[
  {
    "schema": "cw-source-coverage-1",
    "classification": "synthetic-only",
    "caseId": "incident-base",
    "title": "Recent change and service degradation",
    "provenance": {
      "caseSha256": "sha256:4f17487444bcd7a44a88f2650082ecc8625e73c7362481ccbf6c36065bd9db5d",
      "inventorySha256": "sha256:e1e7654956f63a17e3b81e6e5774608be11407ab20805c87fb8bed71c440ef7e",
      "evidenceHash": "sha256:fff7d62236c7d7c54cd8f281215436f92065cd71debb1487e625f1c5ac1260bf"
    },
    "window": {
      "from": "2026-10-06T12:00:00.000Z",
      "to": "2026-10-06T12:30:00.000Z"
    },
    "review": {
      "state": "review-recorded",
      "reviewer": "Fictional inventory reviewer",
      "reference": "synthetic://independent-inventory/v1",
      "note": "Separately authored teaching inventory, not inferred from the supplied events. Recorded review is a declaration, not authentication or client acceptance."
    },
    "rows": [
      {
        "id": "release-worker",
        "producer": "fictional-release-log",
        "serviceId": "svc-worker",
        "kind": "change",
        "expectation": "Look for the declared worker release context in this sample. Absence does not prove there was an unrecorded change.",
        "state": "received-in-window",
        "receivedEventIds": [
          "release-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "worker-telemetry",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "telemetry",
        "expectation": "Reconcile worker telemetry coverage and expected delivery with the source owner; a sample is not a continuous coverage guarantee.",
        "state": "received-in-window",
        "receivedEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "mission-reports",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "mission-report",
        "expectation": "Retain reported service impact. No report may mean no report was made; it does not prove a collection failure.",
        "state": "received-in-window",
        "receivedEventIds": [
          "mission-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "queue-security",
        "producer": "fictional-event-feed",
        "serviceId": "svc-queue",
        "kind": "security-alert",
        "expectation": "Account for the queue security-alert feed separately. No alert does not mean no threat, a failed feed or missing CSSP coverage.",
        "state": "received-in-window",
        "receivedEventIds": [
          "security-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      }
    ],
    "unmatchedEvents": [],
    "inputEventIds": [
      "release-1",
      "memory-1",
      "mission-1",
      "security-1",
      "memory-delivery-2"
    ],
    "counting": "Receipt evidence only, using [from, to). Repeated deliveries count as received records, never unique incidents or coverage percentage. Occurrence time is not substituted for receipt time; neither timestamp is independently verified.",
    "executionAllowed": false,
    "clientAcceptance": false,
    "coverageComplete": null,
    "limitation": "This compares a declared inventory with a bounded fictional sample. It cannot establish complete enterprise monitoring, feed health, expected delivery frequency, service entitlement, CSSP coverage or authority. Inventory review is recorded, not authenticated."
  },
  {
    "schema": "cw-source-coverage-1",
    "classification": "synthetic-only",
    "caseId": "coverage-absent-feed",
    "title": "Security feed absent; producer still present",
    "provenance": {
      "caseSha256": "sha256:b70f72df87b1218f3af51f3b49b08b18b6031940e82d553e98af033f8f2f26b2",
      "inventorySha256": "sha256:e1e7654956f63a17e3b81e6e5774608be11407ab20805c87fb8bed71c440ef7e",
      "evidenceHash": "sha256:fff7d62236c7d7c54cd8f281215436f92065cd71debb1487e625f1c5ac1260bf"
    },
    "window": {
      "from": "2026-10-06T12:00:00.000Z",
      "to": "2026-10-06T12:30:00.000Z"
    },
    "review": {
      "state": "review-recorded",
      "reviewer": "Fictional inventory reviewer",
      "reference": "synthetic://independent-inventory/v1",
      "note": "Separately authored teaching inventory, not inferred from the supplied events. Recorded review is a declaration, not authentication or client acceptance."
    },
    "rows": [
      {
        "id": "release-worker",
        "producer": "fictional-release-log",
        "serviceId": "svc-worker",
        "kind": "change",
        "expectation": "Look for the declared worker release context in this sample. Absence does not prove there was an unrecorded change.",
        "state": "received-in-window",
        "receivedEventIds": [
          "release-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "worker-telemetry",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "telemetry",
        "expectation": "Reconcile worker telemetry coverage and expected delivery with the source owner; a sample is not a continuous coverage guarantee.",
        "state": "received-in-window",
        "receivedEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "mission-reports",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "mission-report",
        "expectation": "Retain reported service impact. No report may mean no report was made; it does not prove a collection failure.",
        "state": "received-in-window",
        "receivedEventIds": [
          "mission-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "queue-security",
        "producer": "fictional-event-feed",
        "serviceId": "svc-queue",
        "kind": "security-alert",
        "expectation": "Account for the queue security-alert feed separately. No alert does not mean no threat, a failed feed or missing CSSP coverage.",
        "state": "no-record-in-window",
        "receivedEventIds": [],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "No matching receipt appears in this window. Ask whether an event was expected and whether collection/delivery is evidenced; do not diagnose an outage."
      }
    ],
    "unmatchedEvents": [],
    "inputEventIds": [
      "release-1",
      "memory-1",
      "mission-1",
      "memory-delivery-2"
    ],
    "counting": "Receipt evidence only, using [from, to). Repeated deliveries count as received records, never unique incidents or coverage percentage. Occurrence time is not substituted for receipt time; neither timestamp is independently verified.",
    "executionAllowed": false,
    "clientAcceptance": false,
    "coverageComplete": null,
    "limitation": "This compares a declared inventory with a bounded fictional sample. It cannot establish complete enterprise monitoring, feed health, expected delivery frequency, service entitlement, CSSP coverage or authority. Inventory review is recorded, not authenticated."
  },
  {
    "schema": "cw-source-coverage-1",
    "classification": "synthetic-only",
    "caseId": "coverage-unknown-receipt",
    "title": "Security record has no receipt timestamp",
    "provenance": {
      "caseSha256": "sha256:c935592eca9fbbbecff39ce761d0b01db9f90087a84db4b6e3ba405e96ffb26d",
      "inventorySha256": "sha256:e1e7654956f63a17e3b81e6e5774608be11407ab20805c87fb8bed71c440ef7e",
      "evidenceHash": "sha256:fff7d62236c7d7c54cd8f281215436f92065cd71debb1487e625f1c5ac1260bf"
    },
    "window": {
      "from": "2026-10-06T12:00:00.000Z",
      "to": "2026-10-06T12:30:00.000Z"
    },
    "review": {
      "state": "review-recorded",
      "reviewer": "Fictional inventory reviewer",
      "reference": "synthetic://independent-inventory/v1",
      "note": "Separately authored teaching inventory, not inferred from the supplied events. Recorded review is a declaration, not authentication or client acceptance."
    },
    "rows": [
      {
        "id": "release-worker",
        "producer": "fictional-release-log",
        "serviceId": "svc-worker",
        "kind": "change",
        "expectation": "Look for the declared worker release context in this sample. Absence does not prove there was an unrecorded change.",
        "state": "received-in-window",
        "receivedEventIds": [
          "release-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "worker-telemetry",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "telemetry",
        "expectation": "Reconcile worker telemetry coverage and expected delivery with the source owner; a sample is not a continuous coverage guarantee.",
        "state": "received-in-window",
        "receivedEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "mission-reports",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "mission-report",
        "expectation": "Retain reported service impact. No report may mean no report was made; it does not prove a collection failure.",
        "state": "received-in-window",
        "receivedEventIds": [
          "mission-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "queue-security",
        "producer": "fictional-event-feed",
        "serviceId": "svc-queue",
        "kind": "security-alert",
        "expectation": "Account for the queue security-alert feed separately. No alert does not mean no threat, a failed feed or missing CSSP coverage.",
        "state": "receipt-time-unresolved",
        "receivedEventIds": [],
        "unknownReceiptEventIds": [
          "security-1"
        ],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "Matching records have unknown receipt time and no known in-window receipt. Do not substitute occurrence time."
      }
    ],
    "unmatchedEvents": [],
    "inputEventIds": [
      "release-1",
      "memory-1",
      "mission-1",
      "security-1",
      "memory-delivery-2"
    ],
    "counting": "Receipt evidence only, using [from, to). Repeated deliveries count as received records, never unique incidents or coverage percentage. Occurrence time is not substituted for receipt time; neither timestamp is independently verified.",
    "executionAllowed": false,
    "clientAcceptance": false,
    "coverageComplete": null,
    "limitation": "This compares a declared inventory with a bounded fictional sample. It cannot establish complete enterprise monitoring, feed health, expected delivery frequency, service entitlement, CSSP coverage or authority. Inventory review is recorded, not authenticated."
  },
  {
    "schema": "cw-source-coverage-1",
    "classification": "synthetic-only",
    "caseId": "coverage-window-edge",
    "title": "Receipt at the end belongs to the next window",
    "provenance": {
      "caseSha256": "sha256:e3eaf9774c56fe533ec5f9afd30749ff479c4a82c2fdb23e3e38c084a3b78d12",
      "inventorySha256": "sha256:e1e7654956f63a17e3b81e6e5774608be11407ab20805c87fb8bed71c440ef7e",
      "evidenceHash": "sha256:fff7d62236c7d7c54cd8f281215436f92065cd71debb1487e625f1c5ac1260bf"
    },
    "window": {
      "from": "2026-10-06T12:00:00.000Z",
      "to": "2026-10-06T12:30:00.000Z"
    },
    "review": {
      "state": "review-recorded",
      "reviewer": "Fictional inventory reviewer",
      "reference": "synthetic://independent-inventory/v1",
      "note": "Separately authored teaching inventory, not inferred from the supplied events. Recorded review is a declaration, not authentication or client acceptance."
    },
    "rows": [
      {
        "id": "release-worker",
        "producer": "fictional-release-log",
        "serviceId": "svc-worker",
        "kind": "change",
        "expectation": "Look for the declared worker release context in this sample. Absence does not prove there was an unrecorded change.",
        "state": "received-in-window",
        "receivedEventIds": [
          "release-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "worker-telemetry",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "telemetry",
        "expectation": "Reconcile worker telemetry coverage and expected delivery with the source owner; a sample is not a continuous coverage guarantee.",
        "state": "received-in-window",
        "receivedEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "mission-reports",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "mission-report",
        "expectation": "Retain reported service impact. No report may mean no report was made; it does not prove a collection failure.",
        "state": "received-in-window",
        "receivedEventIds": [
          "mission-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "queue-security",
        "producer": "fictional-event-feed",
        "serviceId": "svc-queue",
        "kind": "security-alert",
        "expectation": "Account for the queue security-alert feed separately. No alert does not mean no threat, a failed feed or missing CSSP coverage.",
        "state": "no-record-in-window",
        "receivedEventIds": [],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [
          "security-1"
        ],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "No matching receipt appears in this window. Ask whether an event was expected and whether collection/delivery is evidenced; do not diagnose an outage."
      }
    ],
    "unmatchedEvents": [],
    "inputEventIds": [
      "release-1",
      "memory-1",
      "mission-1",
      "security-1",
      "memory-delivery-2"
    ],
    "counting": "Receipt evidence only, using [from, to). Repeated deliveries count as received records, never unique incidents or coverage percentage. Occurrence time is not substituted for receipt time; neither timestamp is independently verified.",
    "executionAllowed": false,
    "clientAcceptance": false,
    "coverageComplete": null,
    "limitation": "This compares a declared inventory with a bounded fictional sample. It cannot establish complete enterprise monitoring, feed health, expected delivery frequency, service entitlement, CSSP coverage or authority. Inventory review is recorded, not authenticated."
  },
  {
    "schema": "cw-source-coverage-1",
    "classification": "synthetic-only",
    "caseId": "incident-conflict",
    "title": "Conflicting records and unrelated change",
    "provenance": {
      "caseSha256": "sha256:12c4d8eaec9c3747e0d0ce9e9a765d6e62b4b31d2c2f07654661265bb80fc8b8",
      "inventorySha256": "sha256:e1e7654956f63a17e3b81e6e5774608be11407ab20805c87fb8bed71c440ef7e",
      "evidenceHash": "sha256:fff7d62236c7d7c54cd8f281215436f92065cd71debb1487e625f1c5ac1260bf"
    },
    "window": {
      "from": "2026-10-06T12:00:00.000Z",
      "to": "2026-10-06T12:30:00.000Z"
    },
    "review": {
      "state": "review-recorded",
      "reviewer": "Fictional inventory reviewer",
      "reference": "synthetic://independent-inventory/v1",
      "note": "Separately authored teaching inventory, not inferred from the supplied events. Recorded review is a declaration, not authentication or client acceptance."
    },
    "rows": [
      {
        "id": "release-worker",
        "producer": "fictional-release-log",
        "serviceId": "svc-worker",
        "kind": "change",
        "expectation": "Look for the declared worker release context in this sample. Absence does not prove there was an unrecorded change.",
        "state": "no-record-in-window",
        "receivedEventIds": [],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "No matching receipt appears in this window. Ask whether an event was expected and whether collection/delivery is evidenced; do not diagnose an outage."
      },
      {
        "id": "worker-telemetry",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "telemetry",
        "expectation": "Reconcile worker telemetry coverage and expected delivery with the source owner; a sample is not a continuous coverage guarantee.",
        "state": "conflicting-records",
        "receivedEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "associationWithheldEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "meaning": "Matching receipts are present in this window, but conflicting producer/record identities are retained across the supplied sample. Reconcile the conflict; receipt presence does not establish dependable content."
      },
      {
        "id": "mission-reports",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "mission-report",
        "expectation": "Retain reported service impact. No report may mean no report was made; it does not prove a collection failure.",
        "state": "received-in-window",
        "receivedEventIds": [
          "mission-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      },
      {
        "id": "queue-security",
        "producer": "fictional-event-feed",
        "serviceId": "svc-queue",
        "kind": "security-alert",
        "expectation": "Account for the queue security-alert feed separately. No alert does not mean no threat, a failed feed or missing CSSP coverage.",
        "state": "received-in-window",
        "receivedEventIds": [
          "security-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "At least one matching receipt is recorded in this half-open window. This does not prove continuous coverage, losslessness, trustworthy clocks or useful content."
      }
    ],
    "unmatchedEvents": [
      {
        "id": "release-1",
        "producer": "fictional-release-log",
        "recordId": "release-1",
        "serviceId": "svc-queue",
        "kind": "change",
        "occurredAt": "2026-10-06T12:00:00.000Z",
        "receivedAt": "2026-10-06T12:00:00.000Z",
        "clock": "verified",
        "statement": "Worker configuration release recorded. Its relationship to degradation is unknown.",
        "source": "synthetic://incident-rehearsal/release-1",
        "limitation": "Authored teaching event; no live system or individual is represented."
      }
    ],
    "inputEventIds": [
      "release-1",
      "memory-1",
      "mission-1",
      "security-1",
      "memory-delivery-2"
    ],
    "counting": "Receipt evidence only, using [from, to). Repeated deliveries count as received records, never unique incidents or coverage percentage. Occurrence time is not substituted for receipt time; neither timestamp is independently verified.",
    "executionAllowed": false,
    "clientAcceptance": false,
    "coverageComplete": null,
    "limitation": "This compares a declared inventory with a bounded fictional sample. It cannot establish complete enterprise monitoring, feed health, expected delivery frequency, service entitlement, CSSP coverage or authority. Inventory review is recorded, not authenticated."
  },
  {
    "schema": "cw-source-coverage-1",
    "classification": "synthetic-only",
    "caseId": "coverage-proposed",
    "title": "Proposed inventory is not confirmed coverage",
    "provenance": {
      "caseSha256": "sha256:3ed9969c57e9472f52ad89cf6151a69ee5a276b092092d71f89cdea713fdf0f5",
      "inventorySha256": "sha256:bb94648c01b2ac56362c35a5d58d88fe341b0b20533f9dbcb66382c947442600",
      "evidenceHash": "sha256:fff7d62236c7d7c54cd8f281215436f92065cd71debb1487e625f1c5ac1260bf"
    },
    "window": {
      "from": "2026-10-06T12:00:00.000Z",
      "to": "2026-10-06T12:30:00.000Z"
    },
    "review": {
      "state": "proposed",
      "reviewer": null,
      "reference": null,
      "note": "Fictional draft inventory; its expected scope has not received a recorded review."
    },
    "rows": [
      {
        "id": "release-worker",
        "producer": "fictional-release-log",
        "serviceId": "svc-worker",
        "kind": "change",
        "expectation": "Look for the declared worker release context in this sample. Absence does not prove there was an unrecorded change.",
        "state": "proposed-not-assessed",
        "receivedEventIds": [
          "release-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "Inventory is proposed; no expected-source conclusion is made."
      },
      {
        "id": "worker-telemetry",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "telemetry",
        "expectation": "Reconcile worker telemetry coverage and expected delivery with the source owner; a sample is not a continuous coverage guarantee.",
        "state": "proposed-not-assessed",
        "receivedEventIds": [
          "memory-1",
          "memory-delivery-2"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "Inventory is proposed; no expected-source conclusion is made."
      },
      {
        "id": "mission-reports",
        "producer": "fictional-event-feed",
        "serviceId": "svc-worker",
        "kind": "mission-report",
        "expectation": "Retain reported service impact. No report may mean no report was made; it does not prove a collection failure.",
        "state": "proposed-not-assessed",
        "receivedEventIds": [
          "mission-1"
        ],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "Inventory is proposed; no expected-source conclusion is made."
      },
      {
        "id": "queue-security",
        "producer": "fictional-event-feed",
        "serviceId": "svc-queue",
        "kind": "security-alert",
        "expectation": "Account for the queue security-alert feed separately. No alert does not mean no threat, a failed feed or missing CSSP coverage.",
        "state": "proposed-not-assessed",
        "receivedEventIds": [],
        "unknownReceiptEventIds": [],
        "outsideWindowEventIds": [],
        "conflictingEventIds": [],
        "associationWithheldEventIds": [],
        "meaning": "Inventory is proposed; no expected-source conclusion is made."
      }
    ],
    "unmatchedEvents": [],
    "inputEventIds": [
      "release-1",
      "memory-1",
      "mission-1",
      "memory-delivery-2"
    ],
    "counting": "Receipt evidence only, using [from, to). Repeated deliveries count as received records, never unique incidents or coverage percentage. Occurrence time is not substituted for receipt time; neither timestamp is independently verified.",
    "executionAllowed": false,
    "clientAcceptance": false,
    "coverageComplete": null,
    "limitation": "This compares a declared inventory with a bounded fictional sample. It cannot establish complete enterprise monitoring, feed health, expected delivery frequency, service entitlement, CSSP coverage or authority. Inventory review is recorded, not authenticated."
  }
]