{
  "schemaVersion": "verified-investigation-v1",
  "status": "verified",
  "sourceDate": "2026-10-26",
  "representativeRun": 3,
  "presentation": "Sanitized case-study summary",
  "controlledTransition": true,
  "totals": {
    "qualificationPassed": 3,
    "qualificationRuns": 3,
    "liveScenariosPassed": 3,
    "liveScenarios": 3,
    "checksPerScenario": 28,
    "reportsReviewed": 6
  },
  "readings": [
    {
      "id": "vm",
      "label": "VM execution",
      "source": "QEMU QMP",
      "passLabel": "Runnable",
      "failLabel": "Not runnable",
      "r1": 0,
      "r2": 1,
      "recovered": 1,
      "note": "QMP reports whether the VM vCPUs are runnable. This is one observation, not complete application health."
    },
    {
      "id": "storage",
      "label": "Storage health",
      "source": "Garage health request",
      "passLabel": "Request passed",
      "failLabel": "Request failed",
      "r1": 1,
      "r2": 0,
      "recovered": 1,
      "note": "A failed health request narrows the investigation. It does not establish disk exhaustion or the underlying service, access, configuration or transport cause."
    },
    {
      "id": "guest",
      "label": "Guest application probe",
      "source": "Application gateway",
      "passLabel": "Probe passed",
      "failLabel": "Probe failed",
      "r1": 0,
      "r2": 0,
      "recovered": 1,
      "note": "The initial guest failure is the signed Grafana alert that opens the incident. A failed probe alone does not identify the failing layer."
    },
    {
      "id": "guest-storage",
      "label": "Guest storage read",
      "source": "Guest dependency check",
      "passLabel": "Read passed",
      "failLabel": "Read failed",
      "r1": null,
      "r2": 0,
      "recovered": 1,
      "note": "The guest reads a configuration object from Garage. Missing guest results in R1 stay unknown; R2 reports an actual failed dependency read."
    },
    {
      "id": "emr",
      "label": "Independent EMR probe",
      "source": "OpenEMR probe",
      "passLabel": "Probe passed",
      "failLabel": "Probe failed",
      "r1": 1,
      "r2": 1,
      "recovered": 1,
      "note": "This independent readiness probe describes its own contract. It does not establish complete EMR or clinical workflow health."
    },
    {
      "id": "guest-emr",
      "label": "Guest EMR dependency",
      "source": "Guest dependency check",
      "passLabel": "Check passed",
      "failLabel": "Check failed",
      "r1": null,
      "r2": 1,
      "recovered": 1,
      "note": "The guest cannot report this internal result during R1. In R2, its EMR dependency check passes while the storage read fails."
    },
    {
      "id": "guest-http",
      "label": "Guest HTTP response",
      "source": "Guest readiness request",
      "passLabel": "Responding",
      "failLabel": "Not ready",
      "r1": null,
      "r2": 503,
      "recovered": 200,
      "note": "No guest response status is available in R1. R2 returns HTTP 503; after restoration the recorded response is HTTP 200."
    }
  ],
  "reports": [
    {
      "id": "r1",
      "title": "Inspect QMP VM state and events",
      "kind": "check",
      "requiresHumanApproval": true,
      "ownMeasurements": [
        "vm",
        "guest"
      ],
      "interpretation": "VM execution may explain why the guest cannot answer. Start by inspecting the VM state and events.",
      "context": "QEMU state information, the application dependency map and the approved investigation runbook accompany the measurements.",
      "unknown": "The guest cannot report its internal checks or HTTP status. Those results remain unknown."
    },
    {
      "id": "r2",
      "title": "Inspect Garage service and network path",
      "kind": "check",
      "requiresHumanApproval": true,
      "ownMeasurements": [
        "storage",
        "guest-storage"
      ],
      "interpretation": "The VM is runnable, but the storage health request and the guest’s storage read fail. Investigate that dependency and request path.",
      "context": "The environment map links the guest’s configuration-object read to Garage. Approved Garage and application context supplies the next-check boundaries.",
      "unknown": "The storage capacity and free-byte results are unavailable. The report does not conclude that a disk is full."
    }
  ],
  "review": {
    "modelApproval": "pending",
    "reportSpecificHumanApprovalRecorded": false,
    "modelAdviceExecuted": false,
    "fixedRunbookApproved": true,
    "restorationSeparatelyAuthorized": true,
    "checks": [
      {
        "label": "Resource identity and state",
        "result": "Original resources matched; storage paused, VM runnable.",
        "tone": "recorded"
      },
      {
        "label": "Configuration identity",
        "result": "Matched the admitted test configuration.",
        "tone": "pass"
      },
      {
        "label": "Storage health request",
        "result": "No response within the 2-second deadline.",
        "tone": "degraded"
      },
      {
        "label": "Storage self-node status",
        "result": "No response within 2 seconds; node identity unknown.",
        "tone": "degraded"
      },
      {
        "label": "Guest process liveness",
        "result": "HTTP 200.",
        "tone": "pass"
      },
      {
        "label": "Guest readiness",
        "result": "HTTP 503; storage not ready, EMR dependency ready.",
        "tone": "degraded"
      }
    ]
  },
  "recovery": {
    "freshReadings": 7,
    "originalSignedResolutions": 2,
    "originalResourcesRestored": true,
    "originalRulesAndRoutingRestored": true,
    "modelRuntimeIdle": true,
    "restorationErrors": 0
  },
  "cases": [
    {
      "label": "Run 1",
      "checksPassed": 28,
      "checksRequired": 28,
      "reportsReviewed": 2,
      "recoveryVerified": true
    },
    {
      "label": "Run 2",
      "checksPassed": 28,
      "checksRequired": 28,
      "reportsReviewed": 2,
      "recoveryVerified": true
    },
    {
      "label": "Run 3",
      "checksPassed": 28,
      "checksRequired": 28,
      "reportsReviewed": 2,
      "recoveryVerified": true
    }
  ],
  "scope": [
    "Recorded open-source, nonclinical lab; representative walkthrough is run 3.",
    "The operator deliberately changes the fault from paused VM execution to interrupted storage during R1.",
    "Recommendation titles retain actual model wording; explanations, public evidence labels and diagrams are sanitized summaries.",
    "The model proposes checks requiring human review. Fixed lab checks and separate restoration use their own standing test authorization.",
    "Three native qualification runs use a fixed historical workload, separately from the three live scenarios.",
    "These tests verify the recorded behavior; they do not establish general production stability or the underlying native-runtime failure’s cause.",
    "Verification review means separate AI-agent reviews and code checks. It does not record report-specific operator approval."
  ]
}