{
 "product": "CAINPay",
 "slug": "cainpay",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-cainpay.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "Pay office-supplies.example (allowed) -> An ordinary merchant inside the limits.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/cainpay/run",
     "body": {
      "input": "office-supplies.example"
     }
    }
   ],
   "path": "steps.1.reply.decision",
   "expect": [
    "APPROVED"
   ]
  },
  {
   "id": "C02",
   "kind": "attack",
   "claim": "Pay casino.example (blocked) -> On the deny list.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/cainpay/run",
     "body": {
      "input": "casino.example"
     }
    }
   ],
   "path": "steps.1.reply.decision",
   "expect": [
    "DECLINED"
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "Same casino, in capitals with a trailing dot -> Spelling tricks don't get past the list.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/cainpay/run",
     "body": {
      "input": "CASINO.EXAMPLE."
     }
    }
   ],
   "path": "steps.1.reply.decision",
   "expect": [
    "DECLINED"
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "Same casino, as a checkout web address -> A full address still resolves to the blocked merchant.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/cainpay/run",
     "body": {
      "input": "https://casino.example/checkout"
     }
    }
   ],
   "path": "steps.1.reply.decision",
   "expect": [
    "DECLINED"
   ]
  },
  {
   "id": "C05",
   "kind": "attack",
   "claim": "A sub-domain of the casino -> Sub-domains of a blocked merchant are blocked too.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/cainpay/run",
     "body": {
      "input": "pay.casino.example"
     }
    }
   ],
   "path": "steps.1.reply.decision",
   "expect": [
    "DECLINED"
   ]
  }
 ]
}