{
  "case_id": "AMB-04",
  "skill_id": "istio-ambient-mesh-review",
  "prompt": "Why might original-caller principal matching fail at this enforcement point?",
  "execution_context": {
    "tier": "static-review",
    "live_adapter_authorized": false,
    "network_authorized": false,
    "environment_note": "Synthetic fixture; no real cluster, current release support or actual observations are asserted. Evaluate the stated distinction and preserve all missing context."
  },
  "supplied_evidence": {
    "path": [
      "caller",
      "waypoint",
      "destination ztunnel",
      "destination"
    ],
    "policy_target": "destination ztunnel",
    "required_peer": "spiffe://example/ns/shop/sa/frontend"
  }
}