{"format":"vercy-enterprise-profile-fixtures/v1","profileName":"Enterprise Risk Landscape and Assurance Coverage Projection","cases":[{"id":"implemented-not-operated","kind":"positive","input":"Control C1 is designed and implemented but has no required execution in the period.","expect":"C1 stays in the coverage denominator, is excluded from the effectiveness denominator under a declared exclusion, and its operating and effectiveness facets are not-exercised-in-period."},{"id":"unknown-applicability","kind":"positive","input":"Requirement R7 has no applicability conclusion for unit U at the requested time and scenario.","expect":"It is reported as undetermined and stays outside both binding obligation and metric denominator."},{"id":"expired-exception","kind":"positive","input":"Exception X3 expires before the snapshot cut-off.","expect":"It remains readable with scope intact but cannot authorize current treatment, alter the requirement, carve out coverage or support risk reduction."},{"id":"citation-not-subject","kind":"positive","input":"A board-approved landscape has a definition ID, snapshot ID, steward and effective dates.","expect":"The identifiers support governance and citation only; the landscape cannot bear obligations, own residual risk or become a control target."},{"id":"snapshot-pin","kind":"positive","input":"A snapshot cites view definition version 4, as-of T and scenario S.","expect":"The body, included references, exclusions and caveats are immutable; current status is derived at read time."},{"id":"single-measure-projection","kind":"positive","input":"A coverage projection declares assessment-present as its sole measure, a denominator and a numerator rule.","expect":"Only denominator members with a current in-scope determination for that criterion may enter the numerator."},{"id":"card-completion-is-compliance","kind":"negative","input":"100 percent completed control cards are reported as 100 percent compliance.","expect":"The inference is rejected."},{"id":"document-proves-effectiveness","kind":"negative","input":"A policy document is used as sole effectiveness evidence.","expect":"The conclusion is rejected."},{"id":"expired-current","kind":"negative","input":"An expired assessment or exception grounds a new risk acceptance.","expect":"The reliance is rejected."},{"id":"aggregate-incomparable","kind":"negative","input":"Coverage cells with different criteria, scenarios or horizons are averaged without a comparability verdict.","expect":"The aggregation and trend claim are rejected."},{"id":"implicit-denominator","kind":"negative","input":"A coverage percentage is emitted without an explicit denominator and bound view-definition version.","expect":"The projection is ill-formed."},{"id":"mixed-measure","kind":"negative","input":"One projection mixes coverage, compliance, assurance and residual-risk values into one score.","expect":"The projection is rejected."},{"id":"numerator-outside-denominator","kind":"negative","input":"An item absent from the denominator enters the numerator because a card is complete.","expect":"The numerator entry is rejected."},{"id":"missing-applicability-coercion","kind":"negative","input":"Missing applicability is treated as N/A, compliant or zero.","expect":"The coercion is rejected and the state remains undetermined."},{"id":"exception-implies-effectiveness","kind":"negative","input":"An unexpired exception is treated as proof that a control is effective.","expect":"The inference is rejected."},{"id":"caveat-stripped-export","kind":"negative","input":"A UI export removes caveats from an aggregate while retaining its value.","expect":"The export is rejected as non-conformant to the profile."},{"id":"view-mints-control","kind":"negative","input":"The landscape creates a resolved Control subject from a WM-XCT-027 bundle.","expect":"The action is rejected while Control remains identifier-unassigned."},{"id":"late-record-after-ingest-cutoff","kind":"positive","input":"Backdated evidence for an in-scope control arrives after a snapshot's record cut-off but with an event time before its as-of.","expect":"The frozen snapshot body and digest are unchanged; the record appears only in a later snapshot."},{"id":"currency-clock-recorded","kind":"positive","input":"One snapshot is read at two different caller cut-offs.","expect":"Body, included references, exclusions, caveats and digest are identical; currency verdicts may differ and each result records the evaluation instant and snapshot ID used."},{"id":"digest-mismatch","kind":"negative","input":"A snapshot body is served whose content digest does not match the recorded digest.","expect":"The read is rejected and the snapshot is not citable."},{"id":"disputed-applicability","kind":"positive","input":"Requirement R9 has a disputed applicability conclusion for unit U at the requested time and scenario.","expect":"Disputed is retained as a distinct countable outcome, is not merged into undetermined or applicable, and its denominator placement is stated on the projection."},{"id":"exclusions-not-published","kind":"negative","input":"A coverage percentage is emitted with an explicit denominator but no undetermined, disputed or excluded counts and no exclusion reasons.","expect":"The projection is ill-formed."},{"id":"comparability-verdict-recorded","kind":"positive","input":"Cells from two criteria are aggregated with an explicit comparability verdict.","expect":"The aggregating projection record stores the verdict and the axes it covers, and the caveats survive export."},{"id":"projection-as-effectiveness-evidence","kind":"negative","input":"An assessment-present coverage projection is cited as evidence that a control is effective, or a snapshot body is cited as compliance evidence.","expect":"The citation is rejected; view and projection outputs are non-evidence for control facets, compliance and assurance."},{"id":"observation-promoted-to-finding","kind":"negative","input":"A WM-MAT-008 observation is recorded as an audit finding without an owning WM-ACT-033 engagement.","expect":"The promotion is rejected; findings remain engagement-owned."},{"id":"effectiveness-conclusion-metadata","kind":"negative","input":"An effectiveness conclusion omits method, vocabulary, validity or invalidation triggers.","expect":"The conclusion is ill-formed and cannot ground risk-reduction credit."},{"id":"assurance-conclusion-metadata","kind":"negative","input":"An assurance conclusion omits scope, method, exclusions or assurance level.","expect":"The conclusion is ill-formed and cannot be aggregated."},{"id":"requirement-obligation-collapse","kind":"negative","input":"A requirement expression is counted as a fulfilled obligation, or an obligation is counted as a control.","expect":"The collapse is rejected; requirement, obligation, control and evidence remain distinct."},{"id":"expired-exception-dependents","kind":"positive","input":"Exception X3 expires before cut-off and prior conclusions relied on it.","expect":"Dependent conclusions are set to revalidation-pending, reliance is suspended, and the cited requirement is unchanged."},{"id":"provisional-base-marked","kind":"positive","input":"The profile rests on candidate base WM-ACT-034 and on unreconciled WM-XCT-027.","expect":"Both are marked provisional in bases and named in holds, and any dependent quantity is labelled provisional."},{"id":"pending-master-provisional-coverage","kind":"positive","input":"A coverage projection reports over control facets while Control is identifier-unassigned.","expect":"Pending-master markers are present, the result is labelled provisional, and Control is never presented as resolved."},{"id":"cross-scenario-effectiveness-reuse","kind":"negative","input":"An effectiveness determination current for scenario S is used to credit risk reduction in scenario S2.","expect":"The credit is rejected; risk reduction requires a same-scenario, in-scope, current determination."}]}