{
  "example": true,
  "notice": "Fictional demonstration, not a customer scan. No live system was tested.",
  "run": {
    "id": "DEMONSTRATION-NOT-A-CUSTOMER-SCAN",
    "environmentId": "fictional-staging",
    "revision": "sample-fixture",
    "status": "partial",
    "createdAt": "2026-11-02T00:00:00.000Z",
    "requests": 120,
    "maxRequests": 500
  },
  "coverage": {
    "executed": 18,
    "total": 20,
    "notApplicable": 0,
    "skipped": 2,
    "inconclusive": 0,
    "complete": false,
    "engine": {
      "packVersion": "sample-fixture",
      "engineVersion": "demonstration"
    },
    "durationSeconds": 30
  },
  "results": [
    {
      "ruleId": "SAMPLE-DEBUG",
      "title": "DEMONSTRATION: Debug configuration exposed",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/debug",
      "outcome": "finding",
      "severity": "Medium",
      "confidence": "confirmed",
      "evidence": "Fictional test fixture returned debug=true. No customer system was scanned.",
      "remediation": "Disable public debug output, redeploy, and retest the same endpoint."
    },
    {
      "ruleId": "SAMPLE-ACCESS",
      "title": "DEMONSTRATION: Cross-user access check",
      "version": "fixture-v1",
      "operation": "GET /documents/{testObjectId}",
      "outcome": "skipped",
      "skipReason": "No second test account or known private object was supplied.",
      "remediation": "Provide two dedicated staging accounts and known object markers, approve the scenario, then rerun."
    },
    {
      "ruleId": "SAMPLE-XSS",
      "title": "DEMONSTRATION: Browser XSS confirmation",
      "version": "fixture-v1",
      "operation": "POST /search",
      "outcome": "skipped",
      "skipReason": "Active staging consent was not provided.",
      "remediation": "Configure a staging scenario and explicitly authorize active checks."
    },
    {
      "ruleId": "SAMPLE-PASS-1",
      "title": "DEMONSTRATION: Passing fixture 1",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/1",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-2",
      "title": "DEMONSTRATION: Passing fixture 2",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/2",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-3",
      "title": "DEMONSTRATION: Passing fixture 3",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/3",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-4",
      "title": "DEMONSTRATION: Passing fixture 4",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/4",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-5",
      "title": "DEMONSTRATION: Passing fixture 5",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/5",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-6",
      "title": "DEMONSTRATION: Passing fixture 6",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/6",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-7",
      "title": "DEMONSTRATION: Passing fixture 7",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/7",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-8",
      "title": "DEMONSTRATION: Passing fixture 8",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/8",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-9",
      "title": "DEMONSTRATION: Passing fixture 9",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/9",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-10",
      "title": "DEMONSTRATION: Passing fixture 10",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/10",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-11",
      "title": "DEMONSTRATION: Passing fixture 11",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/11",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-12",
      "title": "DEMONSTRATION: Passing fixture 12",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/12",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-13",
      "title": "DEMONSTRATION: Passing fixture 13",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/13",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-14",
      "title": "DEMONSTRATION: Passing fixture 14",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/14",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-15",
      "title": "DEMONSTRATION: Passing fixture 15",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/15",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-16",
      "title": "DEMONSTRATION: Passing fixture 16",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/16",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    },
    {
      "ruleId": "SAMPLE-PASS-17",
      "title": "DEMONSTRATION: Passing fixture 17",
      "version": "fixture-v1",
      "operation": "GET https://example.invalid/fixture/17",
      "outcome": "passed",
      "evidence": "Synthetic control passed. This does not represent a scan of a real system."
    }
  ]
}