{
  "schemaVersion": "1.0.0",
  "incident": {
    "incidentId": "INCIDENT-EXAMPLE-001",
    "revision": 3,
    "status": "handoff_closed",
    "createdAt": "2026-07-28T10:07:00Z",
    "updatedAt": "2026-07-28T10:31:00Z",
    "fictionalExample": true
  },
  "report": {
    "observedAt": "2026-07-28T10:02:00Z",
    "detectedAt": "2026-07-28T10:04:00Z",
    "reportedAt": "2026-07-28T10:06:00Z",
    "reporterRoleId": "ROLE-SERVICE-DESK",
    "location": "Fictional EU test environment",
    "system": "orders-api.test",
    "factualSummary": "Synthetic checkout requests returned HTTP 503 responses during a bounded observation window.",
    "observedImpact": "Eighteen of twenty synthetic checkout requests returned HTTP 503 between 10:02 and 10:05 UTC.",
    "affectedScope": "The observation covered the synthetic EU test client only; production traffic and unique-user impact were not established.",
    "evidenceIds": ["EVIDENCE-001", "EVIDENCE-002"]
  },
  "observations": [
    {
      "id": "OBS-001",
      "observedAt": "2026-07-28T10:02:00Z",
      "fact": "The first synthetic checkout request in the saved sample returned HTTP 503.",
      "evidenceIds": ["EVIDENCE-001"]
    },
    {
      "id": "OBS-002",
      "observedAt": "2026-07-28T10:04:00Z",
      "fact": "The test-environment availability monitor entered its configured alert state.",
      "evidenceIds": ["EVIDENCE-002"]
    },
    {
      "id": "OBS-003",
      "observedAt": "2026-07-28T10:05:00Z",
      "fact": "The saved sample contained twenty requests, including eighteen HTTP 503 responses and two HTTP 200 responses.",
      "evidenceIds": ["EVIDENCE-001"]
    }
  ],
  "actionsTaken": [
    {
      "id": "ACTION-001",
      "performedAt": "2026-07-28T10:05:00Z",
      "actorRoleId": "ROLE-SERVICE-DESK",
      "fact": "The reporter exported the bounded synthetic-request log sample to the restricted evidence store.",
      "evidenceIds": ["EVIDENCE-001"]
    },
    {
      "id": "ACTION-002",
      "performedAt": "2026-07-28T10:09:00Z",
      "actorRoleId": "ROLE-SERVICE-DESK",
      "fact": "The reporter saved the alert-state metric export used by this record.",
      "evidenceIds": ["EVIDENCE-002"]
    }
  ],
  "evidence": [
    {
      "id": "EVIDENCE-001",
      "capturedAt": "2026-07-28T10:05:00Z",
      "type": "log_export",
      "reference": "https://evidence.example.test/incidents/incident-example-001/synthetic-request-log.json",
      "sha256": "1111111111111111111111111111111111111111111111111111111111111111",
      "redactionStatus": "redacted",
      "accessLevel": "restricted",
      "description": "Fictional bounded log export with synthetic request identifiers removed."
    },
    {
      "id": "EVIDENCE-002",
      "capturedAt": "2026-07-28T10:09:00Z",
      "type": "metric_export",
      "reference": "https://metrics.example.test/incidents/incident-example-001/availability-window.json",
      "sha256": "2222222222222222222222222222222222222222222222222222222222222222",
      "redactionStatus": "not_required",
      "accessLevel": "internal",
      "description": "Fictional aggregate alert-state export for the bounded observation window."
    },
    {
      "id": "EVIDENCE-003",
      "capturedAt": "2026-07-28T10:24:00Z",
      "type": "handoff_record",
      "reference": "https://records.example.test/incidents/incident-example-001/handoff-001.json",
      "sha256": "3333333333333333333333333333333333333333333333333333333333333333",
      "redactionStatus": "not_required",
      "accessLevel": "internal",
      "description": "Fictional role-to-role acknowledgement for custody of report revision three."
    }
  ],
  "notifications": [
    {
      "id": "NOTICE-001",
      "sentAt": "2026-07-28T10:08:00Z",
      "recipientRoleId": "ROLE-PLATFORM-ONCALL",
      "channel": "test incident queue",
      "factualMessage": "A report containing the observed HTTP 503 sample and alert-state references was sent to the platform on-call role.",
      "evidenceIds": ["EVIDENCE-001", "EVIDENCE-002"]
    },
    {
      "id": "NOTICE-002",
      "sentAt": "2026-07-28T10:20:00Z",
      "recipientRoleId": "ROLE-INCIDENT-RECORDS",
      "channel": "record custody queue",
      "factualMessage": "Revision three was offered for record-custody handoff with two open items listed.",
      "evidenceIds": ["EVIDENCE-003"]
    }
  ],
  "handoffs": [
    {
      "id": "HANDOFF-001",
      "handedOffAt": "2026-07-28T10:21:00Z",
      "fromRoleId": "ROLE-SERVICE-DESK",
      "toRoleId": "ROLE-INCIDENT-RECORDS",
      "recordScope": "Custody of factual incident report INCIDENT-EXAMPLE-001 revision three and its evidence inventory.",
      "evidenceIds": ["EVIDENCE-001", "EVIDENCE-002", "EVIDENCE-003"],
      "acknowledgedAt": "2026-07-28T10:23:00Z"
    }
  ],
  "openFacts": [
    {
      "id": "OPEN-001",
      "openedAt": "2026-07-28T10:12:00Z",
      "kind": "question",
      "statement": "Which test-environment changes, if any, completed before 10:02 UTC?",
      "status": "open",
      "resolvedAt": null,
      "evidenceIds": []
    },
    {
      "id": "OPEN-002",
      "openedAt": "2026-07-28T10:14:00Z",
      "kind": "fact",
      "statement": "Unique-user impact was not established by the synthetic request sample.",
      "status": "open",
      "resolvedAt": null,
      "evidenceIds": ["EVIDENCE-001"]
    }
  ],
  "recordClosure": {
    "handoffClosed": true,
    "closedAt": "2026-07-28T10:24:00Z",
    "closedByRoleId": "ROLE-INCIDENT-RECORDS",
    "finalHandoffId": "HANDOFF-001",
    "note": "Custody of this report revision was acknowledged. This does not assert incident recovery, root cause, or remediation approval."
  },
  "boundaries": {
    "emergencyResponseOwned": false,
    "responsePlanningOwned": false,
    "responseCommandsOwned": false,
    "legalReportingOwned": false,
    "regulatoryReportingOwned": false,
    "insurerReportingOwned": false,
    "severityDecisionOwned": false,
    "rootCauseConclusionOwned": false,
    "correctiveActionsOwned": false,
    "blameAssigned": false,
    "remediationApprovalOwned": false,
    "recoveryProofOwned": false
  }
}