[
  {
    "HandshakeId": "HS-001",
    "IdentityKind": "AgentIdentity",
    "IdentityObjectId": "5b000000-0000-4000-8000-000000000015",
    "Name": "Benefits Q&A Agent",
    "Environment": "Production",
    "BlueprintAppId": "1a000000-0000-4000-8000-000000000008",
    "SponsorUpn": "erin@contoso.example",
    "SponsoringGroupId": "6a000000-0000-4000-8000-000000000001",
    "TechnicalOwnerUpn": "alice@contoso.example",
    "Consent": [ { "Resource": "Microsoft Graph", "Permission": "User.Read.All", "Type": "Application", "AppRoleId": "df021288-bdef-4463-88db-98f22de89214", "Approval": "CHG-1001" } ],
    "CaPolicies": ["NPI-AGENT-01 Block agent identities not approved in the handshake (report-only)", "NPI-AGENT-02 Block high-risk agent identities (report-only, watch item)"],
    "Placement": "ORG-BEN",
    "UseCaseId": "UC-2026-001",
    "AccessMode": "AppOnly",
    "CredentialPlan": "ManagedIdentity",
    "TimeBoundRoles": [],
    "FallbackReason": "",
    "ReviewedBy": "ian@contoso.example",
    "ReviewedOn": "2026-09-01"
  },
  {
    "HandshakeId": "HS-002",
    "IdentityKind": "AgentIdentity",
    "IdentityObjectId": "5b000000-0000-4000-8000-000000000016",
    "Name": "Case Triage Agent",
    "Environment": "Production",
    "BlueprintAppId": "1a000000-0000-4000-8000-000000000009",
    "SponsorUpn": "carol@contoso.example",
    "SponsoringGroupId": "",
    "TechnicalOwnerUpn": "carol@contoso.example",
    "Consent": [ { "Resource": "Microsoft Graph", "Permission": "Mail.Read", "Type": "Delegated", "AppRoleId": "", "Approval": "CHG-1004" } ],
    "CaPolicies": [],
    "Placement": "ORG-CASE",
    "UseCaseId": "UC-2026-007",
    "AccessMode": "",
    "CredentialPlan": "",
    "TimeBoundRoles": [],
    "FallbackReason": "",
    "ReviewedBy": "ian@contoso.example",
    "ReviewedOn": "2026-09-20"
  },
  {
    "HandshakeId": "HS-003",
    "IdentityKind": "AgentIdentity",
    "IdentityObjectId": "5b000000-0000-4000-8000-000000000017",
    "Name": "Records Search Agent",
    "Environment": "Production",
    "BlueprintAppId": "1a000000-0000-4000-8000-000000000008",
    "SponsorUpn": "bob@contoso.example",
    "SponsoringGroupId": "6a000000-0000-4000-8000-000000000001",
    "TechnicalOwnerUpn": "alice@contoso.example",
    "Consent": [ { "Resource": "Microsoft Graph", "Permission": "Files.Read.All", "Type": "Delegated", "AppRoleId": "", "Approval": "CHG-1006" } ],
    "CaPolicies": ["NPI-AGENT-01 Block agent identities not approved in the handshake (report-only)"],
    "Placement": "ORG-REC",
    "UseCaseId": "UC-2026-009",
    "AccessMode": "OnBehalfOf",
    "CredentialPlan": "ManagedIdentity",
    "TimeBoundRoles": [ { "RoleDefinitionId": "88d8e3e3-8f55-4a1e-953a-9b9898b8876b", "Role": "Directory Readers", "ExpiresOn": "2026-12-31", "Approval": "CHG-1007" } ],
    "FallbackReason": "",
    "ReviewedBy": "ian@contoso.example",
    "ReviewedOn": "2026-09-05"
  },
  {
    "HandshakeId": "HS-004",
    "IdentityKind": "ServicePrincipal",
    "IdentityObjectId": "5b000000-0000-4000-8000-000000000006",
    "Name": "Correspondence Drafting (Mail Automation)",
    "Environment": "Production",
    "BlueprintAppId": "",
    "SponsorUpn": "erin@contoso.example",
    "SponsoringGroupId": "6a000000-0000-4000-8000-000000000001",
    "TechnicalOwnerUpn": "alice@contoso.example",
    "Consent": [ { "Resource": "Microsoft Graph", "Permission": "Mail.Send", "Type": "Application", "AppRoleId": "b633e1c5-b582-4048-a93e-9f11b44c7e96", "Approval": "CHG-0870" } ],
    "CaPolicies": ["Workload identity location policy (Chapter 08)"],
    "Placement": "ORG-BEN",
    "UseCaseId": "UC-2026-014",
    "AccessMode": "AppOnly",
    "CredentialPlan": "Secret (to be replaced in Chapter 05)",
    "TimeBoundRoles": [],
    "FallbackReason": "",
    "ReviewedBy": "ian@contoso.example",
    "ReviewedOn": "2026-06-01"
  }
]
