{
  "engagement_id": "WH-ENG-YYYYMMDD-NNN",
  "authorization_id": "approval-record-reference",
  "authorizer": "operator identity",
  "approved_at": "YYYY-MM-DDTHH:MM:SSZ",
  "expires_at": "YYYY-MM-DDTHH:MM:SSZ",
  "target": "https://target.example.invalid",
  "target_owner": "responsible repo or party",
  "target_owner_acknowledged_at": "YYYY-MM-DDTHH:MM:SSZ",
  "environment": "build",
  "namespace": "namespace if applicable",
  "source": "probe source and network position",
  "routes": ["GET /exact/in-scope/route"],
  "fixture_ids": ["synthetic-tenant-a", "synthetic-tenant-b"],
  "credential_lane": "sanctioned custody lane reference",
  "credential_role": "ordinary modeled role",
  "credential_max_ttl_seconds": 900,
  "techniques": ["e2-differential"],
  "prohibited_techniques": ["discovery", "saturation", "real-data collection"],
  "rate_limit_per_minute": 10,
  "max_concurrency": 1,
  "window_start": "YYYY-MM-DDTHH:MM:SSZ",
  "window_end": "YYYY-MM-DDTHH:MM:SSZ",
  "operator_contact": "operator contact",
  "abort_contact": "target owner contact",
  "abort_thresholds": {"latency_ms": 0, "error_rate": 0},
  "posture_claim": "E2",
  "attacker_model": "E2-authenticated-tenant-a",
  "finding_destination": "risk-nexus"
}