{
  "$comment": "Vetor normativo do FTID-HMAC-SHA256-V1 aplicado ao CustomerActionRequest v1 ja congelado. O segredo existe somente para reproducao do teste.",
  "status": "NORMATIVE",
  "protocol": "FTID-HMAC-SHA256-V1",
  "algorithm": "HMAC-SHA-256",
  "secret_encoding": "hex",
  "canonical_string_format": "protocol\\nkey_id\\nmethod\\npath\\ntimestamp\\nsigned_id_name:signed_id_value\\nattempt_id_name:attempt_id_value\\ncontent_type\\ncontent_encoding\\nsha256_hex(body_bytes)",
  "rules": [
    "o segredo de teste e a sequencia de 32 bytes 00..1f, nao o texto hexadecimal em UTF-8",
    "o corpo e convertido em UTF-8 e hasheado nos bytes exatos, sem parse ou reserializacao",
    "a string usa LF entre exatamente dez linhas e nao possui LF final",
    "key_id e IDs UUID emitidos/aceitos na v1 usam UUIDv7 canonico minusculo",
    "Content-Type canonico e application/json e Content-Encoding canonico e vazio",
    "o MAC e hexadecimal minusculo de 64 caracteres"
  ],
  "input": {
    "secret_hex": "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
    "key_id": "01996f2a-1111-7000-8000-000000000001",
    "method": "POST",
    "path": "/v1/assessments/01996f2a-3333-7000-8000-000000000003/customer-actions",
    "timestamp": 1787616000,
    "signed_id": {
      "name": "assessment_id",
      "value": "01996f2a-3333-7000-8000-000000000003"
    },
    "attempt_id": {
      "name": "request_id",
      "value": "01996f2a-2222-7000-8000-000000000002"
    },
    "content_type": "application/json",
    "content_encoding": "",
    "body_utf8": "{\"schema_version\":\"customer-action.v1\",\"external_action_id\":\"action_0001\",\"idempotency_key\":\"idem_action_0001\",\"action\":\"ALLOWED\",\"basis\":\"ASSESSMENT\",\"occurred_at\":\"2026-08-25T00:00:00Z\",\"reason_code\":\"FOLLOWED_FTID_RECOMMENDATION\"}"
  },
  "intermediate": {
    "sha256_hex_body": "60cd65fa2aceae97634bafbe8038b789ad2d59235c3baee763cd056e6e232e33",
    "canonical_string": "FTID-HMAC-SHA256-V1\n01996f2a-1111-7000-8000-000000000001\nPOST\n/v1/assessments/01996f2a-3333-7000-8000-000000000003/customer-actions\n1787616000\nassessment_id:01996f2a-3333-7000-8000-000000000003\nrequest_id:01996f2a-2222-7000-8000-000000000002\napplication/json\n\n60cd65fa2aceae97634bafbe8038b789ad2d59235c3baee763cd056e6e232e33"
  },
  "expected_mac": "b9e59b166f083875f1bfc9b5b963adf0b5da9c7a2d0edcde80bb8aa123b56d44",
  "headers": {
    "Content-Type": "application/json",
    "X-FTID-Assessment-Id": "01996f2a-3333-7000-8000-000000000003",
    "X-FTID-Request-Id": "01996f2a-2222-7000-8000-000000000002",
    "X-FTID-Signature": "v1=01996f2a-1111-7000-8000-000000000001:b9e59b166f083875f1bfc9b5b963adf0b5da9c7a2d0edcde80bb8aa123b56d44",
    "X-FTID-Timestamp": "1787616000"
  }
}