[
  {
    "id": "read-ok",
    "group": "Operations",
    "tool": "lookup_record",
    "role": "operator",
    "scopes": [
      "records:read"
    ],
    "environment": "test",
    "expected_decision": "allow"
  },
  {
    "id": "read-missing-scope",
    "group": "Operations",
    "tool": "lookup_record",
    "role": "operator",
    "scopes": [
      "records:write"
    ],
    "environment": "test",
    "expected_decision": "deny"
  },
  {
    "id": "send-review",
    "group": "Operations",
    "tool": "send_message",
    "role": "operator",
    "scopes": [
      "messages:send"
    ],
    "environment": "test",
    "expected_decision": "approval_required"
  },
  {
    "id": "send-wrong-role",
    "group": "Operations",
    "tool": "send_message",
    "role": "observer",
    "scopes": [
      "messages:send"
    ],
    "environment": "test",
    "expected_decision": "deny"
  },
  {
    "id": "production-boundary",
    "group": "Operations",
    "tool": "prepare_draft",
    "role": "operator",
    "scopes": [
      "drafts:write"
    ],
    "environment": "production",
    "expected_decision": "deny"
  },
  {
    "id": "unlisted-tool",
    "group": "Operations",
    "tool": "delete_record",
    "role": "operator",
    "scopes": [
      "records:delete"
    ],
    "environment": "test",
    "expected_decision": "deny"
  },
  {
    "id": "expectation-mismatch",
    "group": "Operations",
    "tool": "prepare_draft",
    "role": "operator",
    "scopes": [
      "drafts:write"
    ],
    "environment": "test",
    "expected_decision": "approval_required"
  }
]