{
  "debrief_id": "DBR-IARPG-MSN-001-001",
  "mission_id": "IARPG-MSN-001",
  "standard_version": "IARPG-OPS-2",
  "profile_version": "2.0.4-wip",
  "completed_utc": "2026-07-19T16:42:07Z",
  "objective_status": "partial-success",
  "observed_facts": [
    "A privileged export event exists in the reviewed access record."
  ],
  "source_reports": [
    "A declared source reported that the export followed an emergency maintenance request."
  ],
  "interpretations": [
    "The maintenance request may explain the access path but not the full exported scope."
  ],
  "hypotheses": [
    "Automation failure remains plausible.",
    "Deliberate disclosure remains plausible.",
    "Fabricated traffic intended to trigger a purge remains plausible."
  ],
  "assessments": [
    "The leading explanation remains automation or authorized activity with incomplete records; confidence moderate."
  ],
  "decisions": [
    "Deliver findings with caveats and preserve the source compartment."
  ],
  "unresolved_contradictions": [
    "The maintenance schedule and access-record timestamp differ by eleven minutes."
  ],
  "missing_evidence": [
    "Original signed maintenance authorization."
  ],
  "compromise_indicators": [
    "One unacknowledged role handoff."
  ],
  "authority_consequences": [
    "Customer receives a cautionary assessment rather than a culpability finding."
  ],
  "follow_on_requirements": [
    "Acquire the signed authorization and independent network clock record."
  ],
  "source_protection_actions": [
    "Retain the source identifier inside the Handler compartment."
  ],
  "cover_recovery_actions": [
    "Suspend use of the maintenance-inspector cover for one cycle."
  ],
  "lessons_learned": [
    "Require handoff acknowledgement before delivery."
  ],
  "source_impact": "Source remains viable with reduced exposure.",
  "cover_impact": "Cover integrity reduced but recoverable.",
  "access_status": "Temporary access preserved.",
  "evidence_acquired": [
    "EV-001",
    "EV-002",
    "EV-003"
  ],
  "unresolved_uncertainty": [
    "Original authorization not yet acquired."
  ],
  "reason_codes": [
    "PARTIAL_SUCCESS",
    "EVIDENCE_GAP",
    "SOURCE_PROTECTION"
  ],
  "event_links": [
    "SIM-EVT-001",
    "SIM-EVT-004",
    "SIM-EVT-008"
  ]
}
