{
  "schemaVersion": 1,
  "id": "probe-executor-cases",
  "name": "Bounded service probe executor cases",
  "description": "Synthetic cases for successful, failed, timed out, redirected, TLS and unsupported probe execution without real credentials or remote resources.",
  "initialState": {
    "networkPolicy": {
      "allowedNetworks": ["10.0.0.0/8", "127.0.0.0/8"],
      "maxResponseBytes": 1048576,
      "maxRedirects": 5
    },
    "cases": [
      {"id": "http-success-json-keyword", "type": "http", "expectedState": "up"},
      {"id": "http-status-failure", "type": "http", "expectedState": "down"},
      {"id": "http-timeout", "type": "http", "expectedState": "unknown", "errorClass": "transport_error"},
      {"id": "http-redirect-policy", "type": "http", "expectedState": "up"},
      {"id": "http-response-body-limit", "type": "http", "expectedState": "unknown", "errorClass": "response_too_large"},
      {"id": "tls-certificate-facts", "type": "tls", "expectedState": "up"},
      {"id": "dns-resolution", "type": "dns", "expectedState": "up"},
      {"id": "tcp-connect", "type": "tcp", "expectedState": "up"},
      {"id": "icmp-capability-fallback", "type": "icmp", "expectedState": "unknown", "errorClass": "unsupported"}
    ],
    "credentialExpectation": "secret references are configuration identifiers only; no plaintext credential is sent, stored or included in result errors"
  },
  "timeline": [
    {"atSeconds": 1, "action": "set-probe-result", "payload": {"resolver": "deterministic", "http": "httptest", "tcp": "net-pipe", "tls": "self-signed-net-pipe"}}
  ],
  "expectedOutcomes": [
    {"bySeconds": 2, "assertion": "HTTP success, status failure, bounded response and per-probe timeout produce the documented states without leaking secret references."},
    {"bySeconds": 2, "assertion": "Redirects are bounded and revalidated; TLS captures certificate expiry, issuer, subject and hostname validity."},
    {"bySeconds": 2, "assertion": "TCP and DNS succeed with allowlisted synthetic addresses; ICMP returns Unknown/unsupported when capability is unavailable."}
  ]
}