{
  "method": "Synthetic, authored object/action/record/field authorization predicates; no network or CRM.",
  "verified_date": "2026-10-26",
  "probes": [
    {
      "id": "P1",
      "object": "contact",
      "action": "read",
      "record": "C01",
      "field": "email",
      "required": true
    },
    {
      "id": "P2",
      "object": "company",
      "action": "read",
      "record": "A01",
      "field": "name",
      "required": true
    },
    {
      "id": "P3",
      "object": "contact",
      "action": "update",
      "record": "C01",
      "field": "qualified",
      "required": true
    },
    {
      "id": "P4",
      "object": "contact",
      "action": "read",
      "record": "C02",
      "field": "email",
      "required": false
    },
    {
      "id": "P5",
      "object": "contact",
      "action": "read",
      "record": "C01",
      "field": "phone",
      "required": false
    },
    {
      "id": "P6",
      "object": "contact",
      "action": "update",
      "record": "C01",
      "field": "owner",
      "required": false
    },
    {
      "id": "P7",
      "object": "contact",
      "action": "delete",
      "record": "C01",
      "field": "*",
      "required": false
    },
    {
      "id": "P8",
      "object": "note",
      "action": "read",
      "record": "N01",
      "field": "body",
      "required": false
    },
    {
      "id": "P9",
      "object": "company",
      "action": "read",
      "record": "A02",
      "field": "name",
      "required": false
    }
  ],
  "results": {
    "broad": {
      "configured_operations": [
        "P1",
        "P2",
        "P3"
      ],
      "allowed": [
        "P1",
        "P2",
        "P3",
        "P4",
        "P5",
        "P6",
        "P7",
        "P8",
        "P9"
      ],
      "outside_workflow": [
        "P4",
        "P5",
        "P6",
        "P7",
        "P8",
        "P9"
      ],
      "missing_required": []
    },
    "object_action": {
      "configured_operations": [
        "P1",
        "P2",
        "P3"
      ],
      "allowed": [
        "P1",
        "P2",
        "P3",
        "P4",
        "P5",
        "P6",
        "P9"
      ],
      "outside_workflow": [
        "P4",
        "P5",
        "P6",
        "P9"
      ],
      "missing_required": []
    },
    "constrained_principal": {
      "configured_operations": [
        "P1",
        "P2",
        "P3"
      ],
      "allowed": [
        "P1",
        "P2",
        "P3"
      ],
      "outside_workflow": [],
      "missing_required": []
    }
  },
  "limitations": [
    "No vendor implementation, OAuth token, real record or live permission test.",
    "Counts depend on these nine selected probes and are not risk scores.",
    "Object/action grants are independent here; real vendor scopes can bundle actions.",
    "Idealized principal restrictions may be unavailable for a real connector."
  ]
}