{
 "product": "CAIN ATLAS",
 "slug": "atlas",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-atlas.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "Read a catalogue (low consequence), identity verified -> Low risk, enough evidence.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/atlas/transaction/evaluate",
     "body": {
      "transaction_id": "demo-tx",
      "nonce": "demo-n",
      "agent": "buyer-agent",
      "organization": "acme",
      "principal": "ops-team",
      "target": "supplier",
      "authority_ceiling": "CRITICAL",
      "authority_action_classes": [],
      "evidence_roots": [
       "r1",
       "r2"
      ],
      "action_class": "READ",
      "consequence_class": "LOW",
      "provided_level": "A1_IDENTITY_VERIFIED",
      "now": 1.0
     }
    }
   ],
   "path": "decision",
   "expect": [
    "AUTHORIZE"
   ]
  },
  {
   "id": "C02",
   "kind": "attack",
   "claim": "Same read with no evidence at all -> Below the bar.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/atlas/transaction/evaluate",
     "body": {
      "transaction_id": "demo-tx",
      "nonce": "demo-n",
      "agent": "buyer-agent",
      "organization": "acme",
      "principal": "ops-team",
      "target": "supplier",
      "authority_ceiling": "CRITICAL",
      "authority_action_classes": [],
      "evidence_roots": [
       "r1",
       "r2"
      ],
      "action_class": "READ",
      "consequence_class": "LOW",
      "provided_level": "A0",
      "now": 1.0
     }
    }
   ],
   "path": "decision",
   "expect": [
    "DENY"
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "WIRE_TRANSFER (not a known action) at critical -> Unknown action: denied.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/atlas/transaction/evaluate",
     "body": {
      "transaction_id": "demo-tx",
      "nonce": "demo-n",
      "agent": "buyer-agent",
      "organization": "acme",
      "principal": "ops-team",
      "target": "supplier",
      "authority_ceiling": "CRITICAL",
      "authority_action_classes": [],
      "evidence_roots": [
       "r1",
       "r2"
      ],
      "action_class": "WIRE_TRANSFER",
      "consequence_class": "CRITICAL",
      "provided_level": "A1_IDENTITY_VERIFIED",
      "now": 1.0
     }
    }
   ],
   "path": "decision",
   "expect": [
    "DENY"
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "What level does that unknown action require? -> The highest level, never the lowest.",
   "requests": [
    {
     "method": "POST",
     "url": "/fabric/atlas/transaction/evaluate",
     "body": {
      "transaction_id": "demo-tx",
      "nonce": "demo-n",
      "agent": "buyer-agent",
      "organization": "acme",
      "principal": "ops-team",
      "target": "supplier",
      "authority_ceiling": "CRITICAL",
      "authority_action_classes": [],
      "evidence_roots": [
       "r1",
       "r2"
      ],
      "action_class": "WIRE_TRANSFER",
      "consequence_class": "CRITICAL",
      "provided_level": "A1_IDENTITY_VERIFIED",
      "now": 1.0
     }
    }
   ],
   "path": "required_level",
   "expect": [
    "A8_FEDERATED_TRUST_VERIFIED"
   ]
  }
 ]
}