{
  "schemaVersion": 1,
  "semanticKeys": {
    "AW-001": "session route valid",
    "AW-002": "missing authentication",
    "AW-003": "malformed bearer exact parser",
    "AW-004": "invalid bearer overrides valid cookie",
    "AW-005": "valid bearer exemption after authentication",
    "AW-006": "expired session rejected",
    "AW-007": "disabled user rejected",
    "AW-008": "login exact origin issues four cookies",
    "AW-009": "login absent origin denied before credential check",
    "AW-010": "invalid credentials nonenumerating",
    "AW-011": "logout valid refresh proof revokes and clears",
    "AW-012": "logout invalid refresh only clears cookies",
    "AW-013": "refresh dependency absent is blocked",
    "AW-014": "refresh csrf bootstrap dependency absent is blocked",
    "AW-015": "refresh stale csrf is forbidden without revocation",
    "AW-016": "refresh ancestor replay after csrf revokes family",
    "AW-017": "prefix origin denied",
    "AW-018": "sibling origin denied",
    "AW-019": "http origin denied",
    "AW-020": "null origin denied",
    "AW-021": "arbitrary origin denied",
    "AW-022": "allowed actual response has exact cors headers",
    "AW-023": "valid preflight uses JSON envelope",
    "AW-024": "mixed-case requested headers accepted canonically",
    "AW-025": "duplicate requested header rejected",
    "AW-026": "unapproved preflight method denied",
    "AW-027": "unapproved preflight header denied",
    "AW-028": "missing header blocks mutation",
    "AW-029": "missing cookie blocks mutation",
    "AW-030": "wrong cookie blocks mutation",
    "AW-031": "wrong header blocks mutation",
    "AW-032": "stale token blocks mutation",
    "AW-033": "absent origin blocks mutation",
    "AW-034": "sibling cookie injection blocks mutation",
    "AW-035": "matching double submit and stored hash permits mutation",
    "AW-036": "csrf persistence failure exposes no token",
    "AW-037": "conversion_read owner positive",
    "AW-038": "conversion_read foreign hidden",
    "AW-039": "conversion_read absent identical",
    "AW-040": "conversion_cancel owner positive",
    "AW-041": "conversion_cancel foreign hidden",
    "AW-042": "conversion_cancel absent identical",
    "AW-043": "download_sign owner positive",
    "AW-044": "download_sign foreign hidden",
    "AW-045": "download_sign absent identical",
    "AW-046": "upload_read owner positive",
    "AW-047": "upload_read foreign hidden",
    "AW-048": "upload_read absent identical",
    "AW-049": "upload_complete owner positive",
    "AW-050": "upload_complete foreign hidden",
    "AW-051": "upload_complete absent identical",
    "AW-052": "source_metadata owner positive",
    "AW-053": "source_metadata foreign hidden",
    "AW-054": "source_metadata absent identical",
    "AW-055": "owned library pagination scoped",
    "AW-056": "foreign cursor rejected without data",
    "AW-057": "first canonical acceptance",
    "AW-058": "exact replay returns original identity",
    "AW-059": "same key different hash conflicts",
    "AW-060": "key too short",
    "AW-061": "key too long",
    "AW-062": "key invalid charset",
    "AW-063": "key absent",
    "AW-064": "same key different actor is independent",
    "AW-065": "twenty way identical race one commit",
    "AW-066": "concurrent different payload one winner one conflict",
    "AW-067": "registration exact limit allowed",
    "AW-068": "registration over limit throttled",
    "AW-069": "login exact limit allowed",
    "AW-070": "login over limit throttled",
    "AW-071": "upload_creation exact limit allowed",
    "AW-072": "upload_creation over limit throttled",
    "AW-073": "upload_completion exact limit allowed",
    "AW-074": "upload_completion over limit throttled",
    "AW-075": "conversion_acceptance exact limit allowed",
    "AW-076": "conversion_acceptance over limit throttled",
    "AW-077": "checkout exact limit allowed",
    "AW-078": "checkout over limit throttled",
    "AW-079": "download_signing exact limit allowed",
    "AW-080": "download_signing over limit throttled",
    "AW-081": "stripe_webhook exact limit allowed",
    "AW-082": "stripe_webhook over limit throttled",
    "AW-083": "worker_claim exact limit allowed",
    "AW-084": "worker_claim over limit throttled",
    "AW-085": "worker_heartbeat exact limit allowed",
    "AW-086": "worker_heartbeat over limit throttled",
    "AW-087": "worker_completion exact limit allowed",
    "AW-088": "worker_completion over limit throttled",
    "AW-089": "admin_mutation exact limit allowed",
    "AW-090": "admin_mutation over limit throttled",
    "AW-091": "missing production rate policy blocks readiness",
    "AW-092": "untrusted forwarded headers ignored",
    "AW-093": "trusted proxy normalized ipv6 key",
    "AW-094": "retry command accepted and audited",
    "AW-095": "customer denied retry",
    "AW-096": "adjust command accepted and audited",
    "AW-097": "customer denied adjust",
    "AW-098": "suspend command accepted and audited",
    "AW-099": "customer denied suspend",
    "AW-100": "forged role and owner fields rejected",
    "AW-101": "admin concurrent replay one audit",
    "AW-102": "invalid json",
    "AW-103": "duplicate member",
    "AW-104": "wrong content type",
    "AW-105": "invalid unicode marker",
    "AW-106": "bounded depth marker",
    "AW-107": "unsafe number",
    "AW-108": "unknown nested field",
    "AW-109": "invalid api version header",
    "AW-110": "invalid uuid path",
    "AW-111": "invalid pagination limit",
    "AW-112": "duplicate authorization header marker",
    "AW-113": "bounded oversized authorization marker",
    "AW-114": "app_log excludes sensitive canary classes",
    "AW-115": "proxy_log excludes sensitive canary classes",
    "AW-116": "waf_log excludes sensitive canary classes",
    "AW-117": "cdn_log excludes sensitive canary classes",
    "AW-118": "apm excludes sensitive canary classes",
    "AW-119": "trace excludes sensitive canary classes",
    "AW-120": "metric excludes sensitive canary classes",
    "AW-121": "crash_dump excludes sensitive canary classes",
    "AW-122": "error_reporter excludes sensitive canary classes",
    "AW-123": "support_ui excludes sensitive canary classes",
    "AW-124": "register OPTIONS exact success",
    "AW-125": "register OPTIONS rejects origin",
    "AW-126": "register OPTIONS rejects acr_missing",
    "AW-127": "register OPTIONS rejects method",
    "AW-128": "register OPTIONS rejects header",
    "AW-129": "login OPTIONS exact success",
    "AW-130": "login OPTIONS rejects origin",
    "AW-131": "login OPTIONS rejects acr_missing",
    "AW-132": "login OPTIONS rejects method",
    "AW-133": "login OPTIONS rejects header",
    "AW-134": "logout OPTIONS exact success",
    "AW-135": "logout OPTIONS rejects origin",
    "AW-136": "logout OPTIONS rejects acr_missing",
    "AW-137": "logout OPTIONS rejects method",
    "AW-138": "logout OPTIONS rejects header",
    "AW-139": "session OPTIONS exact success",
    "AW-140": "session OPTIONS rejects origin",
    "AW-141": "session OPTIONS rejects acr_missing",
    "AW-142": "session OPTIONS rejects method",
    "AW-143": "session OPTIONS rejects header",
    "AW-144": "csrf_issue OPTIONS exact success",
    "AW-145": "csrf_issue OPTIONS rejects origin",
    "AW-146": "csrf_issue OPTIONS rejects acr_missing",
    "AW-147": "csrf_issue OPTIONS rejects method",
    "AW-148": "csrf_issue OPTIONS rejects header",
    "AW-149": "refresh_csrf OPTIONS exact success",
    "AW-150": "refresh_csrf OPTIONS rejects origin",
    "AW-151": "refresh_csrf OPTIONS rejects acr_missing",
    "AW-152": "refresh_csrf OPTIONS rejects method",
    "AW-153": "refresh_csrf OPTIONS rejects header",
    "AW-154": "refresh OPTIONS exact success",
    "AW-155": "refresh OPTIONS rejects origin",
    "AW-156": "refresh OPTIONS rejects acr_missing",
    "AW-157": "refresh OPTIONS rejects method",
    "AW-158": "refresh OPTIONS rejects header",
    "AW-159": "password_reset_request OPTIONS exact success",
    "AW-160": "password_reset_request OPTIONS rejects origin",
    "AW-161": "password_reset_request OPTIONS rejects acr_missing",
    "AW-162": "password_reset_request OPTIONS rejects method",
    "AW-163": "password_reset_request OPTIONS rejects header",
    "AW-164": "password_reset_complete OPTIONS exact success",
    "AW-165": "password_reset_complete OPTIONS rejects origin",
    "AW-166": "password_reset_complete OPTIONS rejects acr_missing",
    "AW-167": "password_reset_complete OPTIONS rejects method",
    "AW-168": "password_reset_complete OPTIONS rejects header",
    "AW-169": "register canonical actual success target remains blocked by adapter",
    "AW-170": "login canonical actual success target remains blocked by adapter",
    "AW-171": "password_reset_request canonical actual success target remains blocked by adapter",
    "AW-172": "password_reset_complete canonical actual success target remains blocked by adapter",
    "AW-173": "csrf_issue canonical actual success target remains blocked by adapter",
    "AW-174": "refresh_csrf canonical actual success target remains blocked by adapter",
    "AW-175": "refresh canonical actual success target remains blocked by adapter",
    "AW-176": "access expiry clears access and ordinary csrf",
    "AW-177": "refresh expiry clears all cookies",
    "AW-178": "registration atomic bootstrap",
    "AW-179": "login atomic bootstrap",
    "AW-180": "refresh csrf generation increments exactly one",
    "AW-181": "bootstrap CAS winner and bounded loser",
    "AW-182": "two tab stale bootstrap response discarded",
    "AW-183": "two tab post logout response cannot repopulate cookies",
    "AW-184": "full family ancestor replay revokes family",
    "AW-185": "refresh exact committed outcome recovery",
    "AW-186": "refresh indeterminate outcome fails closed",
    "AW-187": "logout CAS state conflict",
    "AW-188": "password reset invalidates all sessions",
    "AW-189": "crash seam register_after_send_before_cookie_application",
    "AW-190": "crash seam register_during_cookie_application",
    "AW-191": "crash seam login_after_send_before_cookie_application",
    "AW-192": "crash seam login_during_cookie_application",
    "AW-193": "crash seam csrf_after_send_before_cookie_application",
    "AW-194": "crash seam csrf_during_cookie_application",
    "AW-195": "crash seam bootstrap_after_send_before_client_generation_cas",
    "AW-196": "crash seam refresh_after_send_before_cookie_application",
    "AW-197": "crash seam refresh_during_cookie_application",
    "AW-198": "crash seam refresh_after_cookie_application_before_generation_cas",
    "AW-199": "crash seam logout_after_send_before_cookie_application",
    "AW-200": "crash seam logout_during_cookie_application",
    "AW-201": "crash seam reset_request_after_send_connection_loss",
    "AW-202": "purchase_read owner parity",
    "AW-203": "purchase_read foreign parity",
    "AW-204": "account_read owner parity",
    "AW-205": "account_read foreign parity",
    "AW-206": "zip_download owner parity",
    "AW-207": "zip_download foreign parity",
    "AW-208": "conversion_list owner parity",
    "AW-209": "conversion_list foreign parity"
  },
  "orderedIds": [
    "AW-001",
    "AW-002",
    "AW-003",
    "AW-004",
    "AW-005",
    "AW-006",
    "AW-007",
    "AW-008",
    "AW-009",
    "AW-010",
    "AW-011",
    "AW-012",
    "AW-013",
    "AW-014",
    "AW-015",
    "AW-016",
    "AW-017",
    "AW-018",
    "AW-019",
    "AW-020",
    "AW-021",
    "AW-022",
    "AW-023",
    "AW-024",
    "AW-025",
    "AW-026",
    "AW-027",
    "AW-028",
    "AW-029",
    "AW-030",
    "AW-031",
    "AW-032",
    "AW-033",
    "AW-034",
    "AW-035",
    "AW-036",
    "AW-037",
    "AW-038",
    "AW-039",
    "AW-040",
    "AW-041",
    "AW-042",
    "AW-043",
    "AW-044",
    "AW-045",
    "AW-046",
    "AW-047",
    "AW-048",
    "AW-049",
    "AW-050",
    "AW-051",
    "AW-052",
    "AW-053",
    "AW-054",
    "AW-055",
    "AW-056",
    "AW-057",
    "AW-058",
    "AW-059",
    "AW-060",
    "AW-061",
    "AW-062",
    "AW-063",
    "AW-064",
    "AW-065",
    "AW-066",
    "AW-067",
    "AW-068",
    "AW-069",
    "AW-070",
    "AW-071",
    "AW-072",
    "AW-073",
    "AW-074",
    "AW-075",
    "AW-076",
    "AW-077",
    "AW-078",
    "AW-079",
    "AW-080",
    "AW-081",
    "AW-082",
    "AW-083",
    "AW-084",
    "AW-085",
    "AW-086",
    "AW-087",
    "AW-088",
    "AW-089",
    "AW-090",
    "AW-091",
    "AW-092",
    "AW-093",
    "AW-094",
    "AW-095",
    "AW-096",
    "AW-097",
    "AW-098",
    "AW-099",
    "AW-100",
    "AW-101",
    "AW-102",
    "AW-103",
    "AW-104",
    "AW-105",
    "AW-106",
    "AW-107",
    "AW-108",
    "AW-109",
    "AW-110",
    "AW-111",
    "AW-112",
    "AW-113",
    "AW-114",
    "AW-115",
    "AW-116",
    "AW-117",
    "AW-118",
    "AW-119",
    "AW-120",
    "AW-121",
    "AW-122",
    "AW-123",
    "AW-124",
    "AW-125",
    "AW-126",
    "AW-127",
    "AW-128",
    "AW-129",
    "AW-130",
    "AW-131",
    "AW-132",
    "AW-133",
    "AW-134",
    "AW-135",
    "AW-136",
    "AW-137",
    "AW-138",
    "AW-139",
    "AW-140",
    "AW-141",
    "AW-142",
    "AW-143",
    "AW-144",
    "AW-145",
    "AW-146",
    "AW-147",
    "AW-148",
    "AW-149",
    "AW-150",
    "AW-151",
    "AW-152",
    "AW-153",
    "AW-154",
    "AW-155",
    "AW-156",
    "AW-157",
    "AW-158",
    "AW-159",
    "AW-160",
    "AW-161",
    "AW-162",
    "AW-163",
    "AW-164",
    "AW-165",
    "AW-166",
    "AW-167",
    "AW-168",
    "AW-169",
    "AW-170",
    "AW-171",
    "AW-172",
    "AW-173",
    "AW-174",
    "AW-175",
    "AW-176",
    "AW-177",
    "AW-178",
    "AW-179",
    "AW-180",
    "AW-181",
    "AW-182",
    "AW-183",
    "AW-184",
    "AW-185",
    "AW-186",
    "AW-187",
    "AW-188",
    "AW-189",
    "AW-190",
    "AW-191",
    "AW-192",
    "AW-193",
    "AW-194",
    "AW-195",
    "AW-196",
    "AW-197",
    "AW-198",
    "AW-199",
    "AW-200",
    "AW-201",
    "AW-202",
    "AW-203",
    "AW-204",
    "AW-205",
    "AW-206",
    "AW-207",
    "AW-208",
    "AW-209"
  ],
  "tombstones": [],
  "baselineSha256": "sha256:3b571ff3c90c6ae743660958ab331654c24a414d09efeecdcc18b55b8f563417"
}