{
 "raw_rows": 371226,
 "trusted_rows": 369144,
 "quarantined_rows": 2082,
 "checks": [
  {
   "id": "U1",
   "dimension": "uniqueness",
   "description": "event_id appears more than once (rows beyond the first)",
   "observed": 900,
   "threshold": 0,
   "severity": "error",
   "status": "fail",
   "rows_flagged": 900,
   "detail": null
  },
  {
   "id": "C_user_id",
   "dimension": "completeness",
   "description": "user_id is NULL",
   "observed": 728,
   "threshold": 0,
   "severity": "error",
   "status": "fail",
   "rows_flagged": 728,
   "detail": null
  },
  {
   "id": "C_ts",
   "dimension": "completeness",
   "description": "ts is NULL",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "C_dst_resource",
   "dimension": "completeness",
   "description": "dst_resource is NULL",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "C_outcome",
   "dimension": "completeness",
   "description": "outcome is NULL",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "C_auth_method",
   "dimension": "completeness",
   "description": "auth_method is NULL",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "C_source_system",
   "dimension": "completeness",
   "description": "source_system is NULL",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "C_reason",
   "dimension": "completeness",
   "description": "failure without failure_reason",
   "observed": 272,
   "threshold": 0,
   "severity": "warn",
   "status": "fail",
   "rows_flagged": 272,
   "detail": "kept, but relabelled 'unknown' in the trusted view"
  },
  {
   "id": "V_outcome",
   "dimension": "validity",
   "description": "outcome not exactly 'success' or 'failure' (quarantined, not repaired)",
   "observed": 415,
   "threshold": 0,
   "severity": "error",
   "status": "fail",
   "rows_flagged": 415,
   "detail": null
  },
  {
   "id": "V_latency",
   "dimension": "validity",
   "description": "added_latency_ms outside [0, 600000]",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "V_ip",
   "dimension": "validity",
   "description": "src_ip does not look like an IPv4-style address",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "T_window",
   "dimension": "timeliness",
   "description": "timestamp outside the load window (future / pre-window: clock skew)",
   "observed": 40,
   "threshold": 0,
   "severity": "error",
   "status": "fail",
   "rows_flagged": 40,
   "detail": null
  },
  {
   "id": "R_user",
   "dimension": "integrity",
   "description": "user_id not in users",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "R_resource",
   "dimension": "integrity",
   "description": "dst_resource not in resources",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "L_mfa1",
   "dimension": "consistency",
   "description": "mfa_satisfied=1 although mfa_required=0",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "L_mfa2",
   "dimension": "consistency",
   "description": "success although MFA was required and not satisfied",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "L_block",
   "dimension": "consistency",
   "description": "success with a blocking control recorded",
   "observed": 0,
   "threshold": 0,
   "severity": "error",
   "status": "pass",
   "rows_flagged": 0,
   "detail": null
  },
  {
   "id": "L_device",
   "dimension": "consistency",
   "description": "non-service success on a high-sensitivity resource from an unmanaged device (device-trust control should have blocked it)",
   "observed": 5,
   "threshold": 0,
   "severity": "warn",
   "status": "fail",
   "rows_flagged": 5,
   "detail": "not a data error. In this synthetic world all such rows are stolen-SSO-token sessions that skip device trust (see docs/DATA_QUALITY.md); reported as residual risk."
  },
  {
   "id": "F_gap",
   "dimension": "freshness",
   "description": "hours where a source's volume is <=15% of its median for that hour-of-day (ingestion gap)",
   "observed": 6,
   "threshold": 0,
   "severity": "error",
   "status": "fail",
   "rows_flagged": 6,
   "detail": "[{\"source\": \"vdi\", \"start_hour\": 1243, \"end_hour\": 1243, \"hours\": 1}, {\"source\": \"vpn\", \"start_hour\": 874, \"end_hour\": 878, \"hours\": 5}]"
  }
 ],
 "scoring_vs_planted_faults": {
  "duplicate_event_ids": {
   "planted": 900,
   "detected": 900,
   "recall": 1.0,
   "extra_flagged": 0
  },
  "null_user_id": {
   "planted": 728,
   "detected": 728,
   "recall": 1.0,
   "extra_flagged": 0
  },
  "bad_outcome_enum": {
   "planted": 415,
   "detected": 415,
   "recall": 1.0,
   "extra_flagged": 0
  },
  "future_timestamps": {
   "planted": 40,
   "detected": 40,
   "recall": 1.0,
   "extra_flagged": 0
  },
  "failure_missing_reason": {
   "planted": 272,
   "detected": 272,
   "recall": 1.0,
   "extra_flagged": 0
  },
  "ingestion_gap": {
   "planted_hours": 5,
   "planted_source": "vpn",
   "detected_runs": [
    {
     "source": "vdi",
     "start_hour": 1243,
     "end_hour": 1243,
     "hours": 1
    },
    {
     "source": "vpn",
     "start_hour": 874,
     "end_hour": 878,
     "hours": 5
    }
   ],
   "hours_covered": 5,
   "recall": 1.0,
   "false_alarm_hours": 1
  }
 },
 "trusted_view_invariants_violations": {
  "no_duplicate_ids": 0,
  "no_null_user": 0,
  "only_canonical_outcomes": 0,
  "no_success_with_block": 0,
  "no_success_mfa_unsatisfied": 0
 }
}