{
  "generatedAt": "2026-11-02T00:10:39.492Z",
  "runner": "v25.6.0",
  "checksSha256": "61349f004b8b576b9b467299fb3ada7c2bb6ef1eec9ade8670e26d6b5fc52c83",
  "study": "Mihenk B2B Customer Portal Decision Lab",
  "version": "pilot-0.1.0",
  "origin": "synthetic in-memory reference fixtures only",
  "methodology": "Deterministic assertions executed on policy functions; not a SaaS-vs-custom performance benchmark.",
  "warnings": [
    "No third-party SaaS tested.",
    "No real ERP system, customer data, latency, pricing or production security controls tested.",
    "Hash chaining is a tamper-evident toy model, not an authenticated production audit-log system."
  ],
  "checks": [
    {
      "group": "RBAC",
      "name": "reader cannot approve",
      "passed": true,
      "details": "denied"
    },
    {
      "group": "RBAC",
      "name": "approver can approve within tenant",
      "passed": true,
      "details": "allowed"
    },
    {
      "group": "RBAC",
      "name": "cross-tenant access denied",
      "passed": true,
      "details": "denied"
    },
    {
      "group": "ERP",
      "name": "transient retry succeeds",
      "passed": true,
      "details": {
        "attempts": 2,
        "outcome": "success"
      }
    },
    {
      "group": "ERP",
      "name": "invalid client request does not retry",
      "passed": true,
      "details": {
        "attempts": 1,
        "outcome": "failure"
      }
    },
    {
      "group": "ERP",
      "name": "retry budget is bounded",
      "passed": true,
      "details": {
        "attempts": 3,
        "outcome": "failure"
      }
    },
    {
      "group": "Audit",
      "name": "append chain verifies",
      "passed": true,
      "details": {
        "events": 2
      }
    },
    {
      "group": "Audit",
      "name": "edited event detected",
      "passed": true,
      "details": "tamper detected"
    }
  ],
  "summary": {
    "passed": 8,
    "total": 8
  }
}