[
 {
  "id": "C01",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:03:31+00:00",
  "ms": 0,
  "reply": {
   "slug": "caingovern",
   "title": "Upload a Rego policy, then check an allowed and a forbidden request",
   "status": "ok",
   "input": "/admin/delete-all",
   "total_ms": 613,
   "steps": [
    {
     "call": "PUT /tenants/publicdemo1bdcddc9",
     "request": {
      "mode": "enforce"
     },
     "status": 200,
     "ms": 119,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "upstream_url": null,
      "mode": "enforce"
     }
    },
    {
     "call": "PUT /tenants/publicdemo1bdcddc9/policy",
     "request": {
      "rego": "package tenant_publicdemo1bdcddc9.authz\n\nimport rego.v1\n\ndefault allow := false\n\nallow if {\n  startswith(input.path, \"/reports/\")\n  input.method == \"GET\"\n}\n"
     },
     "status": 200,
     "ms": 333,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "opa_status": 200,
      "policy_id": "tenant_publicdemo1bdcddc9"
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/reports/q3",
      "method": "GET"
     },
     "status": 200,
     "ms": 70,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "allow",
      "mode": "enforce",
      "would_enforce": false
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/admin/delete-all",
      "method": "POST"
     },
     "status": 200,
     "ms": 69,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "deny",
      "mode": "enforce",
      "would_enforce": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C02",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:03:32+00:00",
  "ms": 0,
  "reply": {
   "slug": "caingovern",
   "title": "Upload a Rego policy, then check an allowed and a forbidden request",
   "status": "ok",
   "input": "/admin/delete-all",
   "total_ms": 613,
   "steps": [
    {
     "call": "PUT /tenants/publicdemo1bdcddc9",
     "request": {
      "mode": "enforce"
     },
     "status": 200,
     "ms": 119,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "upstream_url": null,
      "mode": "enforce"
     }
    },
    {
     "call": "PUT /tenants/publicdemo1bdcddc9/policy",
     "request": {
      "rego": "package tenant_publicdemo1bdcddc9.authz\n\nimport rego.v1\n\ndefault allow := false\n\nallow if {\n  startswith(input.path, \"/reports/\")\n  input.method == \"GET\"\n}\n"
     },
     "status": 200,
     "ms": 333,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "opa_status": 200,
      "policy_id": "tenant_publicdemo1bdcddc9"
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/reports/q3",
      "method": "GET"
     },
     "status": 200,
     "ms": 70,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "allow",
      "mode": "enforce",
      "would_enforce": false
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/admin/delete-all",
      "method": "POST"
     },
     "status": 200,
     "ms": 69,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "deny",
      "mode": "enforce",
      "would_enforce": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C03",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:03:32+00:00",
  "ms": 0,
  "reply": {
   "slug": "caingovern",
   "title": "Upload a Rego policy, then check an allowed and a forbidden request",
   "status": "ok",
   "input": "/admin/delete-all",
   "total_ms": 613,
   "steps": [
    {
     "call": "PUT /tenants/publicdemo1bdcddc9",
     "request": {
      "mode": "enforce"
     },
     "status": 200,
     "ms": 119,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "upstream_url": null,
      "mode": "enforce"
     }
    },
    {
     "call": "PUT /tenants/publicdemo1bdcddc9/policy",
     "request": {
      "rego": "package tenant_publicdemo1bdcddc9.authz\n\nimport rego.v1\n\ndefault allow := false\n\nallow if {\n  startswith(input.path, \"/reports/\")\n  input.method == \"GET\"\n}\n"
     },
     "status": 200,
     "ms": 333,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "opa_status": 200,
      "policy_id": "tenant_publicdemo1bdcddc9"
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/reports/q3",
      "method": "GET"
     },
     "status": 200,
     "ms": 70,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "allow",
      "mode": "enforce",
      "would_enforce": false
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/admin/delete-all",
      "method": "POST"
     },
     "status": 200,
     "ms": 69,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "deny",
      "mode": "enforce",
      "would_enforce": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C04",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:03:33+00:00",
  "ms": 0,
  "reply": {
   "slug": "caingovern",
   "title": "Upload a Rego policy, then check an allowed and a forbidden request",
   "status": "ok",
   "input": "/admin/delete-all",
   "total_ms": 613,
   "steps": [
    {
     "call": "PUT /tenants/publicdemo1bdcddc9",
     "request": {
      "mode": "enforce"
     },
     "status": 200,
     "ms": 119,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "upstream_url": null,
      "mode": "enforce"
     }
    },
    {
     "call": "PUT /tenants/publicdemo1bdcddc9/policy",
     "request": {
      "rego": "package tenant_publicdemo1bdcddc9.authz\n\nimport rego.v1\n\ndefault allow := false\n\nallow if {\n  startswith(input.path, \"/reports/\")\n  input.method == \"GET\"\n}\n"
     },
     "status": 200,
     "ms": 333,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "opa_status": 200,
      "policy_id": "tenant_publicdemo1bdcddc9"
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/reports/q3",
      "method": "GET"
     },
     "status": 200,
     "ms": 70,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "allow",
      "mode": "enforce",
      "would_enforce": false
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/admin/delete-all",
      "method": "POST"
     },
     "status": 200,
     "ms": 69,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "deny",
      "mode": "enforce",
      "would_enforce": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 },
 {
  "id": "C05",
  "http_status": 200,
  "recorded_at": "2026-11-03T23:03:33+00:00",
  "ms": 0,
  "reply": {
   "slug": "caingovern",
   "title": "Upload a Rego policy, then check an allowed and a forbidden request",
   "status": "ok",
   "input": "/admin/delete-all",
   "total_ms": 613,
   "steps": [
    {
     "call": "PUT /tenants/publicdemo1bdcddc9",
     "request": {
      "mode": "enforce"
     },
     "status": 200,
     "ms": 119,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "upstream_url": null,
      "mode": "enforce"
     }
    },
    {
     "call": "PUT /tenants/publicdemo1bdcddc9/policy",
     "request": {
      "rego": "package tenant_publicdemo1bdcddc9.authz\n\nimport rego.v1\n\ndefault allow := false\n\nallow if {\n  startswith(input.path, \"/reports/\")\n  input.method == \"GET\"\n}\n"
     },
     "status": 200,
     "ms": 333,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "opa_status": 200,
      "policy_id": "tenant_publicdemo1bdcddc9"
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/reports/q3",
      "method": "GET"
     },
     "status": 200,
     "ms": 70,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "allow",
      "mode": "enforce",
      "would_enforce": false
     }
    },
    {
     "call": "POST /tenants/publicdemo1bdcddc9/check",
     "request": {
      "path": "/admin/delete-all",
      "method": "POST"
     },
     "status": 200,
     "ms": 69,
     "reply": {
      "tenant_id": "publicdemo1bdcddc9",
      "decision": "deny",
      "mode": "enforce",
      "would_enforce": true
     }
    }
   ],
   "note": "Real calls to the running service with the public demo identity; replies are unedited."
  }
 }
]