{
  "recorded": "2026-11-08",
  "scope": "Executed locally against synthetic fixtures. No production host or database was contacted.",
  "cases": {
    "terminal": {
      "title": "List an isolated example directory",
      "method": "Executed /bin/ls against a newly created temporary directory.",
      "command": "ls -1",
      "output": "application.log\nconfig.json\nreleases"
    },
    "logs": {
      "title": "Read the last three fixture log lines",
      "method": "Executed the installed tail utility against a six-line local example file. This is not a production log.",
      "command": "tail -n 3 application.log",
      "output": "2026-11-08T10:00:03Z WARN dependency.slow name=example\n2026-11-08T10:00:04Z INFO request route=/health status=200\n2026-11-08T10:00:05Z INFO fixture.completed"
    },
    "ssh": {
      "title": "Check the application’s error classification",
      "method": "Executed the current sshFailureMessage and userError functions with explicit synthetic authentication and shell-denial errors. This is not a live login attempt.",
      "command": "Authentication rejection → userError\nPost-authentication shell denial → userError",
      "output": "The server rejected username/password authentication. Check your credentials. The password may be incorrect, the account may lack SSH access, or password login may be disabled.\n\nSSH authentication succeeded, but the server did not allow an interactive terminal. Check shell/PTY permissions; the account may be restricted to SFTP."
    },
    "database": {
      "title": "Check bounded previews and read-query validation",
      "method": "Executed the current query builder, preview limiter and SQL validator against a synthetic jobs schema. No PostgreSQL server was queried.",
      "command": "buildTablePreviewQuery(\"jobs\", schema, \"postgres\", 50, 0)\nisReadOnlySqlQuery(SELECT example)\nisReadOnlySqlQuery(DELETE example)",
      "output": "Generated query includes LIMIT 50 OFFSET 0: true\nLarge text projection includes a 2048-character bound: true\nClient preview shorter than the 6,000-character fixture: true\nSELECT example accepted: true\nDELETE example accepted: false"
    },
    "nginx": {
      "title": "Parse a known access-log fixture",
      "method": "Executed the current Nginx log parser against 30 synthetic access records and one synthetic error record. These counts describe only that fixture.",
      "command": "parseRawNginxLogs(accessFixture, \"access\", examplePath)",
      "output": "Parsed access records: 30\n200 responses: 24\n404 responses: 3\n502 responses: 3\nParsed error records: 1"
    }
  }
}