "audit_action": "admin.rotate_key",
      "request_id": "req-003",
      "audit_correlation": "req-003",
      "event_source": "server",
      "event_trust": "trusted-local",
      "logged_fields": [
        "actor=viewer-7",
        "action=admin.rotate_key",
        "outcome=DENY"
      ],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-GAMMA",
      "transfer": false
    },
    {
      "id": "missing-authorization-middleware",
      "authenticated": true,
      "principal": "viewer-7",
      "roles": [
        "viewer"
      ],
      "attributes": {},
      "resource": "admin:keyset",
      "action": "admin.rotate_key",
      "policy_model": "RBAC",
      "policy_allows": false,
      "authz_check_present": false,
      "runtime_outcome": "ALLOW",
      "reason": "NO_SERVER_AUTHZ_CHECK",
      "audit_event_present": true,
      "audit_actor": "viewer-7",
      "audit_action": "admin.rotate_key",
      "request_id": "req-004",
      "audit_correlation": "req-004",
      "event_source": "server",
      "event_trust": "trusted-local",
      "logged_fields": [
        "actor=viewer-7",
        "action=admin.rotate_key",
        "outcome=ALLOW"
      ],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-DELTA",
      "transfer": false
    },
    {
      "id": "deny-audit-event-missing",
      "authenticated": true,
      "principal": "viewer-7",
      "roles": [
        "viewer"
      ],
      "attributes": {},
      "resource": "admin:keyset",
      "action": "admin.rotate_key",
      "policy_model": "RBAC",
      "policy_allows": false,
      "authz_check_present": true,
      "runtime_outcome": "DENY",
      "reason": "ROLE_NOT_PERMITTED",
      "audit_event_present": false,
      "audit_actor": null,
      "audit_action": null,
      "request_id": "req-005",
      "audit_correlation": null,
      "event_source": null,
      "event_trust": "unknown",
      "logged_fields": [],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-EPSILON",
      "transfer": false
    },
    {
      "id": "naive-logger-secret-leak",
      "authenticated": true,
      "principal": "analyst-1",
      "roles": [
        "analyst"
      ],
      "attributes": {},
      "resource": "report:quarterly",
      "action": "report.read",
      "policy_model": "RBAC",
      "policy_allows": true,
      "authz_check_present": true,
      "runtime_outcome": "ALLOW",
      "reason": "ROLE_ANALYST_ALLOWED",
      "audit_event_present": true,
      "audit_actor": "analyst-1",
      "audit_action": "report.read",
      "request_id": "req-006",
      "audit_correlation": "req-006",
      "event_source": "server",
      "event_trust": "trusted-local",
      "logged_fields": [
        "actor=analyst-1",
        "authorization=Bearer SYNTHETIC-SECRET-ZETA",
        "outcome=ALLOW"
      ],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-ZETA",
      "transfer": false
    },
    {
      "id": "wrong-actor-correlation",
      "authenticated": true,
      "principal": "analyst-1",
      "roles": [
        "analyst"
      ],
      "attributes": {},
      "resource": "report:quarterly",
      "action": "report.read",
      "policy_model": "RBAC",
      "policy_allows": true,
      "authz_check_present": true,
      "runtime_outcome": "ALLOW",
      "reason": "ROLE_ANALYST_ALLOWED",
      "audit_event_present": true,
      "audit_actor": "analyst-9",
      "audit_action": "report.read",
      "request_id": "req-007",
      "audit_correlation": "req-999",
      "event_source": "server",
      "event_trust": "trusted-local",
      "logged_fields": [
        "actor=analyst-9",
        "action=report.read",
        "outcome=ALLOW"
      ],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-ETA",
      "transfer": false
    },
    {
      "id": "transfer-owner-attribute-allow",
      "authenticated": true,
      "principal": "member-4",
      "roles": [],
      "attributes": {
        "team": "blue",
        "owns": [
          "doc:4"
        ]
      },
      "resource": "doc:4",
      "action": "document.edit",
      "policy_model": "ReBAC_ABAC",
      "policy_allows": true,
      "authz_check_present": true,
      "runtime_outcome": "ALLOW",
      "reason": "OWNER_RELATIONSHIP_AND_TEAM_ATTRIBUTE",
      "audit_event_present": true,
      "audit_actor": "member-4",
      "audit_action": "document.edit",
      "request_id": "req-008",
      "audit_correlation": "req-008",
      "event_source": "audit-component",
      "event_trust": "trusted-local",
      "logged_fields": [
        "actor=member-4",
        "action=document.edit",
        "outcome=ALLOW"
      ],
      "synthetic_secret": "Bearer SYNTHETIC-SECRET-THETA",
      "transfer": true
    }
  ]
}