{
  "finished_at": "2026-10-12T19:32:22.569Z",
  "plan_sha256": "f17bb5d4194492cdb1536c018611e5bf69e80ff05b9e5819a257b21d0d28b23d",
  "actual_http_requests": 9,
  "operational_records": 8,
  "fatal_harness_error": false,
  "assertions": [
    {
      "name": "case:snapshot-success",
      "passed": true
    },
    {
      "name": "case:alias-without-usage",
      "passed": true
    },
    {
      "name": "case:rate-limit",
      "passed": true
    },
    {
      "name": "case:upstream-error",
      "passed": true
    },
    {
      "name": "case:body-stall",
      "passed": true
    },
    {
      "name": "case:malformed-json",
      "passed": true
    },
    {
      "name": "case:wrong-schema",
      "passed": true
    },
    {
      "name": "case:hostile-metadata",
      "passed": true
    },
    {
      "name": "nine synthetic HTTP requests; no retry",
      "passed": true
    },
    {
      "name": "trace, credential and prompt reached mock",
      "passed": true
    },
    {
      "name": "all seven canaries absent from operational log",
      "passed": true
    },
    {
      "name": "over-collecting control exposes four synthetic data classes",
      "passed": true
    },
    {
      "name": "header-only deadline misses body delay",
      "passed": true
    },
    {
      "name": "full deadline aborts body after 200 headers",
      "passed": true
    },
    {
      "name": "inputs unchanged",
      "passed": true
    }
  ],
  "all_passed": true,
  "artifacts": [
    {
      "path": "operational.ndjson",
      "sha256": "7a2996728f107357ea2e4f51e01bbe51657f2744c3d7b0068cbeb307c18fdab4"
    },
    {
      "path": "provider-observations.json",
      "sha256": "6d92c048ae320d152983499caf3836267610e24ec54df7cbff216bda8c5bcaad"
    },
    {
      "path": "header-only-control.json",
      "sha256": "f9622db37f4f3172d2cd31afef36d29a164b943e60c9aee5c7dea6a80bb87e16"
    },
    {
      "path": "overcollecting-control.json",
      "sha256": "efaabd65a8006b621d6a7574a1ec1b81a80cbc94c7d3aea912e41ac2b9f718b8"
    }
  ],
  "boundary": "Same-author local mock experiment. No real provider/model/production traffic; canary scan covers only this operational log, not a general privacy proof."
}