{
 "engine": "AGA/1.1",
 "description": "Adversarial conformance vectors for AGA/1.1's three-state verdicts. The control logic itself is unchanged from AGA/1.0 -- these vectors confirm the verdict remapping (PASS->VERIFIED, FAIL->UNVERIFIED, PARTIAL->UNVERIFIED, UNKNOWN->UNOBSERVABLE) is applied correctly and that runtime-only controls stay UNOBSERVABLE without supplied evidence.",
 "network_exceptions": [],
 "vectors": [
  {"fixture": "fixtures/tricky_clean", "check": "id.no_secrets", "expect_verdict": "VERIFIED", "note": "vendor EXAMPLE key must not be reported as a leak"},
  {"fixture": "fixtures/tricky_dirty", "check": "id.no_secrets", "expect_verdict": "UNVERIFIED", "note": "a real-shaped AWS key IS a leak"},
  {"fixture": "fixtures/tricky_clean", "check": "sc.safe_deploy", "expect_verdict": "VERIFIED", "note": "apt cleanup rm -rf /var/lib/... is not destructive"},
  {"fixture": "fixtures/tricky_dirty", "check": "sc.safe_deploy", "expect_verdict": "UNVERIFIED", "note": "an actual rm -rf / IS destructive"},
  {"fixture": "fixtures/bad", "check": "id.no_secrets", "expect_verdict": "UNVERIFIED"},
  {"fixture": "fixtures/bad", "check": "sc.safe_deploy", "expect_verdict": "UNVERIFIED"},
  {"fixture": "fixtures/good", "check": "au.deny_default", "expect_verdict": "VERIFIED"},
  {"fixture": "fixtures/good", "check": "ov.kill_switch", "expect_verdict": "VERIFIED"},
  {"fixture": "fixtures/good", "check": "rt.refusal_proof", "expect_verdict": "UNOBSERVABLE", "note": "runtime-only, no evidence supplied"},
  {"fixture": "fixtures/good", "check": "rt.no_real_sends", "expect_verdict": "UNOBSERVABLE", "note": "runtime-only, no evidence supplied"}
 ]
}