{
  "checks": [
    {
      "case": "original bytes",
      "accepted": true,
      "expected": true
    },
    {
      "case": "equivalent JSON different bytes",
      "accepted": false,
      "expected": false
    },
    {
      "case": "wrong endpoint key",
      "accepted": false,
      "expected": false
    },
    {
      "case": "modified body",
      "accepted": false,
      "expected": false
    },
    {
      "case": "old timestamp still authentic",
      "accepted": false,
      "expected": false
    },
    {
      "case": "future beyond policy",
      "accepted": false,
      "expected": false
    },
    {
      "case": "malformed signature",
      "accepted": false,
      "expected": false
    },
    {
      "case": "same delivery again in window",
      "accepted": true,
      "expected": true
    }
  ],
  "checksCount": 8,
  "accepted": 2,
  "rejected": 6,
  "duplicateDeliveryEffects": 1,
  "freshnessPolicySeconds": {
    "maxAge": 300,
    "maxFuture": 30
  },
  "scope": "Exact HMAC input and a local deduplication set. No HTTP parser, SDK conformance, durable ledger or timing benchmark."
}