{
  "schema_version": 1,
  "data_policy": "Synthetic examples only; not live tenant evidence or integration validation.",
  "capture_build": "Current repaired local source; not a published release claim.",
  "count": 270,
  "screenshots": [
    {
      "file": "admin-access-built-in-roles.png",
      "title": "Access Control — built-in roles and exact permissions",
      "route": "/admin/roles",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:04.688Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed.",
      "sha256": "6dbdcbf2c0a5be58aa525ffd3bb26ce7ece4841554e2b6b00dcf3274c1abd196"
    },
    {
      "file": "admin-access-default-users.png",
      "title": "Access Control — local users, effective roles and account status",
      "route": "/admin/access",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:02.612Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed.",
      "sha256": "a8e7ea9a02da4fc6983062cc7f4b29c7e4f660b6ee64f512113b74683d4d3ce5"
    },
    {
      "file": "admin-agents-built-in-library.png",
      "title": "Sub Agents — built-in security specialists and review-mode instructions",
      "route": "/automations/agents",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:28.097Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Native built-in definitions, not generated reports. No agent is enabled, disabled, enhanced, exported or invoked.",
      "sha256": "419ea984ee8ed1c85eebc5c930d59d97fc8561a2ac175c297b2f9e9525b0ae7e"
    },
    {
      "file": "admin-automations-workflow-directory.png",
      "title": "Automations — schedules, workbooks, playbooks and notifications",
      "route": "/automations",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:30.175Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. A capability directory with seeded demo connectors; zero schedules/runs are honest fresh-install values, not execution evidence.",
      "sha256": "02f2f0d2a374fd98728d4c2a3ccc576df52b1a2c956041cb789c5d9100efce6a"
    },
    {
      "file": "admin-backup-export-scope.png",
      "title": "Backup — export section catalog and secret-free backup guidance",
      "route": "/admin/backup",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:26.003Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. No download, upload, preview or restore is requested.",
      "sha256": "8d05f0f145fd07a7e1c94e2c521ab7869a1c2a43002afecea9d925e138eb8ad6"
    },
    {
      "file": "admin-demo-data-loaded.png",
      "title": "Demo Data — seeded workload scope and demo-only removal guidance",
      "route": "/admin/demodata",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:23.926Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Load and Remove are never clicked.",
      "sha256": "cb390c610955cd24d2e0538451cbf02b95daa78c96a50497bf63f0e54e238699"
    },
    {
      "file": "admin-general-instructions-draft.png",
      "title": "General settings — instructions, response style and behavior defaults",
      "route": "/admin/settings",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:34.271Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Synthetic guidance exists only in the unsaved textarea; no chat is sent and no application setting is changed.",
      "sha256": "4bdca39e826da6effe3f84b76cb16682e2624d08f78986fcaf402cc75b088d6d"
    },
    {
      "file": "admin-network-allowed-source-draft.png",
      "title": "Network access — allowed-source form and range preview",
      "route": "/admin/firewall",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:08.902Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. TEST-NET-1 documentation range only. Add was not clicked; the firewall remains Off and no rule was staged or saved.",
      "sha256": "fe41f2e7372003d2fef69d1fa6adacb5e960e59a82fc6c7478e50b0acb9e288c"
    },
    {
      "file": "admin-onboarding-proactive-coverage-directory.png",
      "title": "Proactive Support — choose a monitoring, telemetry or backup coverage tool",
      "route": "/proactive",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:32.161Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Native capability descriptions filtered for coverage; this is a tool directory, not an empty operational dashboard.",
      "sha256": "0e7579188d4fd28739637758d622b93d3eeb4b50eb865aa7b12a54a095715129"
    },
    {
      "file": "admin-prompts-chat-agent-default.png",
      "title": "System Prompts — shipped Chat Agent instructions and usage guidance",
      "route": "/admin/prompts",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:10.999Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed.",
      "sha256": "a1f1f11791c603c052fe44b7ce06666043b845375c8d106f88d775829369b883"
    },
    {
      "file": "admin-provider-azure-openai-draft.png",
      "title": "Azure OpenAI — endpoint, API version and deployment (unsaved)",
      "route": "/admin/providers",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:42:52.118Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Synthetic UNSAVED form example; not a configured or validated connection. Credential fields are intentionally empty unless explicitly marked as a nonfunctional token example.",
      "sha256": "699b658408e32207b017025c3a7fb226b589da2b66f6a58a7863c1fd6525db39"
    },
    {
      "file": "admin-provider-openai-draft.png",
      "title": "OpenAI — API key and model setup (unsaved example)",
      "route": "/admin/providers",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:42:49.967Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Synthetic UNSAVED form example; not a configured or validated connection. Credential fields are intentionally empty unless explicitly marked as a nonfunctional token example.",
      "sha256": "5b2795dbbf9f8d2d33bad23fd48b443da893f78ffac195855eb195e1d526eec4"
    },
    {
      "file": "admin-reference-amba-vm-baseline.png",
      "title": "AMBA Reference Set — VM alert categories, severities and thresholds",
      "route": "/admin/amba",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:17.326Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed.",
      "sha256": "e07d0cb22c3e300eb1d24d875c64ababcc97291900104f01e3930b11a239412b"
    },
    {
      "file": "admin-reference-backupdr-vm-checks.png",
      "title": "Backup / DR Reference Set — applicable VM protection checks",
      "route": "/admin/backupdr",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:21.834Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed.",
      "sha256": "ad192d5cf547a815d17cb764f993f189e2bc12ade05c3badb4d48732269ecfa3"
    },
    {
      "file": "admin-reference-telemetry-key-vault-audit.png",
      "title": "Telemetry Reference Set — Key Vault audit category and coverage semantics",
      "route": "/admin/telemetry",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:19.747Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Existing category opened for inspection only; no field is edited and no workspace discovery is performed.",
      "sha256": "e3c66a137df9a89714e34ad581029c1efd13cfc0e9a3a678f23f8910d619bc1e"
    },
    {
      "file": "admin-scoring-assessment-defaults.png",
      "title": "Assessment scoring — severity weights, recovery opt-in and score bands",
      "route": "/admin/scoring",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:13.084Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed.",
      "sha256": "9bf4080eef1fe9ba79532419a3c36af9f54042595b2c78aef9d345f22bdedeea"
    },
    {
      "file": "admin-scoring-workload-health-weights.png",
      "title": "Workload Health Score — signal weighting and nightly-refresh control",
      "route": "/admin/scoring",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:15.131Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. A distinct lower-page configuration section, not a second copy of the assessment-weight view. No weights or scheduler settings are changed.",
      "sha256": "eb7e8beddf8cdab651b65d2b93a8030fc24d6a28ded083a8c55a4e94f22a983f"
    },
    {
      "file": "admin-security-policy-defaults.png",
      "title": "Security Policy — sign-in, password and lockout controls",
      "route": "/admin/policies",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:06.782Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed.",
      "sha256": "96251498511a088a873126bdcda9d1c83006d345deb6e8113bd0ed0de5354792"
    },
    {
      "file": "admin-tenant-host-identity.png",
      "title": "Connect Azure — host identity and read-only defaults",
      "route": "/admin/tenants",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:42:58.371Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Synthetic UNSAVED form example; not a configured or validated connection. Credential fields are intentionally empty unless explicitly marked as a nonfunctional token example.",
      "sha256": "fbe19b0fb22e5eacb036ece31e59c588a31aa45e539895c0bae663c9753542f3"
    },
    {
      "file": "admin-tenant-pasted-token-guidance.png",
      "title": "Connect Azure — short-lived ARM and Graph token fields",
      "route": "/admin/tenants",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:00.491Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Synthetic UNSAVED form example; not a configured or validated connection. Credential fields are intentionally empty unless explicitly marked as a nonfunctional token example. Both token strings are deliberately nonfunctional; no token acquisition or validation occurs.",
      "sha256": "0964e76bee546080903ab5dc354df75d6af53bd04c2a1973746489e8b791e0b8"
    },
    {
      "file": "admin-tenant-service-principal-certificate.png",
      "title": "Connect Azure — certificate instead of a client secret",
      "route": "/admin/tenants",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:42:56.284Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Synthetic UNSAVED form example; not a configured or validated connection. Credential fields are intentionally empty unless explicitly marked as a nonfunctional token example.",
      "sha256": "0bde6f0951c7393c04b4657b12db9b6c060287599ab2ef42964f4fe0dd3b0982"
    },
    {
      "file": "admin-tenant-service-principal-secret.png",
      "title": "Connect Azure — service principal with client secret",
      "route": "/admin/tenants",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:42:54.220Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — native UI on the isolated docs-admin instance. Built-in defaults and seeded demo data only; no live Azure evidence. No configuration was saved or operation executed. Synthetic UNSAVED form example; not a configured or validated connection. Credential fields are intentionally empty unless explicitly marked as a nonfunctional token example.",
      "sha256": "9d994e41e27e1d8687a8a1f6baabced5d6ab2ae97b5cbe8d792b6dc3461c0380"
    },
    {
      "file": "core-assessment-compliance.png",
      "title": "Assessment compliance — mapped controls and coverage",
      "route": "/assessments/synthetic-core-assessment?rtab=compliance",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:42.965Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "8df82b8a90aa8f2307b9163b46254581752c927ca2194f56baadff5b03c144c7"
    },
    {
      "file": "core-assessment-finding.png",
      "title": "Assessment finding — affected storage, owner and remediation",
      "route": "/assessments/synthetic-core-assessment",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:41.239Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "ab63f087be569243aef9c92eddb6530c35769dfd1da3e3231ba686c315dae530"
    },
    {
      "file": "core-assessment-overview.png",
      "title": "Assessment report — score, five pillars and review summary",
      "route": "/assessments/synthetic-core-assessment",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:39.518Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "e6db120c1fbf73bba9190a3538d74e9e6fc046fd920c73cc3dfd93e96742d100"
    },
    {
      "file": "core-dashboard.png",
      "title": "Dashboard — workload readiness and saved activity",
      "route": "/dashboard",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:36.877Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "a60a28c10b5cda26454078c4d455c76cf7acd2d4af549f773315bf2b08da7788"
    },
    {
      "file": "core-estate-graph.png",
      "title": "Estate Graph — typed tenant, workload, architecture and resource relationships",
      "route": "/graph",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:53.737Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "b69422dee33157fd9db51e3313d943c1475f67d7713c7d12b586f9d18b31a4c9"
    },
    {
      "file": "core-investigation-conversation.png",
      "title": "Deep Investigation — saved question, evidence and completed answer",
      "route": "/c/synthetic-core-investigation",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:49.496Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "294d73c254441e0d3660e9e1b6cf08c4139de787a87469f1cd45dbf16f89a156"
    },
    {
      "file": "core-investigation-result.png",
      "title": "Deep Investigation result — hypotheses, evidence and recommended actions",
      "route": "/c/synthetic-core-investigation",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:51.285Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "1994372955dbc0f72ceed485cf869358cd55f2b914f92c9c63fde377dca0df12"
    },
    {
      "file": "core-mission-board.png",
      "title": "Mission Control board — systems, attention, saved log and history",
      "route": "/mission-control/synthetic-core-commerce-prod",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:46.669Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "3f9638cc754dbebe76cc1358b62a47086aa988ecba17d2e0b11074f5ca9a12dd"
    },
    {
      "file": "core-mission-fleet.png",
      "title": "Mission Control — saved readiness across workloads",
      "route": "/mission-control",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:44.947Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: synthetic browser responses, not an executed assessment, Azure scan or LLM investigation. Scores, evidence, framework mappings and conclusions are illustrative; no certification or backend persistence is implied.",
      "sha256": "ad03411eb70c76c0b32649886ff455343346045c4c6f30def989954affa9585d"
    },
    {
      "file": "core-monitor-activity.png",
      "title": "Monitor — application counters and live-operation status",
      "route": "/monitor",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:05.324Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic browser fixture, not actual operator activity, billed cost or provider telemetry.",
      "sha256": "2f9a7f12b2629dd8163f7b755a749cbb0a4327fc3324df511c64eec03e787154"
    },
    {
      "file": "estate-architecture-canvas.png",
      "title": "Connected checkout architecture and resource palette",
      "route": "/architectures/synthetic-estate-commerce-architecture",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:09.137Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation. Retail amounts are illustrative fixture values, not quotes.",
      "sha256": "212a5d4940c5f803078dea14c7105669a66310e8049031d4f5f96a5c45479bb3"
    },
    {
      "file": "estate-architecture-resource-inspector.png",
      "title": "Selected application node with Azure properties and pricing context",
      "route": "/architectures/synthetic-estate-commerce-architecture",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:10.878Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "1f763c70993ae35f8eb9833f9ef0ee327ecf3f4e8db7a8bdb02e76660a0020e1"
    },
    {
      "file": "estate-architecture-version-history.png",
      "title": "Architecture canvas alongside retained review revisions",
      "route": "/architectures/synthetic-estate-commerce-architecture",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:13.728Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "9afa6b92295bc6a864c0bd1af89b1e97447cc55de68c514ddd8fb6fa89d8c38e"
    },
    {
      "file": "estate-architectures-gallery.png",
      "title": "Architecture solution gallery with populated previews",
      "route": "/architectures",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:06.399Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "f915e3af2b695a3d8272e19d2a7db4932f1f2c7ce9b6453e7b3dbbf24d56dbaa"
    },
    {
      "file": "estate-case-new-draft.png",
      "title": "New case title and severity prepared above the incident queue",
      "route": "/cases",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:00.895Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation. Form is unsaved; Open case is never submitted.",
      "sha256": "5befd9e1c7e8d7c50f1e3ddc57484fc68b12d275e9631c05c86d554af9d6d675"
    },
    {
      "file": "estate-case-timeline.png",
      "title": "Incident timeline with linked changes, findings and evidence",
      "route": "/cases/synthetic-estate-case-checkout",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:59.162Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "788ab4d8ea99837b075947dc04a4f078222a0e8d911829ae9c9ae2b6a6cfa054"
    },
    {
      "file": "estate-cases-queue.png",
      "title": "Case queue across investigation, remediation and resolution",
      "route": "/cases",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:57.975Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "d61aa07221828df023d1f9af46f19c3ee0070dc56641db03c450ab5470f77fd9"
    },
    {
      "file": "estate-change-event-drawer.png",
      "title": "Selected gateway change with attribution, impact and case note",
      "route": "/change-explorer/changes?change=synthetic-estate-change-0",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:41.209Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "c66efb7081a583b9529510ee5aeb845921119945cc63faf4897533a6302c214f"
    },
    {
      "file": "estate-change-summary.png",
      "title": "Cached change analysis with risk distribution and review window",
      "route": "/change-explorer/summary",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:38.585Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "c4df6de2b9ffa8d57cac653164330976672c511ce9901970c7e2125ed4ff0240"
    },
    {
      "file": "estate-change-technical-diffs.png",
      "title": "Before-and-after property changes for the release review",
      "route": "/change-explorer/diff",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:43.802Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "67598dcb57f89771af68be3f37383e6fcde1e6c81b5523184b9355106b8b0515"
    },
    {
      "file": "estate-evidence-content.png",
      "title": "Snapshot inventory content and integrity presentation",
      "route": "/evidence",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:54.002Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation. Hash and verified badge are fixture values; no cryptographic check was performed.",
      "sha256": "2a1463e0036bd376529b8f849e87ab3b40036ec3f76eb1b8e6a785e7f393a1e1"
    },
    {
      "file": "estate-evidence-diff.png",
      "title": "Selected snapshots compared across inventory and findings",
      "route": "/evidence",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:55.949Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "da759688558ed117c308fff78d8ce6ec81bc2a2db3527bff883ce0c2fa9398f8"
    },
    {
      "file": "estate-evidence-locker.png",
      "title": "Standard and audit-class investigation snapshots",
      "route": "/evidence",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:52.842Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "13da85adc5a11c7ce14bf47c616a82dbb7fe07178be5693594aae54a6c9b2d09"
    },
    {
      "file": "estate-group-compare.png",
      "title": "Production-versus-development resource and coverage drift",
      "route": "/workloads/groups/synthetic-estate-commerce-group",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:03.749Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "2723a073782534936c4544b53836ac1dd7f07a579d164392651375235ceaac75"
    },
    {
      "file": "estate-group-members.png",
      "title": "Group rollup and independent environment members",
      "route": "/workloads/groups/synthetic-estate-commerce-group",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:02.531Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "8a639f7e873d9999106abf2710143e4e6da5824c598c805deb3fd9b70a4eff0d"
    },
    {
      "file": "estate-inventory-cost.png",
      "title": "Cached cost allocation across workloads, types and regions",
      "route": "/inventory/cost",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:25.898Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation. USD 540 is modeled spend, not a real bill.",
      "sha256": "8e5345510848813f49a19fc481348ae8758f4c3ef159885852d0be13f3a8db86"
    },
    {
      "file": "estate-inventory-grid.png",
      "title": "Inventory grid with tenant, workload and health facets",
      "route": "/inventory/grid",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:16.334Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "f837d08134ef97842755fff30d20f9e369d89d48069f79274a131a533712c46b"
    },
    {
      "file": "estate-inventory-overview.png",
      "title": "Estate composition and actionable inventory insights",
      "route": "/inventory/overview",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:23.292Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "03bfc9bfc667c667e281e298285f8c12a969c1382d7e0d0f3505f1d1086c7a4a"
    },
    {
      "file": "estate-inventory-region-grouped.png",
      "title": "West US filter with resource-type groupings",
      "route": "/inventory/grid?loc=westus",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:18.034Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "fc352d30fa782dbc7f96da92ed3e8f44f92e13571594bd60240c51a583b0449d"
    },
    {
      "file": "estate-inventory-resource-drawer.png",
      "title": "Selected inventory resource, ownership and governance tags",
      "route": "/inventory/grid",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:20.675Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "1339f22a28e8b04c2d88265dcaf11be49a64fbc100f7330d54b74612deefd32a"
    },
    {
      "file": "estate-ownership-assignments.png",
      "title": "Direct, workload-derived and missing ownership assignments",
      "route": "/ownership/assignments",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:48.308Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "918813f65a49737ef2c05bfca08fc8f03fab01e1e2b7aa22032f8fa22ee6595b"
    },
    {
      "file": "estate-ownership-coverage.png",
      "title": "Ownership coverage, evidence sources and production gaps",
      "route": "/ownership/coverage?scope=workload&wid=synthetic-estate-commerce-prod",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:50.876Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "188636898f88d343392f93ed7689142b6ff9867924e7aacac2694102b0ea3069"
    },
    {
      "file": "estate-ownership-directory.png",
      "title": "Accountable teams and people in the ownership directory",
      "route": "/ownership/directory",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:45.779Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "67234404b620e08cf874972deb72b1659a0d76d2a94476cb744b3060516b2e02"
    },
    {
      "file": "estate-tag-census.png",
      "title": "Tag census, casing signals and any-tag coverage",
      "route": "/tagintel",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:28.701Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "95e281f8c07326c4d81fc78946a5633daaa4330e055c82edb9e6f09ff634d3d1"
    },
    {
      "file": "estate-tag-hygiene.png",
      "title": "Duplicate-key and value-normalization review",
      "route": "/tagintel/hygiene",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:33.234Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "dc472787d0e8a525924d4cceaa10f5b5bebb3614aeffee106cfa330bd3d482ed"
    },
    {
      "file": "estate-tag-key-value-drill.png",
      "title": "Environment key expanded into values and subscriptions",
      "route": "/tagintel",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:30.469Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "e29f1fdf487079daa894241f0b21c73c0e055174e8b5717f6e14aec2a56d95df"
    },
    {
      "file": "estate-tag-required-coverage.png",
      "title": "Required-tag compliance and the missing-one-tag fix queue",
      "route": "/tagintel/coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:35.795Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "3982d16154a7a08101758b4f07d79062d6026d2873d36b2a9d7d5019fdaf9cc2"
    },
    {
      "file": "estate-workload-overview.png",
      "title": "Workload composition, health and prioritized review",
      "route": "/workloads/synthetic-estate-commerce-prod",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:58.881Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "7d9984d5ec3180c81eb7bc869a9b19bdfc0401bcb2a779f787796c7e9300c4df"
    },
    {
      "file": "estate-workload-resources.png",
      "title": "Resource-level workload members and category filters",
      "route": "/workloads/synthetic-estate-commerce-prod",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:44:00.545Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "d0e9163abd6592b3a56d43365baf900b0ff276f19270f066de7f4347733956b8"
    },
    {
      "file": "estate-workloads-fleet.png",
      "title": "Workload fleet grouped into a service family",
      "route": "/workloads",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:43:56.318Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: entirely synthetic browser fixtures on the isolated documentation instance. No cloud collection or application mutation; displayed results are illustrative, not backend validation.",
      "sha256": "613f5b4db7375682b183e2ac8e09870f36383d6e6fd02ebe7287c3d34e9d33c5"
    },
    {
      "file": "fconn-catalog.png",
      "title": "Connector catalog — native types, saved demo rows omitted",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:05.056Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery.",
      "sha256": "61cb8c5afb9aa0ff8985911378da3d58e29e7fb09335678cf54b600121a8b34d"
    },
    {
      "file": "fconn-crowdstrike-hec.png",
      "title": "CrowdStrike Next-Gen SIEM / hec — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:46.194Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The fictional .invalid hostname is deliberately not an accepted CrowdStrike/Humio host. Empty HEC API key; no host validation, repository/parser selection or ingestion is demonstrated. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "301f07df2fc02b7a0ff49cdfc3ff7c561507a36de351659841be840953e50fc0"
    },
    {
      "file": "fconn-disabled-review.png",
      "title": "Connector lifecycle — disabled UNSAVED review before Add",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:56:14.239Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The final Add connector button is shown but never clicked. No saved-row status, credential-rotation result, successful Test, or deletion outcome is fabricated.",
      "sha256": "947d9c469cff576e8c04a0856b980c9212678631e84fbf1dbb6d5e46658f1c5d"
    },
    {
      "file": "fconn-email-smtp.png",
      "title": "Email / smtp — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:20.822Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. Host, port, sender and optional username/password are the actual fields. There is no recipient or TLS toggle in this form; port 587 does not demonstrate a negotiated TLS connection. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "0d4f9f1bcd2a3cc89a4e00c9e30cc4241d7634dbe83404a749e6e8e7e1df911b"
    },
    {
      "file": "fconn-find-queue.png",
      "title": "Find a queue connector — native catalog search",
      "route": "/automations/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:07.637Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. Search filters the native type picker. No type has been selected or connector saved.",
      "sha256": "92643749f15ac580a43422bd7efb325d892f1128a4c6f786f80ccc2e609c9c09"
    },
    {
      "file": "fconn-grafana-token.png",
      "title": "Grafana / token — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:36.105Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The actual configuration is URL, token and datasource UID. There is no dashboard selector or PromQL editor in this connector wizard; no health query, datasource request or annotation is created. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "43a9769ff0d40946aac86a00057c69e9bf022a4635058e87e1bf6d3f95331a6f"
    },
    {
      "file": "fconn-jira-token.png",
      "title": "Jira / token — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:28.471Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. Fictional site/account and project defaults; empty API token. No custom-field editor is implemented here and no issue, search or authenticated-user probe is performed. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "bd4dc9eee7299deb6ede6056e29bab5bac505e01bc41cf3fae952832a8c657d0"
    },
    {
      "file": "fconn-logicapp-http.png",
      "title": "Azure Logic Apps / http — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:56:09.046Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The SAS-signed trigger URL is entirely blank. Custom headers use Key: Value lines and static additions use key=value lines, with no authorization header. No workflow or downstream action is run. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "f016c804c33fdf272a7d40ba15b7b0dd18a188975dfbd189c280c0af4dc77961"
    },
    {
      "file": "fconn-outlook-graph.png",
      "title": "Microsoft Outlook / graph — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:18.262Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The native Azure connection list must be empty. The selector is deliberately unselected; no Azure identity, OAuth flow, token acquisition, consent, or mailbox/channel access is demonstrated. Graph mode has a From mailbox field, no managed-identity-type selector and no recipient field. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "5036e3a1eed73f5608057f4dbdf9b8a528018875f7955f553bbb2a6025418dbe"
    },
    {
      "file": "fconn-outlook-office365.png",
      "title": "Microsoft Outlook / office365 — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:15.585Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The native Azure connection list must be empty. The selector is deliberately unselected; no Azure identity, OAuth flow, token acquisition, consent, or mailbox/channel access is demonstrated. The existing Managed identity type control is shown, not proof that such an identity exists. This mode exposes send/reply/read tools; the form has no recipient field. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "6972ef3c3f85a60112fac85289444f1b0af6c20f26bb2ec89bd10b4787532574"
    },
    {
      "file": "fconn-pagerduty-events-v2.png",
      "title": "PagerDuty / events_v2 — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:33.528Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The routing key is blank. No escalation-policy or schedule controls are invented; Send test could page responders in real use and is never clicked. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "f6d05f8230ecaa08b32651b2b617937df6a9cbaad1b00401a9599dec13eadc4c"
    },
    {
      "file": "fconn-s3-keys.png",
      "title": "Amazon S3 / keys — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:58.870Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. AWS account/role/destination values are fictional. Empty base credentials in Role mode can use the host credential chain in real operation; no STS or provider operation is invoked here. Bucket and key prefix are actual configuration fields; no object, bucket-policy editor or encryption selector is invented. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "0d42e193d7b82d2f76115e05b09a7b1b6cec7f0ea8170c911af0ff9c7c306b9b"
    },
    {
      "file": "fconn-s3-role.png",
      "title": "Amazon S3 / role — UNSAVED review",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:56:01.392Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. AWS account/role/destination values are fictional. Empty base credentials in Role mode can use the host credential chain in real operation; no STS or provider operation is invoked here. Native UNSAVED review shows all seven fields, including bucket/prefix, without claiming PutObject authorization or writing an object. This is the native review step, not a save result; empty secrets are shown as em dashes.",
      "sha256": "c25eae9bd44315649ed6dc6fc98463d570a78bd325d15d046273eb8b714cc5f4"
    },
    {
      "file": "fconn-securityhub-keys.png",
      "title": "AWS Security Hub / keys — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:48.712Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. AWS account/role/destination values are fictional. Empty base credentials in Role mode can use the host credential chain in real operation; no STS or provider operation is invoked here. Access key ID, secret access key and optional session token are all empty. This is not an imported ASFF finding. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "79f03844bda19d91b318c32303c30d21324eb269fea58396c68024a71ae74c1d"
    },
    {
      "file": "fconn-securityhub-role.png",
      "title": "AWS Security Hub / role — UNSAVED review",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:51.255Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. AWS account/role/destination values are fictional. Empty base credentials in Role mode can use the host credential chain in real operation; no STS or provider operation is invoked here. Native UNSAVED review exposes region, role ARN, external ID, both blank base credentials and account ID. It does not demonstrate Security Hub enablement or permissions. This is the native review step, not a save result; empty secrets are shown as em dashes.",
      "sha256": "aff7da74c9b7c5eff868f2559d7ffd9bab90002dd22ba25610f78e3df1c7a57e"
    },
    {
      "file": "fconn-servicebus-connection-string.png",
      "title": "Azure Service Bus Queue / connection_string — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:56:03.974Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The entire connection string is a secret and remains empty. Only a fictional default queue is entered; this mode has no separate namespace/SAS-key inputs. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "487dc37577d7adc3f201298ce23bc2c88186064a52a53a37bc0c2c9d1a027534"
    },
    {
      "file": "fconn-servicebus-sas.png",
      "title": "Azure Service Bus Queue / sas — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:56:06.486Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The namespace is deliberately non-resolving and not a valid Azure namespace. The policy name is fictional, its Send rights are not verified, and the SAS key is empty. No message is sent. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "13e5fa0f9aac9cdb6e25bb6d39beb28e99e578c0ab061412a8291ed09319348d"
    },
    {
      "file": "fconn-servicenow-basic.png",
      "title": "ServiceNow / basic — UNSAVED review",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:31.005Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. Native UNSAVED review includes all seven generated fields, including caller, assignment group, urgency and impact. The missing password is shown as an em dash, not a stored secret; no Incident Table query or write occurs. This is the native review step, not a save result; empty secrets are shown as em dashes.",
      "sha256": "ac1e9dc05093bdb3172e0186f566267a8e51658b24efcbde8d0cad2de9cc90b6"
    },
    {
      "file": "fconn-slack-token.png",
      "title": "Slack / token — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:25.960Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The Bot/User OAuth token is empty. The native token field is not an OAuth sign-in control; no app installation, auth.test call or Slack message occurs. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "8c88d2d388fd904a3337221e08f20ac610c0dcd2ee936cb2c0ff3cf38a9b9d78"
    },
    {
      "file": "fconn-slack-webhook.png",
      "title": "Slack / webhook — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:23.384Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The incoming webhook URL is an empty secret. Webhook mode has no default-channel field; its destination is determined by the webhook outside this application. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "16d23777bd0b89adc7e8fd0abac3451245b713a4c411cfcbb26498cc89c011c9"
    },
    {
      "file": "fconn-splunk-hec.png",
      "title": "Splunk / hec — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:38.638Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. Native HEC endpoint, empty token, index and sourcetype fields. No collector request or event ingestion is performed. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "cc43ea3df66cb258d437d5e6fac3ccd6da7b0d17058ea613112dd2bfdbbeaeff"
    },
    {
      "file": "fconn-sqs-keys.png",
      "title": "Amazon SQS / keys — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:53.790Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. AWS account/role/destination values are fictional. Empty base credentials in Role mode can use the host credential chain in real operation; no STS or provider operation is invoked here. The .invalid queue URL is illustrative, not a valid AWS destination. FIFO message-group/deduplication IDs are call-time arguments, not connector-form controls. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "7a9d5b83832f923367c225ee46167b49a217ce870aaae29456519976e12af426"
    },
    {
      "file": "fconn-sqs-role.png",
      "title": "Amazon SQS / role — UNSAVED review",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:56.338Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. AWS account/role/destination values are fictional. Empty base credentials in Role mode can use the host credential chain in real operation; no STS or provider operation is invoked here. Native UNSAVED review includes the role fields and fictional FIFO queue URL. No queue discovery, message or deduplication verification occurs. This is the native review step, not a save result; empty secrets are shown as em dashes.",
      "sha256": "81420aeefdb9e5f99fb67284d354d30ef7a2c0b4cf005dba3c9b8541fd5c0b5e"
    },
    {
      "file": "fconn-sumologic-http-source.png",
      "title": "Sumo Logic / http_source — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:43.674Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The HTTP source URL embeds authority and is left blank. Source category is the only optional metadata field in this form; no source-host/source-name controls are invented. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "01aa7c188aa45be8a7ba4ef9d8bc2efc1b966005472a14833fccd9b8bb7d4ac1"
    },
    {
      "file": "fconn-teams-graph.png",
      "title": "Microsoft Teams / graph — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:12.932Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The native Azure connection list must be empty. The selector is deliberately unselected; no Azure identity, OAuth flow, token acquisition, consent, or mailbox/channel access is demonstrated. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "3c5567f264c1a3da94b91e8a739d87c6c9250a0daa881e80b88d6b9cdd36fb2c"
    },
    {
      "file": "fconn-teams-webhook.png",
      "title": "Microsoft Teams / webhook — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:10.177Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The incoming webhook URL is a secret and is intentionally blank. This mode has no Team ID or Channel ID fields; no message was posted. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "bbbf9507ed6676e13ec3b1fbd953072bbbff4d6c631b249c37402680bbdeb076"
    },
    {
      "file": "fconn-webhook-http.png",
      "title": "Webhook / http — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:56:11.625Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. Custom headers contain only fictional routing metadata. The HMAC secret is blank, so a signature-header name alone does not enable or verify signing. No receiver request is sent. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "7bf3ca22c624446101b7affb6e9422c01a55721fb6a61a0df7e4d2dc00912b87"
    },
    {
      "file": "fconn-xsoar-api-key.png",
      "title": "Cortex XSOAR / api_key — UNSAVED configuration fields",
      "route": "/admin/connectors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:55:41.138Z",
      "width": 1600,
      "height": 1050,
      "note": "Catalog-only browser projection of the isolated documentation instance: native provider metadata is unchanged; saved rows matching the built-in disabled demo seed are omitted from this response only. Stored connectors are not removed or edited. These screens show catalog selection or UNSAVED configuration, not stored integrations, provider credentials, or verified connectivity. Catalog availability is not proof of configuration or delivery. UNSAVED documentation example — NOT VERIFIED. Fictional non-secret values only; all credential fields are empty and Enabled is off. No connector was created, saved, authenticated, tested, or contacted. No destination delivery or permissions are demonstrated. Publish with this caption, not as evidence of a working integration. The API key is empty; the optional XSOAR 8+ key ID is a fictional non-secret identifier. No authenticated-user probe, incident or entry is created. The native setup pane is scrolled to the provider-specific fields; its preceding instructions and draft name may be above the viewport.",
      "sha256": "c010be1907c0c0d6c7a37637a4155ed3288538fa643d5ad9ee63909344375e06"
    },
    {
      "file": "fdesign-autopilot-candidate-evidence.png",
      "title": "Review a survey candidate and its membership evidence",
      "route": "/workloads",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:51.500Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual confidence badges, member counts, tags, type chips and expandable reasoning. Follow-on mission and diagram options are unchecked.",
      "sha256": "2e9ca4de5e9dae947b875c4a7deae3513c83b12d4464d9bc276542ce3b39eae6"
    },
    {
      "file": "fdesign-autopilot-review-needed.png",
      "title": "Leave uncertain membership unselected for human review",
      "route": "/workloads",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:53.299Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Review-needed is synthetic candidate evidence, not an invented UI state. Native selection excludes shared services. Save is deliberately NOT clicked; no workload or follow-on job is created.",
      "sha256": "22a0f38505c7f9175f571d9a6f12f8f7a4f79368b5de86b5536f0422396fdb49"
    },
    {
      "file": "fdesign-autopilot-survey.png",
      "title": "Survey and sculpt a synthetic estate before grouping",
      "route": "/workloads",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:49.662Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Five supplied resources, facets and a zero-AI-call estimate. The survey response is modeled; no Resource Graph enumeration occurred.",
      "sha256": "7573b189cae13ca5595d72a00742a8454165891736cff1ae5eccfb7845e69e01"
    },
    {
      "file": "fdesign-capability-inferred-matrix.png",
      "title": "Interpret capability availability, denial and unknowns",
      "route": "/capability",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:55.325Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual inferred matrix, inline reasons and remediation. Missing cells use the native Blind/Unknown fallback. Full is a modeled capability, not tested reachability; Verify live is never selected.",
      "sha256": "3ac358a0b064e112d0bc262c6828979b59aac9a98d62b2a96aaff141aaa917aa"
    },
    {
      "file": "fdesign-dns-modeled-chain-unknown.png",
      "title": "Compare modeled DNS chains without hiding missing evidence",
      "route": "/architectures/synthetic-fdesign-architecture",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:59.959Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Synthetic source_done/evidence/done SSE drives real CNAME/resolution columns. One private answer and one NXDOMAIN are examples only; zone existence and linkage are unknown, not a verified misconfiguration.",
      "sha256": "faba4ca51215cc14d09aff02b936a33b9080408eb9e54375789bbd1f55feb3fe"
    },
    {
      "file": "fdesign-dns-source-selection.png",
      "title": "Select a DNS target and two diagnostic sources",
      "route": "/architectures/synthetic-fdesign-architecture",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:58.121Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual architecture-node diagnostic modal. Reserved .invalid target; linked and unlinked VM choices are synthetic and contain no credentials.",
      "sha256": "6c9da4f25e20d486043080153fc79c1b38a31c3b1637148d7ee1677683d14e61"
    },
    {
      "file": "fdesign-fmea-factors-controls.png",
      "title": "Review FMEA factor scores and control rationale",
      "route": "/fmea/synthetic-fdesign-fmea",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:37.609Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Severity 9 × occurrence 3 × detection 5 = RPN 135, recomputed by the fixture after the real autosave. Rationale is in native Controls cells, not an invented factor dialog.",
      "sha256": "62561c4c5378547e0d168b921a9447f7e72202091e0d4138ff40f53809797a12"
    },
    {
      "file": "fdesign-fmea-saved-actions.png",
      "title": "Saved FMEA ownership and post-action scoring",
      "route": "/fmea/synthetic-fdesign-fmea",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:40.750Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Right side of the same worksheet shows owner, dates and modeled post-action RPN 36. Saved is browser-local; export controls are visible but no export or revision UI is invented.",
      "sha256": "18db9d82b3bfc7171b7c31c9991415400ad0f14fc4be59b31144538ee70d9ca0"
    },
    {
      "file": "fdesign-fmea-worksheet.png",
      "title": "FMEA worksheet with varied and unscored failure modes",
      "route": "/fmea/synthetic-fdesign-fmea",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:34.496Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Real editable worksheet: critical DNS risk, medium capacity risk and explicitly unscored recovery uncertainty. The table scrolls horizontally.",
      "sha256": "e38407828f69e2f1f6cb2d671dcf8aa2f87484666c365dbc13fd640d47564928"
    },
    {
      "file": "fdesign-insights-digest-evidence.png",
      "title": "Read a completed synthetic insight and evidence navigation",
      "route": "/insights",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:45.312Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Modeled completed digest, materiality gate, change row and native Change Explorer/Radar links. No live AI result or notification is claimed; links are not followed.",
      "sha256": "a943e07e2d97ab3723ed80f746f1d831adbad2832b5a7dfe3331fe1c2bac5639"
    },
    {
      "file": "fdesign-insights-library.png",
      "title": "Browse synthetic AI Insight Packs",
      "route": "/insights",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:42.812Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Three custom pack definitions; all disabled. The actual library filters, categories and run/schedule entry points are shown.",
      "sha256": "73304becbf5bc05f0ce2bf8ac1deceaa10706aa5c8fdd51879733c75a4a7645e"
    },
    {
      "file": "fdesign-insights-pack-definition.png",
      "title": "Inspect a pack definition and its deterministic preview",
      "route": "/insights",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:44.017Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Existing synthetic definition in the actual editor. No AI suggestion, refinement, generation, sample run or Save is invoked.",
      "sha256": "c84632d3728dc761a57d168b8865576e4f233a01a5648716e93bd668c19ea746"
    },
    {
      "file": "fdesign-insights-paused-schedules.png",
      "title": "Review paused Insight Pack schedules",
      "route": "/insights",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:46.523Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Three disabled watchers with no next run; Run now and Resume remain untouched. No scheduler or notification is activated.",
      "sha256": "013261d21a6e67d6738709ff6ea0374a20789f613ad7b7a7c7a67d2c940ac734"
    },
    {
      "file": "fdesign-knowme-completed-field.png",
      "title": "Saved field shown in the support reference",
      "route": "/knowme/synthetic-fdesign-knowme",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:24.493Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. The Save request updates only this browser fixture. Draft remains unpublished; a filled field is still editable.",
      "sha256": "4dbe74245d48548c3adebdc4de62637a5a5206f0fe8093af5b79b38af5d01568"
    },
    {
      "file": "fdesign-knowme-fill.png",
      "title": "Complete a required Know-Me field with a review note",
      "route": "/knowme/synthetic-fdesign-knowme?mode=fill",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:23.264Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual Guided fill with rule choices and a human assignee; Suggest options is never invoked.",
      "sha256": "8141bae61c26a4a55f9a7b3eedfbc5bacbdd875076cca1abd0399eacddea7f28"
    },
    {
      "file": "fdesign-knowme-how-built.png",
      "title": "Inspect Know-Me provenance and evidence limits",
      "route": "/knowme/synthetic-fdesign-knowme",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:21.893Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. AI pass/confidence/evidence counts are deliberately modeled provenance, not evidence of an LLM call.",
      "sha256": "5b77ae7197dbef7e89fab18a4a85a10b9336f9ca1e894a15280d857cc3a76825"
    },
    {
      "file": "fdesign-knowme-index.png",
      "title": "Know-Me documents grouped by source workload",
      "route": "/knowme",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:19.155Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. One existing draft with an outstanding human-completion field; generation and Trash are not exercised.",
      "sha256": "145dc5c15aa18bb0abf01a226c984cfd7a1991e20e66c8b9cc2a25c6deae00f7"
    },
    {
      "file": "fdesign-knowme-read.png",
      "title": "Read a support reference with completion fields",
      "route": "/knowme/synthetic-fdesign-knowme",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:20.708Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual Markdown table, field chips and completion rail; missing source evidence remains explicit.",
      "sha256": "4de556fc671f50317e14c2e8612565990657d86bebd7d0f624964bbc28995a91"
    },
    {
      "file": "fdesign-knowme-section-editor.png",
      "title": "Edit a Know-Me section using the real Markdown editor",
      "route": "/knowme/synthetic-fdesign-knowme?mode=edit",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:25.785Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Unsaved section draft in the native Visual/Markdown/Preview editor; no HTML or editor contents fabricated outside UI controls.",
      "sha256": "acbf1d5349b5e3c1a6de2b8277b8e142b539c23617c13a62fbc5d41498b270f2"
    },
    {
      "file": "fdesign-knowme-source-links.png",
      "title": "Trace a Know-Me back to its Architecture Memory",
      "route": "/knowme/synthetic-fdesign-knowme",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:27.043Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual Source menu distinguishes the support reference from the editable source Memory and architecture diagram.",
      "sha256": "ed9f08b44ca99c1294b9a1ddb3516f0b107bcd43aef91cb75e35e7405cd61b47"
    },
    {
      "file": "fdesign-memory-editor-preview.png",
      "title": "Architecture Memory sections and live preview",
      "route": "/architectures/synthetic-fdesign-architecture/memory",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:31.119Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual 800 ms autosave updates the in-memory fixture only. Review flags and Use in investigations are shown without launching an investigation.",
      "sha256": "cfc2e9356fcc81775df1256150068975e4874cb1470ddf653b484986317dd3fd"
    },
    {
      "file": "fdesign-memory-revision-diff.png",
      "title": "Compare an earlier Memory revision with the current design",
      "route": "/architectures/synthetic-fdesign-architecture/memory",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:13:32.432Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Synthetic revision record in the real read-only preview and section diff. Restore is not clicked.",
      "sha256": "c6585f33e8dfee25aa914b3b7a833ab8f436a70d9c8589f61846cf35fbfa00fc"
    },
    {
      "file": "fdesign-network-modeled-blocked.png",
      "title": "Read a modeled blocked path and skipped downstream steps",
      "route": "/architectures/synthetic-fdesign-architecture",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:14:04.578Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual step/evidence/done rendering: TCP failure, skipped TLS/HTTP, intent mismatch and unknown control-plane evidence. This is NOT actual probe execution or a confirmed NSG diagnosis.",
      "sha256": "46d9bbf572f3b207471dcdbdc7b1ce75f54ed9abf39b04f4820620377cf1053e"
    },
    {
      "file": "fdesign-network-probe-inputs.png",
      "title": "Set the source, HTTPS port and bounded health path",
      "route": "/architectures/synthetic-fdesign-architecture",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:14:02.771Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Real connectivity form with a fictional VM and reserved target. Run probe is intercepted; no host, DNS, SSH, TLS or HTTP connection is attempted.",
      "sha256": "8d862211aa1b7106a08e6f1a7886356182f46a2de53561cab157e935fbc15a3c"
    },
    {
      "file": "fdesign-sandbox-modeled-diagnostic.png",
      "title": "Inspect bounded sandbox output and its modeled history",
      "route": "/admin/sandboxvms",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T15:14:06.793Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: fully synthetic browser-scoped fixtures rendered by the current application UI. No real connections, Azure collection, DNS resolution, SSH command, AI/LLM inference or notification occurred. Saved states and history exist only in this test browser; results are modeled examples, not actual probe execution. Actual VmRunConsole with strict mode, no sudo and no configured credential. A browser-only reply models ip route show; succeeded/exit 0 describe the fixture, not an SSH execution. No Test, sudo, installation or approval bypass occurs.",
      "sha256": "9f54ca0de6e8768bfd2f26eaf3bf4c980f16002197c228fe4f72aca899081f1c"
    },
    {
      "file": "fid2-entra-access-review-quality.png",
      "title": "Access reviews: overdue decisions and campaign-quality warnings",
      "route": "/entra/governance/reviews",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:20.892Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "d7a811dbc6c64de7fcfcb740a443bddaed43f886f6848fceafdf8cfb6fc6d2b4"
    },
    {
      "file": "fid2-entra-application-permission-evidence.png",
      "title": "Application 360: granted access is distinct from manifest requests",
      "route": "/entra/applications/inventory",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:10.180Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "9c1711853885c7af449f03d7ccdf1af8869352b2294a17aa9026d2c9ffe5445e"
    },
    {
      "file": "fid2-entra-applications-inventory.png",
      "title": "Application inventory: risk, owners and incomplete sign-in evidence",
      "route": "/entra/applications/inventory",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:08.996Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "f31bba7a7d4ab248071e631eb23d3af32e62e201cd2e3817c5c066ff7ba23ba0"
    },
    {
      "file": "fid2-entra-consent-grants.png",
      "title": "Consent posture: administrator workflow and tenant-wide delegated grants",
      "route": "/entra/applications/consent",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:11.392Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "196e21eea985460af98514fd8350e0cd394efb31336c3ca8324f7aab1a0b159b"
    },
    {
      "file": "fid2-entra-entitlement-packages.png",
      "title": "Entitlement: package hygiene and assignments nearing expiration",
      "route": "/entra/governance/entitlement",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:22.059Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "07b270c429b2ac64a457586efe4113baf30e6bc889c992579cef5d4ed8ff2bdc"
    },
    {
      "file": "fid2-entra-governance-coverage.png",
      "title": "Governance coverage: inventory classes and unreviewed objects",
      "route": "/entra/governance/coverage",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:19.726Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "c4963cda9129db9a587e99b6d67617f4dfd9309e1fbace927c320317eb2cba6d"
    },
    {
      "file": "fid2-entra-lifecycle-workflows.png",
      "title": "Lifecycle: joiner and mover runs with a disabled leaver workflow",
      "route": "/entra/governance/lifecycle",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:23.224Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "6a8a0fa20a2b0f2a313e205bee8a7ec4112b0cbef772c3f3c71ba30a18896f73"
    },
    {
      "file": "fid2-entra-posture-recovery-trend.png",
      "title": "Entra posture: recoverable points and collection history",
      "route": "/entra",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:06.763Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "2d13e5aa0ad22947dcf3a5098ca4186fa965bd8d1cb7abb66426e3f11f8e5f5d"
    },
    {
      "file": "fid2-entra-posture-score.png",
      "title": "Entra posture: measured score and a blind authentication pillar",
      "route": "/entra",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:04.998Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "0c02962819bb6071985fb40bdb8cdb086f74dc24ab6b6c584e244ad484051a9c"
    },
    {
      "file": "fid2-entra-registrations-expiry.png",
      "title": "Application registrations: expiry, enterprise-app state and unmeasured activity",
      "route": "/entra/applications/registrations",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:13.412Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "a873f03d5cdb27708ed24feddb8f1c63af5ff13887d2dd31d5cdf4e69eddf3fe"
    },
    {
      "file": "fid2-entra-risky-identities.png",
      "title": "Identity Protection: high-risk users, unknown remediation and license boundaries",
      "route": "/entra/signals/risky",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:17.747Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "98ccacc20291b592cfafa1f7b63046b1247d49b832d4386f5f4a511bfff2572c"
    },
    {
      "file": "fid2-entra-setup-permission-tiers.png",
      "title": "First collection: consent tiers, licenses and collector coverage",
      "route": "/entra/setup",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:25.246Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused. No consent or refresh control is invoked. Successful, partial and unreadable domains remain distinct.",
      "sha256": "33b4d3f43030688774ed63eb568c9fd8de6834b42426dff526a7092f7aa413e5"
    },
    {
      "file": "fid2-entra-signin-failures.png",
      "title": "Sign-in failures: error-code causes and affected applications",
      "route": "/entra/signals/failures",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:16.580Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "789ff813e4bda4b66c18b962bcaff93d4457dc90beea5f64a262b82bbcd6c872"
    },
    {
      "file": "fid2-entra-signin-health.png",
      "title": "Sign-in health: sampled counts, failure rate and Conditional Access outcomes",
      "route": "/entra/signals/overview",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:15.377Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "96479eddee60ca569ea55c35665891c00af8a706e45aa6b0e7bcf2ea400f2349"
    },
    {
      "file": "fid2-iam-collector-diagnostics.png",
      "title": "IAM diagnostics: successful, unauthorized and throttled collection",
      "route": "/iam/diagnostics",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:47.491Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "c738ad21e411c254183ed7e676f2e5308b685724457088e4366bd19ede9b87b5"
    },
    {
      "file": "fid2-iam-compare-attribution.png",
      "title": "Access changes: added, escalated and removed with honest actor confidence",
      "route": "/iam/compare",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:35.127Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused. Saved attribution only; Find out who is not invoked.",
      "sha256": "f24f04b0cca2af15e600171c4bd4672fc95b2689f2ccdef2c0e1c6dfbfb059eb"
    },
    {
      "file": "fid2-iam-escalation-review.png",
      "title": "Escalation review: workload identity to full control, with scope and confidence",
      "route": "/iam/escalation",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:51.797Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "ff45b85efafe30c8ae3a88a2faf1c1669bf754dd01e5e74a4e798096c23a27cf"
    },
    {
      "file": "fid2-iam-evaluate-deny.png",
      "title": "Effective access: a deny assignment takes precedence over Owner",
      "route": "/iam/evaluate?principal_id=00000000-0000-4000-8000-000000002101&scope=%2Fsubscriptions%2F00000000-0000-4000-8000-000000002401%2FresourceGroups%2Frg-docs-example&action=Microsoft.Compute%2FvirtualMachines%2Fdelete",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:30.877Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "c93f58023785b5326226b8ac806990b5515ebd9206629908315a175849aa8d30"
    },
    {
      "file": "fid2-iam-evaluate-who.png",
      "title": "Effective access: allowed and condition-dependent candidates are not merged",
      "route": "/iam/evaluate?mode=who&scope=%2Fsubscriptions%2F00000000-0000-4000-8000-000000002401&action=Microsoft.Compute%2FvirtualMachines%2Fdelete",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:32.895Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "70bbd04018880e27b34580cb818f965d8e00e9671251e79944ccee1eb626c33d"
    },
    {
      "file": "fid2-iam-inbox-finding-evidence.png",
      "title": "Scanner inbox: affected identity, remediation, evidence and triage actions",
      "route": "/iam/findings",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:41.863Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused. Finding state remains unchanged.",
      "sha256": "44fc0b861e9e79d249cda108e54e20aaaeb774bce5a4efc34e7892a360c9916f"
    },
    {
      "file": "fid2-iam-review-completeness.png",
      "title": "Review campaigns: completed is not complete, self-attestation is not certification",
      "route": "/iam/reviews",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:44.076Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "af84d151cacac2735744b5b609ee2c63a59d6e05466ece28cb0cf6364fa5b9a8"
    },
    {
      "file": "fid2-iam-review-context.png",
      "title": "Review detail: changed access, escalation context and unmeasured usage",
      "route": "/iam/reviews",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:45.294Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused. No decision, evidence export or remediation script is generated.",
      "sha256": "0fd903d3ed17ac3311531b0c831ce465645f26ff4d8b1af319621c257e16f162"
    },
    {
      "file": "fid2-iam-roles-principals.png",
      "title": "Roles reference: built-in and custom roles beside synthetic principals",
      "route": "/iam/roles",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:49.526Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "e76b481dd9cd735b3d563a7f1a4422220482315181e05da56e9b4536eb6056ac"
    },
    {
      "file": "fid2-iam-scanner-measurement.png",
      "title": "Scanners: saved deltas, blocked baselines and named unmeasured checks",
      "route": "/iam/scanners",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:39.843Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused. Run controls are not invoked.",
      "sha256": "51000840a8ed0e7b141cddafe2618b11c48c584ec758878f4d8e285b5df85530"
    },
    {
      "file": "fid2-iam-shadow-key-reach.png",
      "title": "Shadow access: assessed denominator, credential reach and migration breakage",
      "route": "/iam/bypass",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:27.460Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "499886b1fdbf2e4949169c42d858e73f2c838c62493ef8ecb36497d3db0f688e"
    },
    {
      "file": "fid2-iam-shadow-unknown-reach.png",
      "title": "Shadow access: an existing admin credential with unknown holders",
      "route": "/iam/bypass",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:28.628Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "a1a1b68fdde4836e6d7fb4f0997a14260fb14dd479d92c716b453d3509f0916f"
    },
    {
      "file": "fid2-iam-simulator-impact.png",
      "title": "What-if impact: real losses, retained paths, new grants and ownerless scopes",
      "route": "/iam/simulator",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:37.616Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic documentation fixture only; no real identities, collection, provider calls or backend computation. Unknown/unmeasured is not zero or unused.",
      "sha256": "5620764c3ebc10cda45772ec741d6485594c11b113e0a39a06ac397152a9cab4"
    },
    {
      "file": "flife-about-version-environment.png",
      "title": "About — identify the current application version and environment",
      "route": "/admin/usage",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:42.998Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Native current build/version metadata only. This does not prove a deployment, upgrade, uninstall or production health check was completed.",
      "sha256": "fdaa99c1339852e008247f24498231039930226681f33510a3ae78452375becb"
    },
    {
      "file": "flife-approval-proposal-expanded.png",
      "title": "Approvals — inspect the pending proposal before human sign-off",
      "route": "/admin/ambachanges",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:29.826Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Reference-change approval UI, not a generic Azure execution approval. The Terraform excerpt is synthetic; no approve/reject/mark-applied or deployment occurs.",
      "sha256": "34ac3764cb6b4c2a054a51101054d2c3b145a4f1b02dabee293085ace611b936"
    },
    {
      "file": "flife-audit-event-history.png",
      "title": "Audit Log — action, target, time and provider history",
      "route": "/admin/audit",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:15.529Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Native Audit Log is a flat table, not an expandable metadata viewer. Nine synthetic rows are fully displayed; no CSV/JSON export or SIEM action is performed.",
      "sha256": "72693cee742f3565fac0f06dc32d1a8512d101ea08cb3511c513efe51fd48968"
    },
    {
      "file": "flife-durable-partial-batch.png",
      "title": "Durable Work Batches — partial completion is not full coverage",
      "route": "/telemetry",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:09.327Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Static saved-batch example with previous scan values. No worker, retries, cancellation, persistence or restart recovery was exercised.",
      "sha256": "80acc3486f0d6b574afb5edd36e67bf4aeb56ab80b7e42b8c50a1cb46e40c210"
    },
    {
      "file": "flife-durable-queued-batch.png",
      "title": "Durable Work Batches — server-owned queue and cached workload context",
      "route": "/telemetry",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:11.376Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Read-only queued-state fixture, not a launched job. Cancel pending is shown but never clicked; background polling is fulfilled in-browser.",
      "sha256": "f5e5a47bff7a38ac0a65a416f1e5b18dfa7e173902532cf6d88d00d6db868bea"
    },
    {
      "file": "flife-error-help-mcp-unavailable.png",
      "title": "Error help — catalog unavailable without confusing it with an empty success",
      "route": "/admin/entratools",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:36.535Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Deliberate browser-only 503 exercises native recoverable error guidance, not an application crash, authentication failure or actual provider outage.",
      "sha256": "1409cec0a63d39e1e8e88c1246e123d81920edd6d78f6a0c2e3eab5505cc207a"
    },
    {
      "file": "flife-mcp-azure-catalog.png",
      "title": "Azure MCP Tools — progressive routing and disabled write entry",
      "route": "/admin/tools",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:17.564Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Catalog names and routing counts are synthetic examples, not installed or discovered tools. No switch or bundle-toggle mutation is used.",
      "sha256": "edb4c88a2516b6685749fa65ebb9a6605ca34443d17232b9371d0e6df7e608c4"
    },
    {
      "file": "flife-mcp-entra-catalog.png",
      "title": "EntraID MCP Tools — disabled exposure and permission-withheld example",
      "route": "/admin/entratools",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:19.583Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Visible catalog is not a grant of Graph permissions or evidence that a directory is connected.",
      "sha256": "fcbbc6431454a7399bf7cd07de4221b5838cfa150fb19ddc8aaaf017031bf8d6"
    },
    {
      "file": "flife-mcp-entra-permission-reference.png",
      "title": "Entra setup — application permissions and consent guidance",
      "route": "/admin/entratools",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:21.626Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Shipped permission-reference text only. No tenant, app registration, permission grant or consent flow is created or verified.",
      "sha256": "e5ad6c5aec9c07e63dcd60924fbcebabec4850242b833fac6ea581f826d6ccae"
    },
    {
      "file": "flife-reference-glossary.png",
      "title": "Reference — native glossary filtered to workload concepts",
      "route": "/admin/usage",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:38.680Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Shipped reference definitions; external documentation links are not followed.",
      "sha256": "8871dad9ced3db619139f6a5549d6ead3b79c6f8b4e578d8baf2eb00f45694ff"
    },
    {
      "file": "flife-reference-keyboard-shortcuts.png",
      "title": "Reference — built-in keyboard shortcut help",
      "route": "/admin/usage",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:40.799Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Actual Help → Keyboard shortcuts modal with all three shipped key/action rows visible; no constructed DOM or replacement help content.",
      "sha256": "7fded43cb5235313ddd8f75338565464bc91572d915b6a87fa5cc4dfc1de2f9c"
    },
    {
      "file": "flife-reservations-digest.png",
      "title": "Reservations — populated weekly digest preview without delivery",
      "route": "/reservations?demo=1",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:59.417Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. The application renders its own native demo digest HTML. No injected layout or hand-authored digest; no email was sent.",
      "sha256": "b11891f37d5a82a8b2857a434180831ed515bfc20c46ad50057e2f72957423b7"
    },
    {
      "file": "flife-reservations-register.png",
      "title": "Reservations — expiry, renewal and utilization register",
      "route": "/reservations?demo=1",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:54.297Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Native built-in demo response, not a cloud refresh. Refresh and export controls are untouched.",
      "sha256": "1d4cdc3b9f4b3a32053870e75cb83f9056cd86f69b2667db01a900892d85a7ed"
    },
    {
      "file": "flife-reservations-renewal-risk.png",
      "title": "Reservations — filter non-renewing commitments before renewal review",
      "route": "/reservations?demo=1&renew=none",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:57:56.811Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Client-side filtering of built-in demo records only; no reservation was purchased, renewed or changed.",
      "sha256": "e9f1fd57086296c5a4d401f3c1381e5abd3af8eb2a46ce0ea65bc2e396ec5888"
    },
    {
      "file": "flife-sandbox-key-draft.png",
      "title": "Sandbox VM — unsaved SSH-key configuration and approval controls",
      "route": "/admin/sandboxvms",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:23.668Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. UNSAVED React form. Documentation-only IP, no key/passphrase, strict mode on, sudo off and disabled. Save/Test are not clicked.",
      "sha256": "e44f64e8345cdb797015755b72a2b90bcd584224b4e1777d5b90b5b2e02ecdc5"
    },
    {
      "file": "flife-sandbox-password-draft.png",
      "title": "Sandbox VM — password field, workload reach and safe draft settings",
      "route": "/admin/sandboxvms",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:25.698Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Credential field deliberately empty; a populated draft is not a saved or reachable VM. No credential is collected or transmitted.",
      "sha256": "e541a95b784aa053aed789977a55fd83f0bbdf6e3457034a7615038af77fb9a0"
    },
    {
      "file": "flife-sandbox-recorded-history.png",
      "title": "Sandbox VM — recorded success, bounded timeout and approval-blocked command",
      "route": "/admin/sandboxvms",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:27.809Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Only the native history disclosure was opened. All success/failure/output records are invented, not SSH or DNS evidence; no command was executed.",
      "sha256": "d97ff058d3a8a4fd6a015ee0207c74bbb96d0dfdbc91c52585f81e5b88d335ba"
    },
    {
      "file": "flife-security-session-inventory.png",
      "title": "Sessions — distinguish active sessions from expired records",
      "route": "/admin/sessions",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:32.193Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Only the administration inventory is synthetic; auth/me and the real docs-admin cookie are never replaced. Fake session IDs cannot revoke the real session. No revoke is clicked.",
      "sha256": "2dce3c2292459b7acab86d3b8f6c0ec0b730054166383b8f25a8d65aa85e8873"
    },
    {
      "file": "flife-security-trust-help.png",
      "title": "Trust & Security — shipped guidance and illustrative status checks",
      "route": "/admin/usage",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:34.460Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. The product help copy is shown verbatim, not independently certified. Synthetic checks do not verify storage encryption, egress, deployment location or tenant isolation.",
      "sha256": "b4b6e34fb7133eedfa92bb93ee0ed31e1b7d5c88707240751ab5e45fb5873966"
    },
    {
      "file": "flife-telemetry-correlation-timeline.png",
      "title": "Telemetry Intelligence — cross-signal timeline and ranked detection inbox",
      "route": "/telemetry-intel",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:07.284Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Modeled signals use independent chart scales. The deployment marker is not proof of causation or a real deployment.",
      "sha256": "a74dec4c77dd5cf0b363f66f0286c17305460945721c9f54d75e05118d7f54b2"
    },
    {
      "file": "flife-telemetry-evidence-expanded.png",
      "title": "Telemetry Intelligence — inspect illustrative KQL and operation rows",
      "route": "/telemetry-intel",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:04.632Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Expanded native evidence disclosure, not a blank panel. Query text and returned rows are authored examples, not actual provenance.",
      "sha256": "850d695fa3bbf97b818a3b8cdd985d4385da2d7b658519b29af4fff480bb938f"
    },
    {
      "file": "flife-telemetry-triage.png",
      "title": "Telemetry Intelligence — modeled failure triage and review hypothesis",
      "route": "/telemetry-intel",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:02.016Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. Synthetic hypothesis and counts; no model inferred a cause. Create finding, War Room, ticket and Ask are not clicked.",
      "sha256": "b5778a00ecaf4b098e22aae74de40e3ec31703a792a04ca718062cbecbb64e14"
    },
    {
      "file": "flife-usage-model-history.png",
      "title": "Usage — recorded token counts and explicitly estimated costs",
      "route": "/admin/usage",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:13.442Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA — real application UI with explicitly synthetic browser read models, except native built-in Reservations demo and native authentication/configuration/version. No actual provenance: histories, audit events, triage, costs, catalog availability and status examples are not evidence of executed work, real sign-ins, live Azure/Graph state, SSH connectivity, provider calls or verified security posture. No cloud collection, query, SSH, save, approval decision, export or outbound operation occurred. All three model names, 44 requests and cost values are invented; no provider was invoked or billed.",
      "sha256": "bd3f8e972bcac165738d482d6d2f67361e75ff90fd2431f69477db9b11e39400"
    },
    {
      "file": "fpa-notification-inbox.png",
      "title": "Notification center: severity, source and saved result context",
      "route": "/notifications",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:50.140Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Read-only inbox view; events are not marked read and linked jobs are not triggered.",
      "sha256": "e3c19c454cf6ba6f076301221ecd9029dbaafb61e2c96ef9f7a675138d55c774"
    },
    {
      "file": "fpa-notification-rule-editor.png",
      "title": "Notification rule editor: events, sources and delivery targets",
      "route": "/automations/notifications",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:48.126Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Unsaved routing form. Synthetic connectors contain no credentials and no delivery/test endpoint is allowed.",
      "sha256": "80235c1415eee4985b50408221a96543953f97b2c27c9b54e7dd54250f4f3cca"
    },
    {
      "file": "fpa-notification-rules.png",
      "title": "Notification routing: event types, thresholds and destinations",
      "route": "/automations/notifications",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:46.104Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "67b9db69f59d78e27e85870f6e38bedbb2e5c32d20e4076c6b62e7c639af20c8"
    },
    {
      "file": "fpa-playbook-ordered-form.png",
      "title": "Playbook editor: ordered steps, workbook references and severity gates",
      "route": "/automations/playbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:41.977Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Actual sequential form; no canvas, drag/reorder or parameter-map controls are fabricated. Unsaved.",
      "sha256": "8b243c1984c82a8a54098101928c9a0ee07ad40f343c2ab1cb85311974adaaf3"
    },
    {
      "file": "fpa-playbook-step-results.png",
      "title": "Playbook history: completed steps and a severity-gated skip",
      "route": "/automations/playbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:44.092Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Opened from saved synthetic history. Run would execute immediately in the real app and is never clicked here.",
      "sha256": "b7830d718474f87dee22069c61fa69f7da38310d2e64e173ef5e8a0092d78b71"
    },
    {
      "file": "fpa-playbooks-catalog.png",
      "title": "Playbooks: saved read-only investigation flows",
      "route": "/automations/playbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:39.856Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "bd274ae76ca35b4820ddbf1576f5674ba6d8dbbc686eb8b544e72c3d9af2155f"
    },
    {
      "file": "fpa-policy-advisors.png",
      "title": "Policy advisors: promotion readiness and remediation gaps",
      "route": "/policy/advisors",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:05.216Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "e6fc6bc653f6894c300d2fb13b4e7ad033eca0841b418bb2b2c80bf401ee2935"
    },
    {
      "file": "fpa-policy-by-person.png",
      "title": "Policy assignments grouped by person",
      "route": "/policy/byperson",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:54.780Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "31cfba71d42cfff3e8a568b0d23650bb8b7a04e34846da00ed5984448607a0fd"
    },
    {
      "file": "fpa-policy-by-subscription.png",
      "title": "Policy assignments grouped by subscription",
      "route": "/policy/bysubscription",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:57.344Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "88c594470f36034f6bd22b9473dc5e5c763c1a9e456f55adbfba751fded5eeab"
    },
    {
      "file": "fpa-policy-definitions.png",
      "title": "Policy definition catalog with effects and categories",
      "route": "/policy/inventory",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:50.161Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "e13d0e2d78f1570a655e415a11b8d120811ee947cd4890599afcd466ef50c4e5"
    },
    {
      "file": "fpa-policy-drift.png",
      "title": "Policy-as-code drift: source and reconciliation findings",
      "route": "/policy/drift",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:13.777Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. The prerequisite source PUT and analysis POST are both browser-only responses; the stored server source is untouched.",
      "sha256": "33ecf5c45fe891c2fe846215e028b3891e98f6bb6c2850d4d45aab6733644252"
    },
    {
      "file": "fpa-policy-effective.png",
      "title": "Effective policy: inherited coverage and scoped exemptions",
      "route": "/policy/effective",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:02.618Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. The resolver POST returns an explicit modeled result; no Azure resolution runs.",
      "sha256": "f4305fdc942c969b63905fd6d0d3715ed8d314e5170014edb78fe39a30d4029d"
    },
    {
      "file": "fpa-policy-explanation.png",
      "title": "Policy AI tools: input JSON and plain-English explanation",
      "route": "/policy/ai",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:11.648Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Explanation is a labeled synthetic response, not an LLM-generated answer.",
      "sha256": "6ceacfcb1bf97b2113680f1a1d96cf77704c7519d088a820503ea385b81b4091"
    },
    {
      "file": "fpa-policy-history.png",
      "title": "Policy history: assignments, exemptions and compliance over time",
      "route": "/policy/history",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:16.358Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Existing synthetic snapshots only; Take snapshot is never clicked.",
      "sha256": "e79667e4c3802d85e718f568f38293dadbf2d9b1ff6b032b2980c51b4a9bcbb6"
    },
    {
      "file": "fpa-policy-inventory.png",
      "title": "Policy inventory: assignments and enforcement modes",
      "route": "/policy/inventory",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:48.130Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "b0b25ca13eeadc18247f01a7f3617daddb6d9c2a0d48ae455a35c806c9843ea0"
    },
    {
      "file": "fpa-policy-overview.png",
      "title": "Azure Policy posture and scope hierarchy",
      "route": "/policy/overview",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:45.595Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "e2be0883dc0a30a13c4559aac14fab1ba84e2ef9b91256d38b045e3b58d14a23"
    },
    {
      "file": "fpa-policy-register.png",
      "title": "Assignment register: owners, scopes and enforcement",
      "route": "/policy/assignments",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:52.221Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "ae7c4e8941c6e2a39908ed3f4078b1f1ddc9ac94dd840fe8d54798b4e768f160"
    },
    {
      "file": "fpa-policy-rollout-form.png",
      "title": "Rollout Planner: assignment, target scope and dry-run intent",
      "route": "/policy/rollout",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:07.288Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Configured form only; Simulate is not clicked and no change is saved.",
      "sha256": "f4dabebd65a7fce27471f4c6e607d668ebf8efb12068e013d2d47270faa2114d"
    },
    {
      "file": "fpa-policy-rollout-result.png",
      "title": "Saved rollout simulation: estimated impact and review gates",
      "route": "/policy/rollout",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:09.491Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Opened from synthetic saved history; the impact source is an estimate, not measured live.",
      "sha256": "6b2dd6a827c90f0e8d2256c73d76efcc44b39a4f051fa7aa3353ae1a59a8be4c"
    },
    {
      "file": "fpa-policy-timeline.png",
      "title": "Policy timeline: date range and monthly attribution",
      "route": "/policy/timeline",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:58:59.896Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "4b31aab39ff5b45d0afd681d217a3ba5683cbc543640d61f2dbfd3883d2447c0"
    },
    {
      "file": "fpa-task-history.png",
      "title": "Scheduled task history: completed and failed runs",
      "route": "/automations/tasks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:21.562Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "5f32176e8f69fec578defc3afff7e00c3d917bbb002ba62aafa19597d0504772"
    },
    {
      "file": "fpa-task-playbook-cron.png",
      "title": "Schedule editor: weekday playbook cadence and notification targets",
      "route": "/automations/tasks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:27.462Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Unsaved cron form; no schedule is created, enabled or run.",
      "sha256": "2cd9440871663e6aec4269966e83c79c9bdc12090a904a5d4c7593eb10328375"
    },
    {
      "file": "fpa-task-workbook-form.png",
      "title": "Schedule editor: workbook parameters and next five runs",
      "route": "/automations/tasks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:24.516Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Unsaved daily form; next-run calculation is a bounded synthetic preview.",
      "sha256": "76a0c3c0ef40218818140bb766cd02a453a564da7e16893ffbf9732e395c5715"
    },
    {
      "file": "fpa-tasks-schedules.png",
      "title": "Scheduled Tasks: cadence, status, destinations and run counts",
      "route": "/automations/tasks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:18.926Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "9c9ee85a0629d705b60f81335e7b48a5940a07a16bcde4b8ca60f37e5a8023fa"
    },
    {
      "file": "fpa-workbook-editor.png",
      "title": "Workbook editor: read-only query, defaults and output processing",
      "route": "/automations/workbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:31.485Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Editor only. AI processing is a saved configuration; Save and Test run remain untouched.",
      "sha256": "789a31d279241a6fa2343dcffa80e9f331ee41730399c20799976430208b6192"
    },
    {
      "file": "fpa-workbook-history.png",
      "title": "Workbook history: severity, status and saved review outcomes",
      "route": "/automations/workbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:35.746Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "7e3beeae72420d30ab34d9903233ec028f3c4e36c823575b60f70f388b392903"
    },
    {
      "file": "fpa-workbook-run-parameters.png",
      "title": "Workbook run dialog: parameter values and recent evidence",
      "route": "/automations/workbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:33.630Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. Only the Run dialog is opened. Run workbook is never clicked.",
      "sha256": "817cd4fe5f1259dd5aa0769ef2a9fcf05910f9f771df874e8380e5886583afba"
    },
    {
      "file": "fpa-workbook-structured-result.png",
      "title": "Workbook saved result: structured fields and prior-run changes",
      "route": "/automations/workbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:37.859Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic. A saved synthetic result, not a fresh workbook execution. Raw output and Command remain available in their real disclosures.",
      "sha256": "1e07ad7a3993b0e97d32f6e297678f0214760b050f5c9191c69a5e0a8f50c1da"
    },
    {
      "file": "fpa-workbooks-catalog.png",
      "title": "Workbooks: read-only KQL, Azure CLI and PowerShell examples",
      "route": "/automations/workbooks",
      "source": "synthetic-local-capture",
      "capture_source_commit": "92f6474cf820aefbce7c0e29b9fd1e953df40196",
      "captured_at": "2026-09-05T14:59:29.490Z",
      "width": 1600,
      "height": 1050,
      "note": "TESTDATA: illustrative browser fixtures, not collected Azure data or executed jobs. No AI/provider call, delivery, deployment, backend persistence or compliance certification is implied. Forms are unsaved; timestamps, outcomes and recommendations are synthetic.",
      "sha256": "259a51e2b7f04af308dd27a4de4f11cd62dd18d41c2f9efcda381f061b18104a"
    },
    {
      "file": "identity-accessmap-eligible-privilege.png",
      "title": "Access Map: distinguish active privilege from eligible privilege",
      "route": "/iam/accessmap",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:53.465Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. This preset includes active and eligible privileged grants, separated by state; it is not eligible-only.",
      "sha256": "86bcd59fb8f01fbf2e10e90bd0b4f18167a45329983727916b5311a58db2a0b5"
    },
    {
      "file": "identity-accessmap-grant-paths.png",
      "title": "Access Map: principal, group, role and subscription paths",
      "route": "/iam/accessmap",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:47.211Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. 61 standing grants; four eligible grants excluded and one deny reported separately. Long tails stay counted.",
      "sha256": "d47e8ba54705bc5f72942ee09f8a2a791e382246080e293d5be2bc77f5c584d7"
    },
    {
      "file": "identity-accessmap-standing-privilege.png",
      "title": "Access Map: privilege that needs no activation",
      "route": "/iam/accessmap",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:51.780Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "30229e32425838c3aa64a772e59651d672b6f879aa157449daa1cfb30061f708"
    },
    {
      "file": "identity-accessmap-unexpanded-group.png",
      "title": "Access Map: inspect a group whose membership is unreadable",
      "route": "/iam/accessmap",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:49.026Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. The group's grant remains visible; unknown members are not treated as zero access.",
      "sha256": "d34e76f3d635a155d49a43146f5cda8813d932c156d6be6140d53b1a5fc0a532"
    },
    {
      "file": "identity-activation-actions.png",
      "title": "Activation drawer: actions and elevation attribution",
      "route": "/entra/privileged/activations",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:11.545Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. The on-demand action read is answered by the fixture, not Microsoft Graph.",
      "sha256": "60b2f176c71fd130f89831076ffd8bd67f11e812aa3b31442ec814c97ecf2530"
    },
    {
      "file": "identity-activation-ledger.png",
      "title": "Privileged activity: recorded activation sessions",
      "route": "/entra/privileged/activations",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:10.298Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Two modeled Entra sessions; aggregate facet counts are not populated by this fixture.",
      "sha256": "116febb85d5b7a2ff9a0ed5cbb4a629ce368fcafe8d7bd8ab848760f05d8b351"
    },
    {
      "file": "identity-ca-coverage.png",
      "title": "Conditional Access: user and application coverage by control",
      "route": "/entra/conditional-access/coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:05.976Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Unsupported device-registration controls remain unavailable; sign-in attribution is not measured.",
      "sha256": "b9c1f2283e8bfa2fed95b09c3a178b9abd6a09cffb95e15a20a27836d09104cd"
    },
    {
      "file": "identity-ca-exposure-impact.png",
      "title": "Exposure finding: impact, blast radius and first step",
      "route": "/entra/conditional-access/exposure",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:08.296Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "c96a5f8f4dcc40b25e218ae7f6e28c2c24608d72a4ce18bc54b4f7ca13413d45"
    },
    {
      "file": "identity-ca-exposure.png",
      "title": "Conditional Access: prioritize application-class exposure",
      "route": "/entra/conditional-access/exposure",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:07.143Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "b41af53a03e422e29b81aedc0ad1f915a4b4638abd04c9cad84b7ad6b44d6fd4"
    },
    {
      "file": "identity-fabric-perimeter.png",
      "title": "Identity fabric: managed and federated authentication",
      "route": "/entra/setup",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:02.859Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "065c4b3950400d22154fae1933dddd75caf313955e49b057cdfd4c241c862c5e"
    },
    {
      "file": "identity-fabric-trust-details.png",
      "title": "Federation trust: issuer, MFA behavior and certificate metadata",
      "route": "/entra/setup",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:04.044Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Derived certificate metadata only; no credential or certificate material.",
      "sha256": "98e14330f7383d40995b012d5d7df22a30999340d357b702cca9b214b7df691c"
    },
    {
      "file": "identity-graph-escalation.png",
      "title": "Blast radius: independent escalation paths",
      "route": "/entra/graph",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:25.250Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "3558b0a7c2c0f46de04e6925d011d3385f812729c9d5d902d6d54f6f768570e1"
    },
    {
      "file": "identity-graph-federation.png",
      "title": "Blast radius: federated provider authenticates a privileged user",
      "route": "/entra/graph",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:23.246Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "453f6a90aaa16f2a2b5ce991fa0002fa24cd34e0300897ef161ce299f0508dae"
    },
    {
      "file": "identity-graph-primitive.png",
      "title": "Blast radius: isolate the application-administrator path",
      "route": "/entra/graph",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:26.415Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Both unrelated nodes and their edge are removed, not merely dimmed or relabeled.",
      "sha256": "ae7c4dcab138f55d6c6d50d0ec9e7836e6b55af65243df6e56eba72183c782df"
    },
    {
      "file": "identity-graph-privileged.png",
      "title": "Blast radius: group membership reaches a directory role",
      "route": "/entra/graph",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:22.100Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "da8c35bd95fd24fc35436bcef9bda07727d828d09f4cefa570dc9c799be00585"
    },
    {
      "file": "identity-guests-lifecycle.png",
      "title": "Guest access: six distinct lifecycle states",
      "route": "/entra/governance/guests",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:17.879Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Active, dormant, unmeasured, pending, accepted-unused and disabled are separate states.",
      "sha256": "f0cc34152fde453159379fee648c49d7f9bf202055183338444b0d90ca8bc213"
    },
    {
      "file": "identity-guests-partner-organizations.png",
      "title": "Guest access: partner rollup and governance visibility",
      "route": "/entra/governance/guests",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:20.125Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Partner domains are external mail domains, not the host UPN suffix; policy visibility remains unknown.",
      "sha256": "56be93cd84b82350a5f5ae644945c17ddd1b11f27af21db7be931787a3eb1416"
    },
    {
      "file": "identity-guests-pending-invitations.png",
      "title": "Guest access: isolate invitations never accepted",
      "route": "/entra/governance/guests",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:18.978Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "7ac8372fc6ce152c9cb518439d7b1399c5cc78fb37360f77f9a1478176be720b"
    },
    {
      "file": "identity-iam-effective.png",
      "title": "IAM Access: normalized grant and identity investigation link",
      "route": "/iam/effective",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:44.444Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. This is the Access grid, not the separate action-level Effective Access evaluator.",
      "sha256": "5f016ef19ac70e1c8ad2121cf033a7ba0ef52f7669c3e31442a2ad4487abaa24"
    },
    {
      "file": "identity-investigate-access.png",
      "title": "Investigate: direct and group-derived Azure access",
      "route": "/entra/investigate?principal_id=00000000-0000-4000-8000-000000000101",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:33.004Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "b1c9b8b7e90727b6e2e190c1306f12e0462314b6447b04beaa762169162e39d0"
    },
    {
      "file": "identity-investigate-change-history.png",
      "title": "Investigate: explain what changed, not just when",
      "route": "/entra/investigate?principal_id=00000000-0000-4000-8000-000000000101",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:38.285Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Seven explicit synthetic change events across eight comparison runs.",
      "sha256": "1113a90fa3805aaf7306970f3f5b2ad33a07020c1d800b47ab39fe26b2bf56b0"
    },
    {
      "file": "identity-investigate-group-cycle.png",
      "title": "Group investigation: nested membership with a cycle guard",
      "route": "/entra/investigate?principal_id=00000000-0000-4000-8000-000000000201",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:41.713Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Offline access group -> Offline nested group -> Offline access group terminates without another expansion.",
      "sha256": "eea1291eb56144f425f9746ff52c8ecbf99390176259779f50bfbd4a679998eb"
    },
    {
      "file": "identity-investigate-group-members.png",
      "title": "Group investigation: direct user and nested-group members",
      "route": "/entra/investigate?principal_id=00000000-0000-4000-8000-000000000201",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:40.497Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Membership is loaded explicitly through the mocked on-demand action.",
      "sha256": "98b9596fb175c648f1aa7496176548fe01f844bd2c9cd35650eb055092da01a3"
    },
    {
      "file": "identity-investigate-memberships.png",
      "title": "Investigate: cached groups are a floor, not a complete list",
      "route": "/entra/investigate?principal_id=00000000-0000-4000-8000-000000000101",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:34.997Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "5420d027706c1c2f54d2c38c10dd88ad84755bf481388388a8dbda75a2e1d497"
    },
    {
      "file": "identity-investigate-search.png",
      "title": "Investigate: resolve a synthetic user or group",
      "route": "/entra/investigate",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:31.809Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "ecd9996637a11bb7727a7b752d540218d72a7cef883ce03a242882942e953323"
    },
    {
      "file": "identity-investigate-transitive-memberships.png",
      "title": "Investigate: expand direct and nested memberships on demand",
      "route": "/entra/investigate?principal_id=00000000-0000-4000-8000-000000000101",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:36.280Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. The UI's live-read control is intercepted by the fixture; no directory request leaves the browser boundary.",
      "sha256": "bfff57c2782106462c5f0861d08aefe32ce3fcbecd881b65133a15349ff58093"
    },
    {
      "file": "identity-leavers-exposure.png",
      "title": "Disabled Access: live versus restorable exposure",
      "route": "/iam/leavers",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:55.623Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Three disabled identities, five principals holding access, and two account states not checked.",
      "sha256": "e2e8aa08aaf95c358936075e2ac47bf30cf1b50fb90892e248235993fb316a9a"
    },
    {
      "file": "identity-leavers-group-access.png",
      "title": "Disabled Access: remove membership, not the group's assignment",
      "route": "/iam/leavers",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:58.992Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "54de1bd05acea5f00d213b4d48c7aa9d549814de4acf2750a0fc6a12f266ed53"
    },
    {
      "file": "identity-leavers-owned-application.png",
      "title": "Disabled Access: an owned application can still authenticate",
      "route": "/iam/leavers",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:56.825Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Disabling the user does not disable the application's independent credentials.",
      "sha256": "34370512bf6bd0616696b0ce24a3c49702e8e04f896212d43cdb36bcac32ca62"
    },
    {
      "file": "identity-leavers-recycle-bin.png",
      "title": "Disabled Access: recoverable identities retain their grants",
      "route": "/iam/leavers",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:00.228Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. The long access-policy role is a display case; no harmless-orphan or never-used claim is made.",
      "sha256": "ae015f45d96196977ac834ff114fa9eae58754083fff33353532dcfac85ecc8f"
    },
    {
      "file": "identity-leavers-remediation-preview.png",
      "title": "Disabled Access: removal and rollback are separate review artifacts",
      "route": "/iam/leavers",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:02.610Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Selected identities only. Both preview blocks contain comments, not executable remediation; nothing is copied or run.",
      "sha256": "67e2d193853cdab7d6f8f676fbd01e6e7a43b0bce96b8caf23ccf97707ea436a"
    },
    {
      "file": "identity-pim-activation-review.png",
      "title": "PIM hygiene: active and completed elevations",
      "route": "/entra/privileged/jit-hygiene",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:15.827Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "3e7c25dbfc8389354399644c786fa14f89a21f0f0d015b238a8b2954d06ac46c"
    },
    {
      "file": "identity-pim-stale-eligibility.png",
      "title": "PIM hygiene: unused eligibility and recertification",
      "route": "/entra/privileged/jit-hygiene",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:14.659Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "906506236ad104571e550990343b6e6931ea4f4661a680b7a0a33cc57ba5f861"
    },
    {
      "file": "identity-pim-standing-drift.png",
      "title": "PIM hygiene: permanent privileged assignments",
      "route": "/entra/privileged/jit-hygiene",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:13.510Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "1717a514ae2d78ff5ef111bb8aa77b456a7b47ff4f4b9b2bcfe0070beeff1213"
    },
    {
      "file": "identity-scanner-baseline.png",
      "title": "Scanners: cadence, severity floor and saved delta",
      "route": "/entra/findings/scanners",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:28.439Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test.",
      "sha256": "b3c83ccf120a62757c635ee42077f139d88f51dffc58fad2a9ed8a76b1f699e4"
    },
    {
      "file": "identity-scanner-findings.png",
      "title": "Scanners: existing findings despite a zero-new delta",
      "route": "/entra/findings/scanners",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:45:29.605Z",
      "width": 1600,
      "height": 1050,
      "note": "Synthetic offline browser data only; not a real tenant assessment or backend computation test. Read-only disclosure of saved findings; Run and notifications are not invoked.",
      "sha256": "6e19afdd14b1bfb1c7d34070c2c436b574ba7b630f55b5ecf05f3e8a9d802ded"
    },
    {
      "file": "ops-alerts-action-group-destinations.png",
      "title": "Action groups — active receivers and notification destinations",
      "route": "/alerts-manager/action-groups",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:24.071Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence. Synthetic recipient addresses use .example; webhook destinations expose only their hostname.",
      "sha256": "cb3e0a994f5dae9d9f88d820a7b1c0c47f69dac7e7acc80eb8be0404343b4f9a"
    },
    {
      "file": "ops-alerts-coverage-routing-gaps.png",
      "title": "Alert gaps — missing baselines and broken notification routing",
      "route": "/alerts-manager/gaps",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:20.367Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "bb00bc19f1aa324b157990b6bb440a28da71cf947e0a71ada6bce6b061c68bd4"
    },
    {
      "file": "ops-alerts-overlapping-notifications.png",
      "title": "Alert overlaps — shared destinations and consolidation recommendations",
      "route": "/alerts-manager/overlaps",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:18.507Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "76686ab0df8cdd76ae33a0a39c1967d2fc3387d31bfc461195f46ed8acbfd465"
    },
    {
      "file": "ops-alerts-rationalization-overview.png",
      "title": "Alerts Manager — rationalization and priority review queue",
      "route": "/alerts-manager/overview?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:16.709Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "3323053f54e9ff6699057c113e110203f1ba8038f47d3d13a701f04d63e8d194"
    },
    {
      "file": "ops-alerts-rule-analysis.png",
      "title": "Alert rule analysis — signal, targets, costs and firing history",
      "route": "/alerts-manager/rules",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:22.361Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "5565cdc247475eb632048f14c4e366dbdcd79f0f01ecf829555e61ee4599dbee"
    },
    {
      "file": "ops-backup-cost-and-waste.png",
      "title": "Backup cost and waste — explicitly labeled list-price estimates",
      "route": "/backup-manager/cost",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:25.191Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence. The demo estimate is not actual Azure Cost Management billing.",
      "sha256": "5109b1a9dffdea757a189f1e6ba057d310b4da51bfa49e45b3ea64f2bb6f7721"
    },
    {
      "file": "ops-backup-coverage-matrix.png",
      "title": "Backup coverage — protection, offsite copies and job SLA",
      "route": "/backupdr?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:53.761Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "19a8946b9f19c15cfc98f63f0af36921f237f551512e9aa0c0dc892d0e3e5e56"
    },
    {
      "file": "ops-backup-coverage-resource-state.png",
      "title": "Backup coverage detail — per-check evidence and resource state",
      "route": "/backupdr?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:55.501Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "36cca1c396a7b4e8391dffe90fcf93aae782cdff9fdd07a579895a5822a7bdf9"
    },
    {
      "file": "ops-backup-dr-coverage-plans.png",
      "title": "Disaster recovery coverage — replication plans and stale drills",
      "route": "/backupdr?workload_id=demo-amba-coverage&tab=dr",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:57.238Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "d2f5e88b1fa114b70a39df3e4e50f0a91b61e0c3c476123f4d45c5a839a7e1e7"
    },
    {
      "file": "ops-backup-job-failure-remediation.png",
      "title": "Job inbox — failure clusters and agent remediation",
      "route": "/backup-manager/jobs",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:14.893Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "4dcb2a72db807861a1ed27bf6a962da09faf85bfc94a46101ac7fa80afbce3da"
    },
    {
      "file": "ops-backup-overview.png",
      "title": "Backup Manager — protection, recovery and posture",
      "route": "/backup-manager/overview?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:07.908Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "8fdbdf690addcb1dee288004f496b1b61a28cc99898fdf351b8c1063470a9161"
    },
    {
      "file": "ops-backup-policy-sprawl.png",
      "title": "Backup policies — duplicate policies and retention baseline",
      "route": "/backup-manager/policies",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:16.609Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "7c337ede715254b79105a146373d6abb00dd9d63f785316fae638dae5d02ef45"
    },
    {
      "file": "ops-backup-protected-item-detail.png",
      "title": "Protected item — source, policy and recovery-point evidence",
      "route": "/backup-manager/inventory",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:13.091Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "d044c0226820503912306fead05d2d2a7bcb0e0c41ac762124c35da40d84780a"
    },
    {
      "file": "ops-backup-protected-items.png",
      "title": "Protection inventory — recovery points and orphaned items",
      "route": "/backup-manager/inventory",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:11.372Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "7bdf7b56fb060f556092869c6432c3601054b813a70f9b947ec62bd4d9bd3c0b"
    },
    {
      "file": "ops-backup-protection-flow.png",
      "title": "Protection flow — resource to policy to vault to outcome",
      "route": "/backup-manager/flow",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:09.659Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "39c41a70a983e07db75ae29256a76ba7daa851591954b9f56d14a088ccae8237"
    },
    {
      "file": "ops-backup-protection-gaps.png",
      "title": "Protection gaps — actionable resources and coverage provenance",
      "route": "/backup-manager/gaps",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:21.757Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "0110a0e582bf0dbec24bd38ae8e59bb55b3bb83ae4680081365a34872fa6dcab"
    },
    {
      "file": "ops-backup-site-recovery.png",
      "title": "Site Recovery — replication health, RPO and drill age",
      "route": "/backup-manager/dr",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:23.473Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "f96099a69efb728a288ca77e6f82fab50e1594351427bb4d754be6b67c295fa9"
    },
    {
      "file": "ops-backup-vault-control-detail.png",
      "title": "Vault detail — managed controls versus portal-only controls",
      "route": "/backup-manager/vaults",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:20.026Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "081cd4e8a3a66d53da3a79cb6225aa92eb107b646d4ff117891553a4999d19b2"
    },
    {
      "file": "ops-backup-vault-posture.png",
      "title": "Vault posture — ransomware and control coverage",
      "route": "/backup-manager/vaults",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:18.325Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "243e17b508af98240c13b4434c41eae4a19ffbd1881214d9fa2e3a8548dead5b"
    },
    {
      "file": "ops-monitoring-alert-evidence.png",
      "title": "Baseline alert detail — recommended versus observed configuration",
      "route": "/coverage?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:43.347Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "6e59fb80b428336314e516f991027898eaa8cc33ce2e3364611a50469c0bcda4"
    },
    {
      "file": "ops-monitoring-all-resources.png",
      "title": "Monitoring inventory — complete footprint and reference coverage",
      "route": "/coverage?workload_id=demo-amba-coverage&tab=all",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:45.094Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "458473616531b952ac46652f70c1320d3685f8a164e70d916ef649dcfe71adff"
    },
    {
      "file": "ops-monitoring-baseline-matrix.png",
      "title": "Monitoring coverage — resources against the AMBA baseline",
      "route": "/coverage?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:41.593Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "9529fa84727a9134f8db2d8b0281e45db1e7fcf91e0318fd1cd1917aadf69dec"
    },
    {
      "file": "ops-performance-metric-heatmap.png",
      "title": "Performance heatmap — resources versus AMBA metric thresholds",
      "route": "/performance?workload_id=demo-amba-coverage&run=e67ed7673f044f80",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:02.827Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "9d0fd6bb7e87e91fe1e86ec2d71d411fc3eba25168864daa31c5e6ad08ea56ba"
    },
    {
      "file": "ops-performance-resource-inventory.png",
      "title": "Profiled estate — full resource inventory and reference membership",
      "route": "/performance?workload_id=demo-amba-coverage&run=e67ed7673f044f80",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:06.527Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "18e85bdeb4c73c1d45f548a9f49e3ab610e121fb42e1d567871970f305a2897a"
    },
    {
      "file": "ops-performance-resource-metrics.png",
      "title": "Performance resource detail — sparklines, thresholds and headroom",
      "route": "/performance?workload_id=demo-amba-coverage&run=e67ed7673f044f80",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:04.665Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "12a84e33c5407ed3f4dee6e690bad6f42d88aaedf2f336f1a7257db1934f9b99"
    },
    {
      "file": "ops-performance-score-and-bottleneck.png",
      "title": "Performance profile — score and binding bottleneck",
      "route": "/performance?workload_id=demo-amba-coverage&run=e67ed7673f044f80",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:00.972Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "7e14c5b99b665d76957911319bd92b74e52e83c2951d7151c3ce4841ab8558cc"
    },
    {
      "file": "ops-quota-capacity-posture.png",
      "title": "Quota posture — usage, headroom and risk by region",
      "route": "/quota?demo=1",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:12.864Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence. Quota Monitor uses its built-in Demo data mode, not a subscription scan.",
      "sha256": "4d971a4e49b6ddcfce4d1da8c674a9bf87353964c3570b6fa9341aab28c617b9"
    },
    {
      "file": "ops-quota-limit-detail.png",
      "title": "Quota detail — collection source, remaining capacity and next steps",
      "route": "/quota?demo=1",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:14.061Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence. Portal escalation and command-copy actions are not invoked.",
      "sha256": "4a7d430ee838f7e0f6d38ef45a8f22bd739f0b04ad7c676524cb723464300f04"
    },
    {
      "file": "ops-radar-migration-impact-detail.png",
      "title": "Retirement detail — replacement guidance and impacted resources",
      "route": "/radar?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:10.753Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence. Guidance links are displayed, never opened.",
      "sha256": "d1b69262574c486aad489f1b691f2825dff74567288f5ae92673be5b23d43462"
    },
    {
      "file": "ops-radar-retirement-deadlines.png",
      "title": "Retirement radar — deadlines, impact and ownership",
      "route": "/radar?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:47:09.026Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "89d452a88a5d12ffbb21562758ec0dee3961c01ba9a3d769953ba641fad7c059"
    },
    {
      "file": "ops-recovery-analysis.png",
      "title": "Recovery analysis — type-level RTO/RPO and the redundancy gap",
      "route": "/resiliency/analysis",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:35.467Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "29243cd3b6d6fc8fa8713416d6cb605c8c79181b4fc8d4e87f997ae71c68aabd"
    },
    {
      "file": "ops-recovery-objective-breaches.png",
      "title": "Recovery objectives — breaches ordered by consequence",
      "route": "/resiliency/targets",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:37.245Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence. Shipped objectives remain unacknowledged unless the parent fixture already acknowledged them; this spec never changes them.",
      "sha256": "5606d6df9a12faf65695c2fe89ea2a4e813d6fb38c211dbb1a3f997fe749dc5f"
    },
    {
      "file": "ops-recovery-overview.png",
      "title": "Recovery readiness — outcomes by failure scenario",
      "route": "/resiliency/overview?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:27.759Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "3d20d2deaf961b5f9299b50f104d2f19df93962ea1e890d38a0a0bb3695840ca"
    },
    {
      "file": "ops-recovery-resource-reasoning.png",
      "title": "Recovery detail — scenario reasoning for an unprotected VM",
      "route": "/resiliency/matrix",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:31.297Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "d3d325365bcd65f0975b9703d4726728a003cfbdcda2adcd1a51ed26e52804dd"
    },
    {
      "file": "ops-recovery-resource-register.png",
      "title": "Recovery resource register — protection and worst-case outcomes",
      "route": "/resiliency/resources?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:33.639Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "c11f4348a7b699bbbd21fb837d9c6cb1e60b73329d17f5c53a0a23380a242a31"
    },
    {
      "file": "ops-recovery-scenario-matrix.png",
      "title": "Recovery matrix — unknown is not a pass or no recovery path",
      "route": "/resiliency/matrix",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:29.525Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "f9e46d077a8d0bce53648707bb3beb791e892b41f22eaee55c27d41152b21fc1"
    },
    {
      "file": "ops-recovery-workload-weakest-link.png",
      "title": "Workload recovery — the component determining the outcome",
      "route": "/resiliency/workloads",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:38.971Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "ddd5c502e56a0d374537fbc598ba0f0a365cf4d230debe891b8508f1168f4818"
    },
    {
      "file": "ops-telemetry-all-resources.png",
      "title": "Telemetry inventory — resources inside and outside the diagnostic reference",
      "route": "/telemetry?workload_id=demo-amba-coverage&tab=all",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:51.143Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "543641bf4a2953d2b6a3274d0726f7125738c54aef2e4091d58301ea5b0ed576"
    },
    {
      "file": "ops-telemetry-diagnostic-coverage.png",
      "title": "Telemetry coverage — diagnostic categories and destinations",
      "route": "/telemetry?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:47.691Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "22f75ded6b399cb7b5a5861b0841e08efdc82505f65767a0ae30ffb12de99bbc"
    },
    {
      "file": "ops-telemetry-resource-diagnostics.png",
      "title": "Telemetry detail — recommended categories and diagnostic destinations",
      "route": "/telemetry?workload_id=demo-amba-coverage",
      "source": "synthetic-local-capture",
      "captured_at": "2026-09-05T06:46:49.402Z",
      "width": 1600,
      "height": 1050,
      "note": "TEST DATA — isolated seeded Contoso Hotels demo; not a customer tenant or live Azure evidence.",
      "sha256": "59b4f7b34e16b15704b1fa47c346d630d65b984ecf12d9d60810efd6fe8e4164"
    }
  ]
}
