{
 "product": "A2A Guard",
 "slug": "a2a-guard",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-a2a-guard.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "The original, untouched card verifies -> The registered card matches its signature.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/a2a-guard/run",
     "body": {
      "input": "transfer_funds"
     }
    }
   ],
   "path": "steps.1.reply.valid",
   "expect": [
    true
   ]
  },
  {
   "id": "C02",
   "kind": "attack",
   "claim": "Copy with 'transfer_funds' added -> One added capability breaks the signature.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/a2a-guard/run",
     "body": {
      "input": "transfer_funds"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "Copy with 'wire_transfer_unlimited' added -> Same: rejected.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/a2a-guard/run",
     "body": {
      "input": "wire_transfer_unlimited"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "Copy with 'delete_all_users' added -> Rejected.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/a2a-guard/run",
     "body": {
      "input": "delete_all_users"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  },
  {
   "id": "C05",
   "kind": "attack",
   "claim": "Even a harmless-sounding 'read_calendar' added -> Integrity is all-or-nothing: any edit fails, whether it looks dangerous or not.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/a2a-guard/run",
     "body": {
      "input": "read_calendar"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  }
 ]
}