{
  "tool_id": "art-651-authzen-conformance-fixture",
  "note": "Golden vectors: vector 0 is the full 8-decision AuthZEN certification fixture (AUTHZEN-CONFORMANCE-BUILD-SPEC.md); vector 1 exercises the pp.requests override path (single custom request) so the fixture-oracle covers both call shapes compute() supports. human_sign_off: PENDING.",
  "vectors": [
    {
      "name": "canonical-8-decision-fixture",
      "policy_parameters": {},
      "output_payload": {
        "spec": "AuthZEN Authorization API 1.0 (OpenID Foundation Final Specification)",
        "decision_count": 8,
        "decisions": [
          {
            "index": 0,
            "name": "alice-read-record1",
            "subject": {
              "type": "user",
              "id": "alice"
            },
            "action": {
              "name": "read"
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "decision": true,
            "context_invariant": true,
            "expected": true,
            "matches_expected": true
          },
          {
            "index": 1,
            "name": "alice-write-record1-active",
            "subject": {
              "type": "user",
              "id": "alice"
            },
            "action": {
              "name": "write"
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "decision": true,
            "context_invariant": true,
            "expected": true,
            "matches_expected": true
          },
          {
            "index": 2,
            "name": "bob-read-record1",
            "subject": {
              "type": "user",
              "id": "bob"
            },
            "action": {
              "name": "read"
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "decision": true,
            "context_invariant": true,
            "expected": true,
            "matches_expected": true
          },
          {
            "index": 3,
            "name": "bob-write-record1-active",
            "subject": {
              "type": "user",
              "id": "bob"
            },
            "action": {
              "name": "write"
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "decision": false,
            "context_invariant": true,
            "expected": false,
            "matches_expected": true
          },
          {
            "index": 4,
            "name": "alice-write-record2-archived",
            "subject": {
              "type": "user",
              "id": "alice"
            },
            "action": {
              "name": "write"
            },
            "resource": {
              "type": "record",
              "id": "record-2",
              "properties": {
                "owner": "alice",
                "status": "archived"
              }
            },
            "decision": false,
            "context_invariant": true,
            "expected": false,
            "matches_expected": true
          },
          {
            "index": 5,
            "name": "bob-admin-write-record2-archived",
            "subject": {
              "type": "user",
              "id": "bob",
              "properties": {
                "role": "admin"
              }
            },
            "action": {
              "name": "write"
            },
            "resource": {
              "type": "record",
              "id": "record-2",
              "properties": {
                "owner": "alice",
                "status": "archived"
              }
            },
            "decision": true,
            "context_invariant": true,
            "expected": true,
            "matches_expected": true
          },
          {
            "index": 6,
            "name": "alice-delete-soft-record1",
            "subject": {
              "type": "user",
              "id": "alice"
            },
            "action": {
              "name": "delete",
              "properties": {
                "soft": true
              }
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "decision": true,
            "context_invariant": true,
            "expected": true,
            "matches_expected": true
          },
          {
            "index": 7,
            "name": "alice-delete-hard-record1",
            "subject": {
              "type": "user",
              "id": "alice"
            },
            "action": {
              "name": "delete",
              "properties": {
                "soft": false
              }
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "decision": false,
            "context_invariant": true,
            "expected": false,
            "matches_expected": true
          }
        ],
        "all_match_expected": true,
        "all_context_invariant": true
      },
      "golden_hash": "5a56f525ff7a441e2d32ff7878522efeee90cded87fa12d738999772c613206f"
    },
    {
      "name": "single-custom-request-override",
      "policy_parameters": {
        "requests": [
          {
            "name": "sole-bob-admin-write-record1-active",
            "subject": {
              "type": "user",
              "id": "bob",
              "properties": {
                "role": "admin"
              }
            },
            "action": {
              "name": "write"
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "expected": true
          }
        ]
      },
      "output_payload": {
        "spec": "AuthZEN Authorization API 1.0 (OpenID Foundation Final Specification)",
        "decision_count": 1,
        "decisions": [
          {
            "index": 0,
            "name": "sole-bob-admin-write-record1-active",
            "subject": {
              "type": "user",
              "id": "bob",
              "properties": {
                "role": "admin"
              }
            },
            "action": {
              "name": "write"
            },
            "resource": {
              "type": "record",
              "id": "record-1",
              "properties": {
                "owner": "alice",
                "status": "active"
              }
            },
            "decision": true,
            "context_invariant": true,
            "expected": true,
            "matches_expected": true
          }
        ],
        "all_match_expected": true,
        "all_context_invariant": true
      },
      "golden_hash": "5a235d070144dcf2621b1642062c4bbf050b0060dd501871b63de84781c606ca"
    }
  ]
}