{
  "attestations": {
    "manualFulfillment": []
  },
  "audit": {
    "includedEventCount": 6,
    "summary": {
      "coverageStartTimestamp": "2026-05-01T16:42:18Z",
      "entryCount": 6,
      "errors": [],
      "findingState": {
        "accessReview": "open_follow_up",
        "businessOutcome": "configured_group_mismatch_after_expiry",
        "continuity": "pass",
        "notes": [
          "The audit chain verifies continuity over the retained sample events.",
          "The control finding is still open because expectedState=not_member while observedState=member.",
          "Configured-group evidence is meaningful only if the group controls the real app, license, role, or resource."
        ]
      },
      "hashAlgorithm": "SHA-256",
      "headHash": "16f2e726b728c0f4d79a6b841b69537ebdefda338021bd484e0fdf24afdd99ab",
      "headMac": "a47fc4ff9ad87740354adc7d44592a7c56c3c11713fc3b01548ed1462b0b6512",
      "keyId": "v1",
      "macAlgorithm": "HMAC-SHA-256",
      "retainedEventCaveat": "Continuity checks cover retained chained audit events only. Pruned or legacy events outside chain coverage must be disclosed separately.",
      "sampleNotice": "Sample - synthetic data",
      "schemaVersion": "ai-clearance-audit-chain-verification-summary.sample.v1",
      "verified": true,
      "verifiedAt": "2026-06-10T02:30:00Z"
    }
  },
  "catalog": {
    "approvedTools": [
      {
        "assetId": "chatgpt-enterprise",
        "connectorId": "okta-group-chatgpt-enterprise",
        "dataHandling": {
          "codeExecution": false,
          "controls": [
            "no production secrets",
            "manager approval",
            "30 day grant"
          ],
          "internetAccess": true,
          "phiAllowed": false,
          "piiAllowed": false,
          "tier": "internal-only"
        },
        "defaultDurationDays": 30,
        "displayName": "ChatGPT Enterprise",
        "entitlementGroupConfigured": true,
        "owner": "Security Engineering",
        "provider": "OpenAI",
        "renewalCadence": {
          "expiryDays": 30,
          "reviewBeforeExpiryDays": 7,
          "reviewBeforeExpiryEnabled": true
        },
        "riskLevel": "medium",
        "sampleNotice": "Sample - synthetic data",
        "status": "approved"
      }
    ],
    "deniedOrRestrictedTools": [],
    "totalTools": 1
  },
  "decisionHistory": [
    {
      "approverAccountRef": "account-ref-approver-sample",
      "approverDisplayName": "Mira Patel",
      "decision": "approved",
      "decisionAt": "2026-05-01T18:03:44Z",
      "decisionSource": "admin_approval",
      "issueKey": "AIC-1042",
      "issueUrl": "https://example.atlassian.net/browse/AIC-1042",
      "policyId": "AIC-POL-03",
      "policyVersion": 7,
      "requestId": "req_aic_sample_1042",
      "requesterAccountRef": "account-ref-requester-sample",
      "requesterDisplayName": "Dana Morris",
      "riskLevel": "medium",
      "sampleNotice": "Sample - synthetic data"
    }
  ],
  "exceptions": {
    "grants": [],
    "requests": []
  },
  "generatedAt": "2026-06-10T02:30:00Z",
  "lifecycleEvidence": [
    {
      "approverAccountRef": "account-ref-approver-sample",
      "approverDisplayName": "Mira Patel",
      "configuredGroupMembershipCheck": {
        "checkedAt": "2026-06-03T15:21:08Z",
        "connectorId": "okta-group-chatgpt-enterprise",
        "connectorType": "okta-group",
        "correlationId": "corr_aic_sample_1042",
        "expectedState": "not_member",
        "externalEntitlementId": "00g-sample-chatgpt-enterprise-users",
        "observedState": "member",
        "reason": "Grant expired but configured Okta group still showed membership.",
        "recordId": "recon_aic_sample_post_expiry",
        "status": "drift"
      },
      "decision": "approved",
      "decisionAt": "2026-05-01T18:03:44Z",
      "decisionContext": {
        "decisionSource": "admin_approval",
        "matchedPolicyVersion": 7,
        "policyId": "AIC-POL-03",
        "policyVersion": 7,
        "requiresApproval": true,
        "riskLevel": "medium",
        "riskProfileId": "risk-medium"
      },
      "fulfillmentJobs": [
        {
          "action": "deprovision",
          "attempts": 1,
          "jobId": "job_deprovision_aic_sample_1042",
          "lastAttemptAt": "2026-06-03T15:21:08Z",
          "lastError": "Configured group still contains user after grant expiry.",
          "lastErrorCode": "MEMBERSHIP_DRIFT",
          "status": "needsFollowUp"
        }
      ],
      "grant": {
        "connectorId": "okta-group-chatgpt-enterprise",
        "entitlementSource": "okta-group",
        "expiresAt": "2026-06-01T18:05:09Z",
        "externalRefPresent": false,
        "grantId": "grant_aic_sample_1042_chatgpt",
        "grantedAt": "2026-05-01T18:05:09Z",
        "reviewBeforeExpiryCreatedAt": "2026-05-25T09:00:00Z",
        "reviewBeforeExpiryIssueKey": "AIC-1088",
        "revokeReason": null,
        "revokedAt": null,
        "status": "expired"
      },
      "issueKey": "AIC-1042",
      "issueUrl": "https://example.atlassian.net/browse/AIC-1042",
      "lifecycleTimeline": [
        {
          "at": "2026-05-01T16:42:18Z",
          "detail": "ChatGPT Enterprise requested for 30 days.",
          "key": "request",
          "label": "Request submitted",
          "state": "done"
        },
        {
          "at": "2026-05-01T18:03:44Z",
          "detail": "Approved under AIC-POL-03 v7.",
          "key": "approval",
          "label": "Approval recorded",
          "state": "done"
        },
        {
          "at": "2026-05-01T18:05:09Z",
          "detail": "Connected Okta configured-group grant created.",
          "key": "grant",
          "label": "Grant active",
          "state": "done"
        },
        {
          "at": "2026-05-25T09:00:00Z",
          "detail": "AIC-1088 opened; no continued-need confirmation before expiry.",
          "key": "recert",
          "label": "Review-before-expiry",
          "state": "warning"
        },
        {
          "at": "2026-06-01T18:06:12Z",
          "detail": "Expected configured-group state changed to not_member.",
          "key": "expiry",
          "label": "Grant expired",
          "state": "warning"
        },
        {
          "at": "2026-06-03T15:21:08Z",
          "detail": "Expected not_member, observed member.",
          "key": "configured-group-check",
          "label": "Configured group membership",
          "state": "blocked"
        }
      ],
      "requestId": "req_aic_sample_1042",
      "requesterAccountRef": "account-ref-requester-sample",
      "requesterDisplayName": "Dana Morris",
      "sampleNotice": "Sample - synthetic data",
      "toolId": "chatgpt-enterprise",
      "toolName": "ChatGPT Enterprise"
    }
  ],
  "sampleNotice": "Sample - synthetic data",
  "schemaVersion": "ai-clearance-policy-evidence-pack.v2",
  "scope": {
    "auditFilters": {
      "action": "",
      "from": "2026-05-01T00:00:00Z",
      "grantId": "grant_aic_sample_1042_chatgpt",
      "requestId": "req_aic_sample_1042",
      "retentionWindowDays": 90,
      "to": "2026-06-10T23:59:59Z"
    },
    "projectId": "proj-ai-clearance-sample",
    "projectKey": "AIC",
    "projectName": "AI Access Requests",
    "requestHistoryFilters": {
      "decision": "",
      "from": "2026-05-01T00:00:00Z",
      "issueKey": "AIC-1042",
      "requestId": "req_aic_sample_1042",
      "retentionWindowDays": 90,
      "to": "2026-06-10T23:59:59Z"
    }
  }
}