{
  "artifact_type": "worked_case",
  "schema_version": "3.0.8",
  "case_id": "contractor-one-application",
  "title": "Contractor access to one internal application",
  "actor": {
    "type": "contractor",
    "responsible_party": "vendor-manager"
  },
  "resource": "inventory-web-application",
  "purpose": "Resolve inventory reconciliation tickets",
  "authority": {
    "actions": [
      "read assigned tickets",
      "update ticket notes"
    ],
    "denied": [
      "network scanning",
      "database shell",
      "bulk export",
      "administration"
    ],
    "expires_utc": "2026-06-30T23:59:59Z"
  },
  "observation": {
    "fields": [
      "decision_time_bucket",
      "resource",
      "action",
      "allow_or_deny"
    ],
    "behavioral_scoring": false
  },
  "revocation": {
    "automatic_expiry": true,
    "manual_path": "security-operations"
  },
  "exit": {
    "credential_disabled": true,
    "retained_evidence": "30-day decision log with case purpose"
  },
  "claim_boundary": "Example only; VNWO does not issue credentials or certify zero-trust conformance.",
  "last_reviewed_utc": "2026-06-20T17:20:17Z",
  "claim_boundary_note": "Static public observatory guidance only; not certification, runtime execution, file import, memory sync, credential validation, endpoint authorization, or legal advice.",
  "version": "3.0.8"
}