{
  "schemaVersion": 1,
  "attacks": [
    {
      "id": "ADV-01",
      "attack": "operation-schema-confusion",
      "mustFailCheck": "requestBindingSha256"
    },
    {
      "id": "ADV-02",
      "attack": "status-envelope-success-confusion",
      "mustFailCheck": "responseBindingSha256"
    },
    {
      "id": "ADV-03",
      "attack": "foreign-owner-signer-call",
      "mustFailCheck": "ownership-authority"
    },
    {
      "id": "ADV-04",
      "attack": "race-second-winner-or-loser-drift",
      "mustFailCheck": "race-exactness"
    },
    {
      "id": "ADV-05",
      "attack": "owner-registry-userA-to-userB",
      "mustFailCheck": "ownership-authority"
    },
    {
      "id": "ADV-06",
      "attack": "admin-audit-omission-or-mutable-event",
      "mustFailCheck": "audit-exactness"
    },
    {
      "id": "ADV-07",
      "attack": "malformed-bearer-valid-token-mutation",
      "mustFailCheck": "parser-derivation"
    },
    {
      "id": "ADV-08",
      "attack": "rate-key-policy-window-limit-drift",
      "mustFailCheck": "rate-identity"
    },
    {
      "id": "ADV-09",
      "attack": "contract-ref-self-assertion",
      "mustFailCheck": "normative-anchor"
    },
    {
      "id": "ADV-10",
      "attack": "preflight-description-swap",
      "mustFailCheck": "preflight-row-identity"
    },
    {
      "id": "ADV-11",
      "attack": "sink-leaf-delete-self-rehash",
      "mustFailCheck": "signed-inventory-anchor"
    },
    {
      "id": "ADV-12",
      "attack": "semantic-description-swap-self-rehash",
      "mustFailCheck": "prior-baseline-anchor"
    },
    {
      "id": "ADV-13",
      "attack": "zero-transition-suite",
      "mustFailCheck": "transition-nonvacuity"
    }
  ],
  "matrixSha256": "sha256:d486b37717db7d8fc23dbb1fbb655894a5cc83927b9d72ac8bee5ffa2215ce27"
}