{"contract_version":"example.v1","tool_id":"crm.set_case_status.v1","purpose":"Offline demonstration of a governed write to a fake in-memory CRM.","arguments_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","additionalProperties":false,"required":["case_id","new_status"],"properties":{"case_id":{"type":"string","pattern":"^case_[0-9]{1,12}$"},"new_status":{"type":"string","enum":["resolved","escalated"]}}},"trusted_context":{"principal_source":"Application boundary, never model-supplied arguments","allowed_actor":"support_agent","required_scope":"cases:write","resource_scope":"Current tenant only"},"approval":{"source":"Trusted in-memory fixture store","required_for_new_execution":true,"single_use_for_new_execution":true,"binding":["tool version","actor","tenant","exact arguments"],"expires_at":"Compared with gateway clock before a new write"},"idempotency":{"required":true,"scope":["tenant","actor","request key"],"same_key_same_action":"Return saved result after current authority check; no new execution","same_key_different_action":"Reject with idempotency_conflict","atomicity":"Single-process lock over fake mutation and in-memory replay record"},"limits":["Not a production identity, approval, policy or audit service","No durable replay protection across process restart","No distributed transaction or external side-effect guarantee","The Python example explicitly validates this fixed argument shape; it is not a general JSON Schema validator"]}