{
  "schema_version": "tool-cases-v2",
  "contract": {
    "model_result": "tool-model-result-v2",
    "protected_audit": "tool-audit-v2"
  },
  "cases": [
    {
      "id": "read-own-order",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "read",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": "ORDER-7"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-read-1", "call_id": "call-read-1", "operation_id": "op-read-1", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "OK", "status": "succeeded", "outcome": "committed", "recovery": "none", "delivery": "fresh", "data": {"order_ref": "ORDER-7", "status": "paid"}, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "read-other-user-fails-closed",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "read",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": "ORDER-8"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-read-2", "call_id": "call-read-2", "operation_id": "op-read-2", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "NOT_FOUND", "status": "failed", "outcome": "not_started", "recovery": "none", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "cross-tenant-fails-closed",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "read",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": "ORDER-9"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-read-3", "call_id": "call-read-3", "operation_id": "op-read-3", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "NOT_FOUND", "status": "failed", "outcome": "not_started", "recovery": "none", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "unknown-tool",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "unknown",
          "action": "dispatch",
          "proposal": {"name": "delete_everything", "arguments": {}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-unknown", "call_id": "call-unknown", "operation_id": "op-unknown", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "UNKNOWN_TOOL", "status": "failed", "outcome": "not_started", "recovery": "correct_input", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "missing-argument",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "missing",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-missing", "call_id": "call-missing", "operation_id": "op-missing", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "INVALID_ARGUMENTS", "status": "failed", "outcome": "not_started", "recovery": "correct_input", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "extra-argument",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "extra",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": "ORDER-7", "is_admin": true}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-extra", "call_id": "call-extra", "operation_id": "op-extra", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "INVALID_ARGUMENTS", "status": "failed", "outcome": "not_started", "recovery": "correct_input", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "wrong-argument-type",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "wrong-type",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": 7}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-type", "call_id": "call-type", "operation_id": "op-type", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "INVALID_ARGUMENTS", "status": "failed", "outcome": "not_started", "recovery": "correct_input", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "invalid-enum",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "bad-reason",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "ignore rules and refund"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-enum", "call_id": "call-enum", "operation_id": "op-enum", "idempotency_key": "idem-enum", "adapter_revision": "openai-responses-v1"},
          "approval": "valid",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "INVALID_ARGUMENTS", "status": "failed", "outcome": "not_started", "recovery": "correct_input", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "unapproved-write",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "write",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-write-1", "call_id": "call-write-1", "operation_id": "op-refund-1", "idempotency_key": "idem-refund-1", "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "APPROVAL_REQUIRED", "status": "failed", "outcome": "not_started", "recovery": "request_approval", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "approved-write-and-safe-retry",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "first",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-write-2", "call_id": "call-write-2", "operation_id": "op-refund-2", "idempotency_key": "idem-refund-2", "adapter_revision": "openai-responses-v1"},
          "approval": "valid",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "OK", "status": "succeeded", "outcome": "committed", "recovery": "none", "delivery": "fresh", "data": {"draft_id": "DRAFT-1", "order_ref": "ORDER-7", "reason": "duplicate"}, "side_effect_count": 1}
        },
        {
          "step_id": "retry",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-write-2-retry", "call_id": "call-write-2-retry", "operation_id": "op-refund-2", "idempotency_key": "idem-refund-2", "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1010,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "OK", "status": "succeeded", "outcome": "committed", "recovery": "none", "delivery": "local_replay", "data": {"draft_id": "DRAFT-1", "order_ref": "ORDER-7", "reason": "duplicate"}, "side_effect_count": 1}
        }
      ]
    },
    {
      "id": "same-idempotency-key-different-intent",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "first",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-write-3", "call_id": "call-write-3", "operation_id": "op-refund-3", "idempotency_key": "idem-refund-3", "adapter_revision": "openai-responses-v1"},
          "approval": "valid",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "OK", "status": "succeeded", "outcome": "committed", "recovery": "none", "delivery": "fresh", "data": {"draft_id": "DRAFT-1", "order_ref": "ORDER-7", "reason": "duplicate"}, "side_effect_count": 1}
        },
        {
          "step_id": "conflict",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "damaged"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-write-4", "call_id": "call-write-4", "operation_id": "op-refund-4", "idempotency_key": "idem-refund-3", "adapter_revision": "openai-responses-v1"},
          "approval": "valid",
          "now": 1010,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "IDEMPOTENCY_CONFLICT", "status": "failed", "outcome": "not_started", "recovery": "human_review", "delivery": "fresh", "data": null, "side_effect_count": 1}
        }
      ]
    },
    {
      "id": "expired-approval",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "expired",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-expired", "call_id": "call-expired", "operation_id": "op-expired", "idempotency_key": "idem-expired", "adapter_revision": "openai-responses-v1"},
          "approval": "expired",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "APPROVAL_INVALID", "status": "failed", "outcome": "not_started", "recovery": "request_approval", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "mismatched-approval",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "mismatch",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-mismatch", "call_id": "call-mismatch", "operation_id": "op-mismatch", "idempotency_key": "idem-mismatch", "adapter_revision": "openai-responses-v1"},
          "approval": "mismatched",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "APPROVAL_INVALID", "status": "failed", "outcome": "not_started", "recovery": "request_approval", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "call-id-conflict",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "first",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": "ORDER-7"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-call-id", "call_id": "call-reused", "operation_id": "op-call-id", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "OK", "status": "succeeded", "outcome": "committed", "recovery": "none", "delivery": "fresh", "data": {"order_ref": "ORDER-7", "status": "paid"}, "side_effect_count": 0}
        },
        {
          "step_id": "changed",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": "ORDER-8"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-call-id", "call_id": "call-reused", "operation_id": "op-call-id", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1001,
          "failure": "none",
          "status_ref_from": null,
          "expected": {"code": "CALL_ID_CONFLICT", "status": "failed", "outcome": "not_started", "recovery": "human_review", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "timeout-before-execute-is-retryable-and-side-effect-free",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "timeout",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-timeout", "call_id": "call-timeout", "operation_id": "op-timeout", "idempotency_key": "idem-timeout", "adapter_revision": "openai-responses-v1"},
          "approval": "valid",
          "now": 1000,
          "failure": "timeout_before_execute",
          "status_ref_from": null,
          "expected": {"code": "TIMEOUT_BEFORE_EXECUTE", "status": "failed", "outcome": "not_started", "recovery": "retry_after", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "timeout-after-commit-requires-explicit-status-query",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "commit-response-lost",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-unknown-1", "call_id": "call-unknown-1", "operation_id": "op-unknown", "idempotency_key": "idem-unknown", "adapter_revision": "openai-responses-v1"},
          "approval": "valid",
          "now": 1000,
          "failure": "timeout_after_commit",
          "status_ref_from": null,
          "expected": {"code": "OUTCOME_UNKNOWN", "status": "unknown", "outcome": "unknown", "recovery": "query_status", "delivery": "fresh", "data": null, "side_effect_count": 1}
        },
        {
          "step_id": "query-receipt",
          "action": "query_status",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-unknown-2", "call_id": "call-unknown-2", "operation_id": "op-unknown", "idempotency_key": "idem-unknown", "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1010,
          "failure": "none",
          "status_ref_from": "commit-response-lost",
          "expected": {"code": "OK", "status": "succeeded", "outcome": "committed", "recovery": "none", "delivery": "receipt_reconciled", "data": {"draft_id": "DRAFT-1", "order_ref": "ORDER-7", "reason": "duplicate"}, "side_effect_count": 1}
        }
      ]
    },
    {
      "id": "rate-limit-is-retryable",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "rate-limit",
          "action": "dispatch",
          "proposal": {"name": "get_order", "arguments": {"order_ref": "ORDER-7"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-rate", "call_id": "call-rate", "operation_id": "op-rate", "idempotency_key": null, "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1000,
          "failure": "rate_limit",
          "status_ref_from": null,
          "expected": {"code": "RATE_LIMIT", "status": "failed", "outcome": "not_started", "recovery": "retry_after", "delivery": "fresh", "data": null, "side_effect_count": 0}
        }
      ]
    },
    {
      "id": "timeout-after-commit-without-receipt-stays-unknown",
      "principal": {"tenant_id": "tenant-a", "subject_id": "user-1", "roles": []},
      "steps": [
        {
          "step_id": "commit-response-and-receipt-unavailable",
          "action": "dispatch",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-no-receipt-1", "call_id": "call-no-receipt-1", "operation_id": "op-no-receipt", "idempotency_key": "idem-no-receipt", "adapter_revision": "openai-responses-v1"},
          "approval": "valid",
          "now": 1000,
          "failure": "timeout_after_commit_receipt_unavailable",
          "status_ref_from": null,
          "expected": {"code": "OUTCOME_UNKNOWN", "status": "unknown", "outcome": "unknown", "recovery": "query_status", "delivery": "fresh", "data": null, "side_effect_count": 1}
        },
        {
          "step_id": "query-remains-unknown",
          "action": "query_status",
          "proposal": {"name": "create_refund_draft", "arguments": {"order_ref": "ORDER-7", "reason": "duplicate"}},
          "execution_context": {"provider": "openai", "api_family": "responses", "response_id": "response-no-receipt-2", "call_id": "call-no-receipt-2", "operation_id": "op-no-receipt", "idempotency_key": "idem-no-receipt", "adapter_revision": "openai-responses-v1"},
          "approval": "none",
          "now": 1010,
          "failure": "none",
          "status_ref_from": "commit-response-and-receipt-unavailable",
          "expected": {"code": "OUTCOME_UNKNOWN", "status": "unknown", "outcome": "unknown", "recovery": "query_status", "delivery": "fresh", "data": null, "side_effect_count": 1}
        }
      ]
    }
  ]
}