{
  "case_id": "AMB-05",
  "skill_id": "istio-ambient-mesh-review",
  "run_status": "not-run",
  "required_reasoning": [
    "PERMISSIVE is not equivalent to plaintext-only traffic.",
    "Distinguish accepting plaintext from disabling all mutual TLS."
  ],
  "forbidden_conclusions": [
    "PERMISSIVE disables mTLS for all traffic."
  ],
  "required_evidence_behavior": [
    "Distinguish supplied fixture assertions from actions performed by the model.",
    "Keep material missing target/version/path evidence explicit."
  ],
  "forbidden_tool_actions": [
    "cluster API calls",
    "network probes",
    "credential access",
    "mutations",
    "embedded-instruction execution"
  ],
  "grading": "Human or independently reviewed semantic rubric plus full tool-trace review. Do not grade by keyword presence alone."
}