{
 "product": "CAIN RIG",
 "slug": "rig",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-rig.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "Use the token once -> Valid, first use.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/rig/run",
     "body": {
      "preset": "use_token_once"
     }
    }
   ],
   "path": "reply.last_use_verified",
   "expect": [
    true
   ]
  },
  {
   "id": "C02",
   "kind": "attack",
   "claim": "Use the same token twice -> Single use: the second is refused.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/rig/run",
     "body": {
      "preset": "use_token_twice"
     }
    }
   ],
   "path": "reply.last_use_verified",
   "expect": [
    false
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "A thief uses the token with another key -> No matching private key.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/rig/run",
     "body": {
      "preset": "stolen_token_wrong_key"
     }
    }
   ],
   "path": "reply.last_use_verified",
   "expect": [
    false
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "Use a 'read' token to delete -> Wrong action.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/rig/run",
     "body": {
      "preset": "token_for_read_used_to_delete"
     }
    }
   ],
   "path": "reply.last_use_verified",
   "expect": [
    false
   ]
  },
  {
   "id": "C05",
   "kind": "attack",
   "claim": "Register a child agent with more rights than its parent -> Delegation can only narrow.",
   "requests": [
    {
     "method": "POST",
     "url": "/frontier-demo/rig/run",
     "body": {
      "preset": "child_wider_than_parent"
     }
    }
   ],
   "path": "reply.refused",
   "expect": [
    true
   ]
  }
 ]
}