{
  "schemaVersion": 1,
  "system": "guestops-account-security",
  "milestone": 19,
  "releaseCommit": "0000000000000000000000000000000000000000",
  "releaseRecordSha256": "0000000000000000000000000000000000000000000000000000000000000000",
  "environment": "https://sandbox-guestops.example.invalid",
  "operator": "REPLACE OPERATOR",
  "reviewedBy": "REPLACE REVIEWER",
  "securityReviewedBy": "REPLACE SECURITY REVIEWER",
  "startedAt": "2026-10-05T09:00:00Z",
  "endedAt": "2026-10-05T12:00:00Z",
  "reviewedAt": "2026-10-05T13:00:00Z",
  "securityReviewedAt": "2026-10-05T14:00:00Z",
  "securityReviewEvidence": [],
  "productionControls": {"smtpEnabled": false, "requireMfa": false, "enabledAfterSecurityReview": false},
  "scenarios": [
    {"id":"administrator-recovery","status":"not-run","evidence":[]},
    {"id":"audit-review","status":"not-run","evidence":[]},
    {"id":"authenticator-enrollment","status":"not-run","evidence":[]},
    {"id":"legacy-staff","status":"not-run","evidence":[]},
    {"id":"monitoring","status":"not-run","evidence":[]},
    {"id":"preferences","status":"not-run","evidence":[]},
    {"id":"recovery-codes","status":"not-run","evidence":[]},
    {"id":"restart-recovery","status":"not-run","evidence":[]},
    {"id":"role-boundaries","status":"not-run","evidence":[]},
    {"id":"secret-free-interfaces","status":"not-run","evidence":[]},
    {"id":"smtp-delivery-revocation","status":"not-run","evidence":[]},
    {"id":"totp-window-replay","status":"not-run","evidence":[]}
  ],
  "findings": []
}