{
  "schema_version": 1,
  "label": "Synthetic example; executed by the included Python simulation",
  "scope": "In-memory authorization and deletion checks only. No LLM, vector store, connector or production system is tested.",
  "query": "Show the team policy",
  "document_id": "policy-a",
  "steps": [
    {
      "stage": "authorized retrieval",
      "permission_version": 1,
      "expected": [
        "policy-a"
      ],
      "observed": [
        "policy-a"
      ],
      "result": "PASS"
    },
    {
      "stage": "group access revoked",
      "permission_version": 2,
      "expected": [],
      "observed": [],
      "result": "PASS"
    },
    {
      "stage": "source document deleted",
      "permission_version": 3,
      "expected": [],
      "observed": [],
      "result": "PASS"
    }
  ],
  "application_action": "If no authorized source remains, return an abstention instead of quoting an old cached answer.",
  "handover": [
    "Document authorization source",
    "Cache invalidation policy",
    "Deletion test",
    "Client acceptance owner"
  ]
}