{
  "schema": "ANK.REPERFORMANCE.RECEIPT.1",
  "receiptId": "ANK-DEMO-CYBER-001",
  "caseType": "PUBLIC_TEST_FIXTURE",
  "subject": "Apache Log4j exposure assessment",
  "sources": [
    {
      "name": "CISA Apache Log4j Vulnerability Guidance",
      "url": "https://www.cisa.gov/news-events/news/apache-log4j-vulnerability-guidance"
    },
    {
      "name": "NIST Cybersecurity Framework 2.0",
      "url": "https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf"
    }
  ],
  "fixture": {
    "asset": "ASSET PAY API",
    "component": "Apache Log4j",
    "version": "2.14.1",
    "assessmentAuthority": "ESTABLISHED",
    "patchAuthority": "NOT_ESTABLISHED"
  },
  "coordinates": {
    "authority": 1,
    "evidence": 1,
    "provenance": 1,
    "confidence": 1
  },
  "admissions": [
    {
      "act": "ASSESS",
      "decision": "ADMITTED"
    },
    {
      "act": "OPEN_NECESSARY_WORK",
      "decision": "ADMITTED"
    },
    {
      "act": "DEPLOY_PATCH",
      "decision": "RESERVED",
      "reason": "Technical change permission is absent"
    },
    {
      "act": "UNRELATED_MARKETING_EVENT",
      "decision": "REFUSED",
      "reason": "Outside the governed graph"
    }
  ],
  "necessaryWork": [
    "Search indirect dependencies",
    "Check software inventory freshness",
    "Check recovery readiness",
    "Monitor evidence expiry"
  ],
  "successor": "K1_WORK_OPEN",
  "claimsNotMade": [
    "Remediation complete",
    "Compliance established",
    "Matter closed"
  ],
  "canonicalPayloadDigest": "c0d1fe9be410a0961786f6b18341ce7c86efcbe7d2c5565a5211e3d836031d30"
}