{
  "purpose": "Synthetic approval-boundary planning fixture; not executable authorization logic or proof of a secure deployment.",
  "workflow": "An agent proposes an external follow-up message; a permitted reviewer must approve the exact recipient and content before sending.",
  "assumptions": [
    "The application authenticates the reviewer and verifies current permissions independently of the model.",
    "Approval is tied to a proposal version, exact action payload and expiry time.",
    "The execution service checks current policy and target state before attempting a side effect.",
    "An uncertain execution result requires reconciliation before any retry."
  ],
  "cases": [
    {"id":"A01","scenario":"Valid reviewer approves unchanged action before expiry","expected":"Proceed to execution-time checks; approval alone is not proof of execution.","automatic_execution_permitted":true,"observed_result":null},
    {"id":"A02","scenario":"Reviewer rejects the proposal","expected":"Do not send; record rejection and return ownership to the requester.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A03","scenario":"No reviewer responds before expiry","expected":"Expire the proposal and notify the owner; silence is not approval.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A04","scenario":"Recipient changes after approval","expected":"Invalidate approval; show a new proposal version for review.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A05","scenario":"Message content changes after approval","expected":"Invalidate approval; review the changed payload.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A06","scenario":"Reviewer belongs to another customer account","expected":"Deny approval; never grant cross-account authority from a request parameter.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A07","scenario":"Reviewer's authority is revoked before execution","expected":"Deny execution and route for renewed authorized review.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A08","scenario":"Two workers attempt to execute the same approved action","expected":"Use durable coordination and downstream deduplication; do not create two side effects.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A09","scenario":"Provider times out after a send attempt","expected":"Mark outcome unknown; reconcile provider receipt before considering a retry.","automatic_execution_permitted":false,"observed_result":null},
    {"id":"A10","scenario":"Target record or policy changes while approval waits","expected":"Recheck current state; invalidate or re-review when the approved assumptions no longer hold.","automatic_execution_permitted":false,"observed_result":null}
  ]
}