{
  "tool_id": "art-24-mastercard-agentic-token-builder",
  "note": "golden_hash is empty until first `node golden-parity.test.mjs --update`.",
  "vectors": [
    {
      "name": "minimal",
      "policy_parameters": {
        "token_scope": {
          "agentId": "agent:test:v1",
          "merchantScope": [
            "merchant-001"
          ],
          "consentPolicy": {
            "perTransactionLimit": 50,
            "totalLimit": 500,
            "expiresAt": 1780000000
          }
        }
      },
      "output_payload": {
        "verdict": "safe",
        "score": 100,
        "errors": 0,
        "warnings": 0,
        "passes": 5,
        "findings": [
          {
            "level": "pass",
            "msg": "Agent-bound (agentId = agent:test:v1)."
          },
          {
            "level": "pass",
            "msg": "Merchant-scoped (1 merchant(s))."
          },
          {
            "level": "pass",
            "msg": "Per-transaction limit set."
          },
          {
            "level": "pass",
            "msg": "Total/period limit set."
          },
          {
            "level": "pass",
            "msg": "Expiry set (expiresAt)."
          },
          {
            "level": "info",
            "msg": "No velocity/frequency cap — consider one to bound runaway agent spend."
          },
          {
            "level": "info",
            "msg": "Field names illustrative (MDES Agentic Token) — verify against Mastercard. The agent never receives the raw PAN."
          }
        ]
      },
      "golden_hash": "94eea5fe5c5cd58364168292c90d28ea387a1f86d51216f1bc76c15e18140e4a"
    }
  ]
}
