{
 "product": "Agent-ID",
 "slug": "agent-id",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-agent-id.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "Ask for search:query (on the pass) -> Listed on the pass, so it is accepted.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/agent-id/run",
     "body": {
      "input": "search:query"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    true
   ]
  },
  {
   "id": "C02",
   "kind": "control",
   "claim": "Ask for docs:read (on the pass) -> Also listed: accepted.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/agent-id/run",
     "body": {
      "input": "docs:read"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    true
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "Ask for billing:refund -> Not on the pass: refused, even though the pass itself is genuine.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/agent-id/run",
     "body": {
      "input": "billing:refund"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "Ask for docs:write (a close cousin of docs:read) -> Read does not imply write.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/agent-id/run",
     "body": {
      "input": "docs:write"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  },
  {
   "id": "C05",
   "kind": "attack",
   "claim": "Ask for admin:* (a wildcard) -> Wildcards are not granted by asking.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/agent-id/run",
     "body": {
      "input": "admin:*"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  },
  {
   "id": "C06",
   "kind": "attack",
   "claim": "Ask for two permissions glued together -> A made-up combined permission is not on the pass.",
   "requests": [
    {
     "method": "POST",
     "url": "/catalog-demo/agent-id/run",
     "body": {
      "input": "search:query docs:read"
     }
    }
   ],
   "path": "steps.2.reply.valid",
   "expect": [
    false
   ]
  }
 ]
}