{
  "message": "s3-origin cleartext fixture (intentionally unsanitized before state)",
  "meta": {
    "scenario": "S3",
    "source": "origin",
    "note": "This response is intentionally raw; the capability sanitizes it."
  },
  "user": {
    "displayName": "<script>alert(1)</script>",
    "biography": "Hello <img src=x onerror=alert('xss')> world",
    "nested": {
      "comment": "<svg onload=alert(3)>"
    }
  },
  "payment": {
    "primaryPAN": "4111111111111111",
    "secondaryPAN": "4111111111111112",
    "invalidLuhn": "1234567890123456",
    "note": "primaryPAN is Luhn-valid; secondaryPAN is one-digit tamper; invalidLuhn is random"
  },
  "network": {
    "rfc1918Hosts": [
      "10.0.0.1",
      "192.168.1.5",
      "172.16.0.1"
    ],
    "publicResolver": "8.8.8.8"
  },
  "debug": {
    "trace": "origin debug trace",
    "memoryDump": "0xDEADBEEF"
  },
  "internal": {
    "flag": true,
    "shard": "shard-7"
  },
  "stack": "Error: origin exception at /api/fixture:42",
  "audit": {
    "deep": {
      "pan": "5555555555554444",
      "ip": "10.10.10.10"
    }
  }
}