{
  "captured_on": "2026-10-23",
  "workflow_id": "sg-breach-response-rehearsal",
  "workflow_version": "1.3.0",
  "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
  "toolkit_version": "0.6.0",
  "process_runtime_version": "0.4.0",
  "runtime_pin": "80dae05065cf12041c3300e25f6eb6b47244abce",
  "runtime_sha256": "286516c7a330afa70715fa08ad179a7fe3daee2f9268682f509be96c6974185f",
  "component_pins": [
    {
      "id": "process-modeling",
      "revision": "80dae05065cf12041c3300e25f6eb6b47244abce"
    },
    {
      "id": "scrum",
      "revision": "c7dfc3482df28fd5434c54833592ddc7de1f6923"
    },
    {
      "id": "sg-research",
      "revision": "408262fc965a754adb0d3e05a65576eb61812fde"
    },
    {
      "id": "sg-deadline",
      "revision": "69f06fd83ed4f4aee1a47c3b1b73f2ae2066701c"
    },
    {
      "id": "legal-extraction",
      "revision": "4e8af446c575425120548c1df3847313621734e8"
    },
    {
      "id": "sg-drafting",
      "revision": "2a545ffc83e731abf43708f3253a0287cfc83a82"
    },
    {
      "id": "sg-pdpa",
      "revision": "6515934cf7c03af458361c0bc7e32ca2051a2f20"
    }
  ],
  "model": {
    "nodes": 41,
    "lanes": 7,
    "human_roles": 6,
    "system_lanes": 1,
    "systems": 8,
    "unique_work_products": 11,
    "visible_system_annotations": 21,
    "visible_work_product_references": 34,
    "bpmn_js_import_warnings": []
  },
  "execution": "Actual pinned native runner and helper calls; screenshots from fresh Studio host runs driven through its API. No copied completed databases, practice-output fixtures, DOM substitutions or image compositing.",
  "synthetic": [
    "All incident facts",
    "All decisions and authority attestations",
    "All notifications and receipts; no external transmissions"
  ],
  "legal_readiness": "NOT ESTABLISHED: operative statutory text missing; dated guidance; foreign-law handoff unresolved",
  "research_access": "Original research output reused with additive retrieval-method audit; required at counsel gate. No fresh SSO/PDPC requests; research pin unchanged.",
  "capture_check": "Actual privacy screen refused a numeric substring of the genuine research UUID. No precedent-library entry created; no guard bypass.",
  "acceptance_checks": "Eleven expected routes verified, including unsuccessful outcomes, blocked rework, failed capture and checkpoint/stale-attempt checks.",
  "acceptance": [
    {
      "name": "pinned-content-scope-refused",
      "variant": "scope-refused",
      "run_id": "5d4728256dd141a9a2a3118cca01cab1",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": false,
      "outcomes": [
        {
          "code": "scope-declined",
          "label": "Scope Declined",
          "successful": false
        }
      ],
      "visits": {
        "scope": 1
      },
      "task_results_recorded": 1,
      "tasks_completed": 1,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-live-readiness",
      "variant": "live-readiness",
      "run_id": "58431e077a654261a5de9d0612033c46",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": false,
      "outcomes": [
        {
          "code": "source-verification-required",
          "label": "Source Verification Required",
          "successful": false
        }
      ],
      "visits": {
        "scope": 1,
        "contain": 1,
        "vendor-report": 1,
        "research": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1
      },
      "task_results_recorded": 12,
      "tasks_completed": 12,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-source-refused",
      "variant": "source-refused",
      "run_id": "3e9c915596924ff186bbe48e8b5b3b59",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": false,
      "outcomes": [
        {
          "code": "source-verification-required",
          "label": "Source Verification Required",
          "successful": false
        }
      ],
      "visits": {
        "scope": 1,
        "research": 1,
        "vendor-report": 1,
        "contain": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1
      },
      "task_results_recorded": 12,
      "tasks_completed": 12,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-deadline-refused",
      "variant": "deadline-refused",
      "run_id": "206fdc583d22403986246bbc0b224a43",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": false,
      "outcomes": [
        {
          "code": "deadline-refused",
          "label": "Deadline Refused",
          "successful": false
        }
      ],
      "visits": {
        "scope": 1,
        "contain": 1,
        "research": 1,
        "vendor-report": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1
      },
      "task_results_recorded": 15,
      "tasks_completed": 15,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-management-refused",
      "variant": "management-refused",
      "run_id": "9aaa7a45d43349ccb61b6d39417f4ace",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": false,
      "outcomes": [
        {
          "code": "management-refused",
          "label": "Management Refused",
          "successful": false
        }
      ],
      "visits": {
        "scope": 1,
        "contain": 1,
        "vendor-report": 1,
        "research": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "remediation-clause": 1,
        "foreign-handoff": 1,
        "response-pack": 1,
        "release-text": 1
      },
      "task_results_recorded": 19,
      "tasks_completed": 19,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-no-notification",
      "variant": "no-notification",
      "run_id": "efe3c268bcae4874bf8d8fd1dd8fe0f6",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": true,
      "outcomes": [
        {
          "code": "no-notification-rehearsal",
          "label": "No Notification Rehearsal",
          "successful": true
        }
      ],
      "visits": {
        "scope": 1,
        "vendor-report": 1,
        "research": 1,
        "contain": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1
      },
      "task_results_recorded": 13,
      "tasks_completed": 13,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-scale-only",
      "variant": "scale-only",
      "run_id": "ce9525972ae14f709abd2b398926870a",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": true,
      "outcomes": [
        {
          "code": "exercise-complete-no-capture",
          "label": "Exercise Complete No Capture",
          "successful": true
        }
      ],
      "visits": {
        "scope": 1,
        "research": 1,
        "vendor-report": 1,
        "contain": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "remediation-clause": 1,
        "response-pack": 1,
        "foreign-handoff": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1
      },
      "task_results_recorded": 22,
      "tasks_completed": 22,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-no-capture",
      "variant": "no-capture",
      "run_id": "3990c97f4f054835bb2adab1a6bd0edb",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": true,
      "outcomes": [
        {
          "code": "exercise-complete-no-capture",
          "label": "Exercise Complete No Capture",
          "successful": true
        }
      ],
      "visits": {
        "scope": 1,
        "vendor-report": 1,
        "contain": 1,
        "research": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "foreign-handoff": 1,
        "response-pack": 1,
        "remediation-clause": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "individual-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1
      },
      "task_results_recorded": 23,
      "tasks_completed": 23,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-rework-cap",
      "variant": "rework-cap",
      "run_id": "3182f3b81f4146049f6eec24963263a8",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "blocked",
      "business_success": null,
      "outcomes": [],
      "visits": {
        "scope": 1,
        "vendor-report": 1,
        "contain": 1,
        "research": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2
      },
      "task_results_recorded": 10,
      "tasks_completed": 10,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-capture-refused",
      "variant": "capture-refused",
      "run_id": "ec167bd7ae394bb988818f7493c779f8",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "running",
      "business_success": null,
      "outcomes": [],
      "visits": {
        "scope": 1,
        "research": 1,
        "vendor-report": 1,
        "contain": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "foreign-handoff": 1,
        "response-pack": 1,
        "remediation-clause": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "individual-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1,
        "capture": 1
      },
      "task_results_recorded": 24,
      "tasks_completed": 23,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-checkpoint",
      "variant": "no-capture",
      "run_id": "d713bd6840ce414fb483bc8bc6e4247b",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": true,
      "outcomes": [
        {
          "code": "exercise-complete-no-capture",
          "label": "Exercise Complete No Capture",
          "successful": true
        }
      ],
      "visits": {
        "scope": 1,
        "research": 1,
        "vendor-report": 1,
        "contain": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "foreign-handoff": 1,
        "response-pack": 1,
        "remediation-clause": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "individual-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1
      },
      "task_results_recorded": 23,
      "tasks_completed": 23,
      "checkpoint_resumed": true,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    }
  ],
  "reused_matters": [
    {
      "name": "pinned-content-released-a",
      "variant": "no-capture",
      "run_id": "c5860430c79b4605bafb5c9ceafcb719",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": true,
      "outcomes": [
        {
          "code": "exercise-complete-no-capture",
          "label": "Exercise Complete No Capture",
          "successful": true
        }
      ],
      "visits": {
        "scope": 1,
        "contain": 1,
        "vendor-report": 1,
        "research": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "response-pack": 1,
        "remediation-clause": 1,
        "foreign-handoff": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "individual-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1
      },
      "task_results_recorded": 23,
      "tasks_completed": 23,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "pinned-content-released-b",
      "variant": "scale-only",
      "run_id": "2a579987a7b546a3a18d17d1a2f928eb",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": true,
      "outcomes": [
        {
          "code": "exercise-complete-no-capture",
          "label": "Exercise Complete No Capture",
          "successful": true
        }
      ],
      "visits": {
        "scope": 1,
        "vendor-report": 1,
        "contain": 1,
        "research": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "foreign-handoff": 1,
        "response-pack": 1,
        "remediation-clause": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1
      },
      "task_results_recorded": 22,
      "tasks_completed": 22,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    }
  ],
  "studio_runs": [
    {
      "name": "studio-no-capture",
      "variant": "no-capture",
      "studio_id": "adef1338141d",
      "run_id": "0f9cf45232154b89abceac95bb7b48ea",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "completed",
      "business_success": true,
      "outcomes": [
        {
          "code": "exercise-complete-no-capture",
          "label": "Exercise Complete No Capture",
          "successful": true
        }
      ],
      "visits": {
        "scope": 1,
        "research": 1,
        "contain": 1,
        "vendor-report": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "foreign-handoff": 1,
        "remediation-clause": 1,
        "response-pack": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "individual-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1
      },
      "task_results_recorded": 23,
      "tasks_completed": 23,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    },
    {
      "name": "studio-capture-refused",
      "variant": "capture-refused",
      "studio_id": "f4ae15d1f492",
      "run_id": "a7c3d6e76e9645a5becad5031f46a212",
      "blueprint_hash": "a03057f6f69845b970f36d440152909d0a4cb0c0df6ce97d81fad237ac68ec67",
      "status": "running",
      "business_success": null,
      "outcomes": [],
      "visits": {
        "scope": 1,
        "research": 1,
        "vendor-report": 1,
        "contain": 1,
        "collect": 2,
        "extract": 2,
        "evidence-review": 2,
        "pdpa-assess": 1,
        "source-and-scope": 1,
        "determine": 1,
        "deadline": 1,
        "deadline-review": 1,
        "remediation-clause": 1,
        "foreign-handoff": 1,
        "response-pack": 1,
        "release-text": 1,
        "regulator-receipt": 1,
        "individual-receipt": 1,
        "lessons": 1,
        "reuse-consent": 1,
        "capture": 1
      },
      "task_results_recorded": 24,
      "tasks_completed": 23,
      "checkpoint_resumed": false,
      "legal_readiness": "NOT ESTABLISHED",
      "external_notifications_sent": 0
    }
  ],
  "studio_screenshots": [
    {
      "file": "complex-evidence-rework.png",
      "studio_id": "adef1338141d",
      "status": "running",
      "business_success": null,
      "sha256": "8bd10bb2b0ad19242be54218903489aa93082777a3188283c87f341cee880183",
      "browser_errors": [],
      "viewport": {
        "width": 1440,
        "height": 1080
      },
      "captured_at": "2026-10-23T01:11:17.733Z"
    },
    {
      "file": "complex-source-gate.png",
      "studio_id": "adef1338141d",
      "status": "running",
      "business_success": null,
      "sha256": "1d0e37b95dfa3aa94da5894edc75886a4f32477f58c1e103f99a32bfeb4d5cba",
      "browser_errors": [],
      "viewport": {
        "width": 1440,
        "height": 1080
      },
      "captured_at": "2026-10-23T01:11:32.948Z"
    },
    {
      "file": "complex-outcome.png",
      "studio_id": "adef1338141d",
      "status": "completed",
      "business_success": true,
      "sha256": "3a57622c5eeb1811c2ea5c58faa30584d7a968cb428cf15a3f6a1819492e1f71",
      "browser_errors": [],
      "viewport": {
        "width": 1440,
        "height": 1080
      },
      "captured_at": "2026-10-23T01:12:01.758Z"
    },
    {
      "file": "complex-capture-held.png",
      "studio_id": "f4ae15d1f492",
      "status": "running",
      "business_success": null,
      "sha256": "9a196f1ec842e86d0c40e89edd7fb5316cb2d6b66f38e64ed3322bb427686025",
      "browser_errors": [],
      "viewport": {
        "width": 1440,
        "height": 1080
      },
      "captured_at": "2026-10-23T01:13:00.227Z"
    }
  ],
  "diagram_capture": {
    "captured_at": "2026-10-22T02:32:52.860Z",
    "source": "Actual released 1.3.0 BPMN imported into bpmn-js; focus views change viewport only; actual unapproved Studio revision 1.4.0",
    "browser_errors": [],
    "studio_draft_id": "02b53d551759",
    "studio_draft_version": "1.4.0"
  },
  "studio_detail": "Ordinary Ctrl+mouse-wheel zoom and node selection in the actual unapproved 1.4.0 revision of release 1.3.0; presentation only.",
  "external_notifications_sent": 0,
  "files": [
    {
      "file": "bpmn-overview.png",
      "sha256": "01fedc0de0ba9a3b9c37ad3d6bd13ff50cfaf0becab23cc737770c6c96d1441c"
    },
    {
      "file": "bpmn-overview.svg",
      "sha256": "b2a2d44c0feb92209bf02a97a2e5e65c6fc21c4cfef08815a2fd01504b0334fe"
    },
    {
      "file": "complex-capture-held.png",
      "sha256": "9a196f1ec842e86d0c40e89edd7fb5316cb2d6b66f38e64ed3322bb427686025"
    },
    {
      "file": "complex-evidence-rework.png",
      "sha256": "8bd10bb2b0ad19242be54218903489aa93082777a3188283c87f341cee880183"
    },
    {
      "file": "complex-outcome.png",
      "sha256": "3a57622c5eeb1811c2ea5c58faa30584d7a968cb428cf15a3f6a1819492e1f71"
    },
    {
      "file": "complex-source-gate.png",
      "sha256": "1d0e37b95dfa3aa94da5894edc75886a4f32477f58c1e103f99a32bfeb4d5cba"
    },
    {
      "file": "decision-detail.png",
      "sha256": "6fc1da3039d786bbddeda6f4a22dd1efee4448efd9d1a245238330d695e42eae"
    },
    {
      "file": "decision-detail.svg",
      "sha256": "a85a2bed286a44ffa232b4408bd3db21b6de392e7227f9c677184a041ce95f9c"
    },
    {
      "file": "evidence-detail.png",
      "sha256": "668930578dafc58f92622244d12fdfe6b6c9dacb92c66cbde306cbd0160143d5"
    },
    {
      "file": "evidence-detail.svg",
      "sha256": "511b9d971f2173c87c12977eba44e046fc6e9dfb494ac5108d5078f83c51f0d6"
    },
    {
      "file": "process-guide.md",
      "sha256": "c465b744545b85d38974c27a4665164df8c2419929250fa34dcc2f3120712e71"
    },
    {
      "file": "studio-process-detail.png",
      "sha256": "bf49d05daaf01db341f87a236e0a296f2c4c7ba21c8e8ecfb276dfb411ea5e08"
    },
    {
      "file": "studio-process-editor.png",
      "sha256": "a8c54f1d08e722558fe41d213e4da70d8a05568345151781a7b347b627993af4"
    },
    {
      "file": "to-be.bpmn",
      "sha256": "fc1abb1642f7768bd2db32a6acf065a41088e0255ffe258383b4e4f27d6644a1"
    }
  ],
  "studio_coordinator_version": "0.6.1",
  "display_label_policy": "Workflow descriptions replace invented organisations; simulation disclosures retained. Earlier execution records preserved in private stores and Git history."
}