{
  "rows": [
    {
      "asset_id": "E37-IP-001",
      "design_around": "EASY: bilateral mTLS + config file gives most of it",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-002",
      "design_around": "MODERATE",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-003",
      "design_around": "EASY",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-004",
      "design_around": "EASY",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-005",
      "design_around": "MODERATE",
      "alternatives": [
        "short-TTL tokens + revocation list polling",
        "central authorization server with versioned policy (e.g. resourceVersion)",
        "per-request online policy check without cached authorization"
      ]
    },
    {
      "asset_id": "E37-IP-006",
      "design_around": "EASY",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-007",
      "design_around": "N/A (weak candidate)",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-008",
      "design_around": "EASY",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-009",
      "design_around": "EASY",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-010",
      "design_around": "EASY",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-011",
      "design_around": "EASY",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    },
    {
      "asset_id": "E37-IP-012",
      "design_around": "MODERATE",
      "alternatives": [
        "bilateral mTLS + static config",
        "central broker",
        "OPA/Cedar at the receiving side"
      ]
    }
  ]
}