{
  "fixture_id": "SEC006-SYNTHETIC-BROWSER-1",
  "synthetic_only": true,
  "site_map": {
    "https://app.local.test": "site-local-test",
    "https://admin.local.test": "site-local-test",
    "https://reports.partner.test": "site-partner-test",
    "https://unknown.example.test": "site-example-test",
    "https://cdn.synthetic.test": "site-cdn-test"
  },
  "flows": [
    {
      "id": "PREFERENCE_UPDATE_OK",
      "method": "POST",
      "url": "https://app.local.test/api/preferences",
      "caller_origin": "https://app.local.test",
      "ambient_credentials": true,
      "state_change": true,
      "business_authorized": true,
      "csrf_signal": "SEC006-SYNTHETIC-TOKEN"
    },
    {
      "id": "PREFERENCE_UPDATE_MISSING_CSRF",
      "method": "POST",
      "url": "https://app.local.test/api/preferences",
      "caller_origin": "https://app.local.test",
      "ambient_credentials": true,
      "state_change": true,
      "business_authorized": true,
      "csrf_signal": ""
    },
    {
      "id": "PREFERENCE_UPDATE_UNTRUSTED_ORIGIN",
      "method": "POST",
      "url": "https://app.local.test/api/preferences",
      "caller_origin": "https://unknown.example.test",
      "ambient_credentials": true,
      "state_change": true,
      "business_authorized": true,
      "csrf_signal": "SEC006-SYNTHETIC-TOKEN"
    },
    {
      "id": "STATUS_PARTNER_CORS",
      "method": "GET",
      "url": "https://app.local.test/api/status",
      "caller_origin": "https://reports.partner.test",
      "ambient_credentials": false,
      "state_change": false,
      "business_authorized": true,
      "csrf_signal": ""
    },
    {
      "id": "STATUS_UNKNOWN_CORS",
      "method": "GET",
      "url": "https://app.local.test/api/status",
      "caller_origin": "https://unknown.example.test",
      "ambient_credentials": false,
      "state_change": false,
      "business_authorized": true,
      "csrf_signal": ""
    }
  ],
  "resources": [
    {
      "id": "LOCAL_SCRIPT_CSP",
      "page_origin": "https://app.local.test",
      "resource_type": "script",
      "source_origin": "https://app.local.test",
      "mode": "enforce"
    },
    {
      "id": "REMOTE_SCRIPT_CSP_ENFORCE",
      "page_origin": "https://app.local.test",
      "resource_type": "script",
      "source_origin": "https://cdn.synthetic.test",
      "mode": "enforce"
    },
    {
      "id": "REMOTE_SCRIPT_CSP_REPORT_ONLY",
      "page_origin": "https://app.local.test",
      "resource_type": "script",
      "source_origin": "https://cdn.synthetic.test",
      "mode": "report-only"
    }
  ]
}
