{
  "scope": "AI-operated, single authored application; 50 synthetic accounts, 20 assets; not a blind benchmark",
  "source_sha256": "a1e460a58d5e438658bd4d9e5efbbd626fb2018dbdafbb71c6ac3952a656b1bf",
  "scenarios": [
    {
      "name": "Baseline lifecycle",
      "result": "pass",
      "detail": {
        "request": "ea801b4016",
        "observed": "Full lifecycle through authenticated HTTP endpoints persisted."
      }
    },
    {
      "name": "Change with existing work",
      "result": "pass",
      "detail": {
        "request": "5424783491",
        "observed": "Old request still approved by engineering manager; earlier data equal immediately after policy change."
      }
    },
    {
      "name": "New department approval",
      "result": "pass",
      "detail": {
        "request": "a9e4cf1c50",
        "observed": "Wrong department denied; Design manager accepted."
      }
    },
    {
      "name": "Role and ownership boundaries",
      "result": "pass",
      "detail": "Employee cannot act on another request, deactivate a user, or export all records."
    },
    {
      "name": "Checkout retry",
      "result": "pass",
      "detail": "Exact checkout retry returns existing result with no extra event."
    },
    {
      "name": "Offboarding and admin receipt",
      "result": "pass",
      "detail": {
        "request": "a9e4cf1c50",
        "observed": "Existing borrower session revoked; admin received equipment with attributable event. Unauthorized colleague denied."
      }
    },
    {
      "name": "Concurrent checkout",
      "result": "pass",
      "detail": [
        {
          "status": 200,
          "body": {
            "ok": true,
            "request": "ff6fb99c39"
          },
          "request": "ff6fb99c39"
        },
        {
          "status": 409,
          "body": {
            "error": "This asset is already checked out; no changes saved."
          },
          "request": "d0373b88c9"
        }
      ]
    },
    {
      "name": "Command key changed payload",
      "result": "pass",
      "detail": "Same request key with changed asset refused."
    },
    {
      "name": "Backup and clean server recovery",
      "result": "pass",
      "detail": "Second server from backup accepted login; portable records exactly equal."
    },
    {
      "name": "Portable export and re-import",
      "result": "pass",
      "detail": "Users, assets, requests, events and policy matched after fresh import. Passwords reset; sessions intentionally omitted."
    }
  ]
}