{
  "schemaVersion": "1.0",
  "kind": "template",
  "fictional": true,
  "policy": {
    "description": "Fictional invoicing service: permissions apply only within verified current tenant membership. Adapt this example policy before using the template.",
    "memberActions": [
      "list",
      "read"
    ],
    "adminActions": [
      "list",
      "read",
      "create",
      "update",
      "delete",
      "export"
    ],
    "revocation": "next-request",
    "denialStatus": {
      "unauthenticated": 401,
      "forbidden": 403,
      "objectNotVisible": 404
    }
  },
  "fixtureInstructions": [
    "Replace the illustrative policy with your documented policy.",
    "Populate fixtures and threat IDs, duplicate the skeleton, and replace every placeholder before execution.",
    "Keep actual credentials and assessment results in your own private assessment workspace."
  ],
  "fixtures": {
    "tenants": {},
    "actors": {},
    "resources": {}
  },
  "threatIds": [],
  "cases": [
    {
      "id": "CASE-ID",
      "threatId": null,
      "purpose": "Describe the policy rule and boundary being tested.",
      "actorKey": null,
      "resourceKey": null,
      "preconditions": [],
      "request": {
        "method": "",
        "path": "",
        "headers": {},
        "body": null
      },
      "expected": {
        "status": null,
        "responseAssertions": [],
        "sideEffectAssertions": [],
        "payload": null,
        "state": null
      },
      "execution": {
        "status": "not-run",
        "observed": null,
        "evidenceRefs": []
      }
    }
  ]
}