{
  "server": "example-regression-ro",
  "client": "Claude Code",
  "captured": "2026-11-01",
  "mode": "ro",
  "note": "Regression snapshot (fictional): a deny rule was removed, so manage_crm_objects lost its block, and a role change removed the T4-proved denial on create_dashboard. Expected: FAIL D06 for both, FAIL D04 for update_contact, nothing for execute_sql. See references/failure-modes.md.",
  "tools": [
    {"name": "get_user_details", "annotations": {"readOnlyHint": true}},
    {"name": "manage_crm_objects"},
    {"name": "execute_sql", "denied_by": "iam"},
    {"name": "create_dashboard"},
    {"name": "update_contact"}
  ]
}