{
  "label": "SYNTHETIC LAB · EXECUTED",
  "finding": "PA-LAB-02",
  "run_id": "cd444897-27a9-4110-8e30-f906254bfc24",
  "started_at": "2026-09-06T04:12:19.428Z",
  "finished_at": "2026-09-06T04:12:19.494Z",
  "clock": "Host wall clock in UTC; ordering by sequence; not independently attested or synchronized across machines",
  "environment": {
    "node": "v24.14.0",
    "sqlite": "node:sqlite",
    "platform": "linux",
    "architecture": "x64",
    "fixture": "ART scheduler fixture 1",
    "policy": "lab-policy-1",
    "model": "none",
    "connector": "in-process SQLite adapter 1",
    "network": "none"
  },
  "source_sha256": "055ab3ce88c81c7bc1a997fcac32d277ff5c388b61cd0946730cd7b6a77e0a03",
  "events_sha256": "bd94f4add7a8e81e6574431a6047fde96e449bd6803d44b95d52215376938781",
  "database_sha256": "dee8800aaf0bd45bcaa97238a42756d529480ba0b1b6e9884b3e9b506aaad86a",
  "scope": "One locally authored cancellation workflow; six deterministic cases per configuration, one trial each; two configurations. No EHR, voice/chat agent, external notification delivery, customer or real patient.",
  "rule": "Lab policy: a confirmed cancellation requires a trusted session for the patient or a currently granted proxy, bound to that patient’s selected appointment at execution.",
  "result": {
    "trials": 12,
    "vulnerable_failures": 2,
    "corrected_passes": 6,
    "successful_legitimate_controls_per_configuration": 2
  },
  "limitations": [
    "Authentication and caller identification are seeded, not tested.",
    "All layers run in one Node process; no independently deployed connector or service authentication.",
    "No model, prompt injection, telephony, EHR/FHIR, timeouts, revocation race, retries, callback routing or load test.",
    "Outbox entries demonstrate recorded communication intent, not delivery or a person receiving it.",
    "Hashes detect changed bytes relative to this receipt; they do not prove independent authorship or tamper-proof custody.",
    "Clinical harm, prevalence, production security and consultant delivery history cannot be inferred."
  ],
  "trials": [
    {
      "trial": "vulnerable-v1-T01",
      "case_id": "T01",
      "title": "Identified caller without cancellation authority",
      "mode": "vulnerable-v1",
      "expected": "deny; no appointment or outbox change",
      "disposition": "FAIL",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "caller-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "418120ce-0c19-4347-a361-1cdece458d66",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "cancelled",
        "transaction_id": "6158513f-26f4-4269-bd60-02da5c6e27f2",
        "message": "Your appointment was cancelled."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "cancelled",
            "version": 2
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "caller-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [
          {
            "id": "6158513f-26f4-4269-bd60-02da5c6e27f2",
            "trial": "vulnerable-v1-T01",
            "request_id": "418120ce-0c19-4347-a361-1cdece458d66",
            "service_identity": "scheduler-service-lab",
            "record": "appointment-1",
            "before_version": 1,
            "after_version": 2
          }
        ],
        "notifications": [
          {
            "id": "721e010c-70f1-4187-a1e4-b6324ba63a7a",
            "trial": "vulnerable-v1-T01",
            "request_id": "418120ce-0c19-4347-a361-1cdece458d66",
            "commit_id": "6158513f-26f4-4269-bd60-02da5c6e27f2",
            "recipient": "patient-1",
            "message": "Your appointment was cancelled."
          }
        ]
      },
      "evidence": [
        "E001",
        "E002",
        "E003",
        "E004",
        "E005",
        "E006"
      ]
    },
    {
      "trial": "vulnerable-v1-T02",
      "case_id": "T02",
      "title": "Patient cancels own appointment",
      "mode": "vulnerable-v1",
      "expected": "cancel selected appointment",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "7412e41e-b473-4b50-bd26-281b33cbb740",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "cancelled",
        "transaction_id": "260b4a61-de46-4faf-82ef-c2ce8902fa11",
        "message": "Your appointment was cancelled."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "cancelled",
            "version": 2
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [
          {
            "id": "260b4a61-de46-4faf-82ef-c2ce8902fa11",
            "trial": "vulnerable-v1-T02",
            "request_id": "7412e41e-b473-4b50-bd26-281b33cbb740",
            "service_identity": "scheduler-service-lab",
            "record": "appointment-1",
            "before_version": 1,
            "after_version": 2
          }
        ],
        "notifications": [
          {
            "id": "5075b70a-d890-4d45-aa37-f0c34d5575bd",
            "trial": "vulnerable-v1-T02",
            "request_id": "7412e41e-b473-4b50-bd26-281b33cbb740",
            "commit_id": "260b4a61-de46-4faf-82ef-c2ce8902fa11",
            "recipient": "patient-1",
            "message": "Your appointment was cancelled."
          }
        ]
      },
      "evidence": [
        "E007",
        "E008",
        "E009",
        "E010",
        "E011",
        "E012"
      ]
    },
    {
      "trial": "vulnerable-v1-T03",
      "case_id": "T03",
      "title": "Permitted proxy cancels represented patient appointment",
      "mode": "vulnerable-v1",
      "expected": "cancel selected appointment",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "proxy-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "dd665807-c565-4604-be20-2132286db005",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "cancelled",
        "transaction_id": "5def767c-598c-4982-bb4b-beded163c766",
        "message": "Your appointment was cancelled."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "cancelled",
            "version": 2
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "proxy-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [
          {
            "id": "5def767c-598c-4982-bb4b-beded163c766",
            "trial": "vulnerable-v1-T03",
            "request_id": "dd665807-c565-4604-be20-2132286db005",
            "service_identity": "scheduler-service-lab",
            "record": "appointment-1",
            "before_version": 1,
            "after_version": 2
          }
        ],
        "notifications": [
          {
            "id": "9ac9fe57-9ea2-47bb-a3a1-5d8f18bbd778",
            "trial": "vulnerable-v1-T03",
            "request_id": "dd665807-c565-4604-be20-2132286db005",
            "commit_id": "5def767c-598c-4982-bb4b-beded163c766",
            "recipient": "patient-1",
            "message": "Your appointment was cancelled."
          }
        ]
      },
      "evidence": [
        "E013",
        "E014",
        "E015",
        "E016",
        "E017",
        "E018"
      ]
    },
    {
      "trial": "vulnerable-v1-T04",
      "case_id": "T04",
      "title": "Authorized patient substitutes another patient appointment ID",
      "mode": "vulnerable-v1",
      "expected": "deny; no appointment or outbox change",
      "disposition": "FAIL",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "3e9da109-e10f-41d9-9ef0-1ae36f5ec827",
        "session_id": "session-1",
        "appointment_id": "appointment-2",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "cancelled",
        "transaction_id": "76c115db-3823-4161-823d-261fe31a525a",
        "message": "Your appointment was cancelled."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "cancelled",
            "version": 2
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [
          {
            "id": "76c115db-3823-4161-823d-261fe31a525a",
            "trial": "vulnerable-v1-T04",
            "request_id": "3e9da109-e10f-41d9-9ef0-1ae36f5ec827",
            "service_identity": "scheduler-service-lab",
            "record": "appointment-2",
            "before_version": 1,
            "after_version": 2
          }
        ],
        "notifications": [
          {
            "id": "fc3daf38-a171-4016-900e-5ff7af1cd46c",
            "trial": "vulnerable-v1-T04",
            "request_id": "3e9da109-e10f-41d9-9ef0-1ae36f5ec827",
            "commit_id": "76c115db-3823-4161-823d-261fe31a525a",
            "recipient": "patient-2",
            "message": "Your appointment was cancelled."
          }
        ]
      },
      "evidence": [
        "E019",
        "E020",
        "E021",
        "E022",
        "E023",
        "E024"
      ]
    },
    {
      "trial": "vulnerable-v1-T05",
      "case_id": "T05",
      "title": "Patient omits required action confirmation",
      "mode": "vulnerable-v1",
      "expected": "deny; no appointment or outbox change",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "fd14fd64-96d0-4c75-a2c0-70d14cee0c84",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": false
      },
      "response": {
        "status": "denied",
        "message": "No appointment changed. Contact the access team for assistance."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "evidence": [
        "E025",
        "E026",
        "E027"
      ]
    },
    {
      "trial": "vulnerable-v1-T06",
      "case_id": "T06",
      "title": "Request uses an unknown session",
      "mode": "vulnerable-v1",
      "expected": "deny; no appointment or outbox change",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "299aad4f-70c9-4ddd-b8e9-2ce6592a3061",
        "session_id": "missing-session",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "denied",
        "message": "No appointment changed. Contact the access team for assistance."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "evidence": [
        "E028",
        "E029",
        "E030"
      ]
    },
    {
      "trial": "corrected-v2-T01",
      "case_id": "T01",
      "title": "Identified caller without cancellation authority",
      "mode": "corrected-v2",
      "expected": "deny; no appointment or outbox change",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "caller-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "75fa8d5d-f934-474b-a02e-2072a0684c76",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "denied",
        "message": "No appointment changed. Contact the access team for assistance."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "caller-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "evidence": [
        "E031",
        "E032",
        "E033"
      ]
    },
    {
      "trial": "corrected-v2-T02",
      "case_id": "T02",
      "title": "Patient cancels own appointment",
      "mode": "corrected-v2",
      "expected": "cancel selected appointment",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "cbf10747-ae09-451b-a49a-d115410e2a3a",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "cancelled",
        "transaction_id": "9239caa1-999a-4f91-bc20-73826875eae4",
        "message": "Your appointment was cancelled."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "cancelled",
            "version": 2
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [
          {
            "id": "9239caa1-999a-4f91-bc20-73826875eae4",
            "trial": "corrected-v2-T02",
            "request_id": "cbf10747-ae09-451b-a49a-d115410e2a3a",
            "service_identity": "scheduler-service-lab",
            "record": "appointment-1",
            "before_version": 1,
            "after_version": 2
          }
        ],
        "notifications": [
          {
            "id": "2a6b1754-1971-4c7d-bb9e-0d30cacada91",
            "trial": "corrected-v2-T02",
            "request_id": "cbf10747-ae09-451b-a49a-d115410e2a3a",
            "commit_id": "9239caa1-999a-4f91-bc20-73826875eae4",
            "recipient": "patient-1",
            "message": "Your appointment was cancelled."
          }
        ]
      },
      "evidence": [
        "E034",
        "E035",
        "E036",
        "E037",
        "E038",
        "E039"
      ]
    },
    {
      "trial": "corrected-v2-T03",
      "case_id": "T03",
      "title": "Permitted proxy cancels represented patient appointment",
      "mode": "corrected-v2",
      "expected": "cancel selected appointment",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "proxy-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "8d5f5852-446b-42ba-ad2b-585a1441c8fd",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "cancelled",
        "transaction_id": "4d0ffd1b-64fe-46ac-8690-f188e9560fc9",
        "message": "Your appointment was cancelled."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "cancelled",
            "version": 2
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "proxy-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [
          {
            "id": "4d0ffd1b-64fe-46ac-8690-f188e9560fc9",
            "trial": "corrected-v2-T03",
            "request_id": "8d5f5852-446b-42ba-ad2b-585a1441c8fd",
            "service_identity": "scheduler-service-lab",
            "record": "appointment-1",
            "before_version": 1,
            "after_version": 2
          }
        ],
        "notifications": [
          {
            "id": "5da9b79c-1273-48ce-b625-7f12e084e8b3",
            "trial": "corrected-v2-T03",
            "request_id": "8d5f5852-446b-42ba-ad2b-585a1441c8fd",
            "commit_id": "4d0ffd1b-64fe-46ac-8690-f188e9560fc9",
            "recipient": "patient-1",
            "message": "Your appointment was cancelled."
          }
        ]
      },
      "evidence": [
        "E040",
        "E041",
        "E042",
        "E043",
        "E044",
        "E045"
      ]
    },
    {
      "trial": "corrected-v2-T04",
      "case_id": "T04",
      "title": "Authorized patient substitutes another patient appointment ID",
      "mode": "corrected-v2",
      "expected": "deny; no appointment or outbox change",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "1754923d-f0c9-4a87-a75c-4e3c0f1ab0a7",
        "session_id": "session-1",
        "appointment_id": "appointment-2",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "denied",
        "message": "No appointment changed. Contact the access team for assistance."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "evidence": [
        "E046",
        "E047",
        "E048"
      ]
    },
    {
      "trial": "corrected-v2-T05",
      "case_id": "T05",
      "title": "Patient omits required action confirmation",
      "mode": "corrected-v2",
      "expected": "deny; no appointment or outbox change",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "77757afe-d96c-446a-85e2-0a7e6a676301",
        "session_id": "session-1",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": false
      },
      "response": {
        "status": "denied",
        "message": "No appointment changed. Contact the access team for assistance."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "evidence": [
        "E049",
        "E050",
        "E051"
      ]
    },
    {
      "trial": "corrected-v2-T06",
      "case_id": "T06",
      "title": "Request uses an unknown session",
      "mode": "corrected-v2",
      "expected": "deny; no appointment or outbox change",
      "disposition": "PASS",
      "before": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "request": {
        "request_id": "3c3a693c-2c40-4b02-bd23-91bd83cb1927",
        "session_id": "missing-session",
        "appointment_id": "appointment-1",
        "operation": "cancel",
        "confirmed": true
      },
      "response": {
        "status": "denied",
        "message": "No appointment changed. Contact the access team for assistance."
      },
      "after": {
        "appointments": [
          {
            "id": "appointment-1",
            "patient": "patient-1",
            "status": "scheduled",
            "version": 1
          },
          {
            "id": "appointment-2",
            "patient": "patient-2",
            "status": "scheduled",
            "version": 1
          }
        ],
        "sessions": [
          {
            "id": "session-1",
            "actor": "patient-1",
            "represented_patient": "patient-1"
          }
        ],
        "grants": [
          {
            "actor": "proxy-1",
            "patient": "patient-1",
            "operation": "cancel"
          }
        ],
        "commits": [],
        "notifications": []
      },
      "evidence": [
        "E052",
        "E053",
        "E054"
      ]
    }
  ]
}