@atmem/architect 0.2.1 → 0.2.3

package/src/reference-example/project.json

@@ -0,0 +1,1440 @@
+{
+  "format": "atmem.ai-architect.project",
+  "formatVersion": "2.3.0",
+  "meta": {
+    "id": "atmem-ai-ready-example-v1",
+    "name": "AI knowledge assistant \u2014 complete example",
+    "createdAt": "2026-11-07T05:57:22.965Z",
+    "updatedAt": "2026-11-15T09:19:00.853Z",
+    "revision": 2,
+    "generator": "atmem-ai-architect 0.2.1"
+  },
+  "design": {
+    "provider": "aws",
+    "nodes": [
+      {
+        "id": "user",
+        "type": "resource",
+        "position": {
+          "x": 50,
+          "y": 60
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "Staff browser",
+          "provider": "tools",
+          "kind": "tool",
+          "description": "Staff member's browser. This is a client reference, not a provisioned service.",
+          "config": {
+            "region": "To be selected",
+            "classification": "Internal",
+            "timeout": 5000
+          },
+          "origin": "existing",
+          "binding": "web-browser",
+          "role": "human"
+        }
+      },
+      {
+        "id": "web",
+        "type": "resource",
+        "position": {
+          "x": 470,
+          "y": 60
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "Web app",
+          "provider": "aws",
+          "kind": "output",
+          "description": "Browser channel (required scope). It owns private S3 assets and CloudFront access control, uses authorization code with PKCE, and shows answers with citations.",
+          "config": {
+            "region": "ap-southeast-2",
+            "classification": "Internal",
+            "timeout": 5000
+          },
+          "origin": "proposed",
+          "poc": true,
+          "implementation": "rag-web-app",
+          "role": "app",
+          "service": "Amazon CloudFront"
+        }
+      },
+      {
+        "id": "cognito",
+        "type": "resource",
+        "position": {
+          "x": 890,
+          "y": 135
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "User sign-in",
+          "provider": "aws",
+          "kind": "guard",
+          "description": "User pool with admin-created users, required software-token MFA, an access-token scope, and catalog-backed identity and employee-region mapping. Users are onboarded with the operator tool.",
+          "config": {
+            "region": "ap-southeast-2",
+            "classification": "Confidential",
+            "timeout": 5000
+          },
+          "origin": "proposed",
+          "poc": true,
+          "implementation": "rag-user-pool",
+          "service": "Amazon Cognito"
+        }
+      },
+      {
+        "id": "api",
+        "type": "resource",
+        "position": {
+          "x": 1310,
+          "y": 60
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "RAG API",
+          "provider": "aws",
+          "kind": "tool",
+          "description": "Authenticated, bounded HTTP API with a JWT browser route. There is no anonymous access. Access logs support the audit trail.",
+          "config": {
+            "region": "ap-southeast-2",
+            "classification": "Internal",
+            "timeout": 5000
+          },
+          "origin": "proposed",
+          "poc": true,
+          "implementation": "iam-rag-api",
+          "service": "Amazon API Gateway"
+        }
+      },
+      {
+        "id": "rag-fn",
+        "type": "resource",
+        "position": {
+          "x": 1730,
+          "y": 60
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "Keyword RAG function",
+          "provider": "aws",
+          "kind": "agent",
+          "description": "Keyword retrieval with ACL and region filtering and revision rechecks, then a cited answer that is returned through the API. It owns its execution role, logs, version and alias. Unknown identities fail closed.",
+          "config": {
+            "memoryMb": 256,
+            "region": "ap-southeast-2",
+            "classification": "Confidential",
+            "timeout": 5000
+          },
+          "origin": "proposed",
+          "poc": true,
+          "implementation": "bounded-keyword-rag",
+          "service": "AWS Lambda"
+        }
+      },
+      {
+        "id": "catalog",
+        "type": "resource",
+        "position": {
+          "x": 2150,
+          "y": 340
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "Document catalog",
+          "provider": "aws",
+          "kind": "resource",
+          "description": "Holds up to 100 small UTF-8 documents with explicit ACLs, revisions, tombstones for deletes and a sync checkpoint. Writes are conditional.",
+          "config": {
+            "region": "ap-southeast-2",
+            "classification": "Confidential",
+            "timeout": 5000
+          },
+          "origin": "proposed",
+          "poc": true,
+          "implementation": "bounded-rag-catalog",
+          "service": "Amazon DynamoDB"
+        }
+      },
+      {
+        "id": "model",
+        "type": "resource",
+        "position": {
+          "x": 2150,
+          "y": 50
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "Foundation model",
+          "provider": "aws",
+          "kind": "predict",
+          "description": "Existing Bedrock direct model, selected by a required model-ID input. Model access, Converse support, quotas and regional availability are not yet verified.",
+          "config": {
+            "modelId": "amazon.nova-lite-v1:0",
+            "region": "ap-southeast-2",
+            "classification": "Confidential",
+            "timeout": 5000
+          },
+          "origin": "existing",
+          "binding": "aws-bedrock-model",
+          "role": "llm",
+          "service": "Amazon Bedrock"
+        }
+      },
+      {
+        "id": "sp-src",
+        "type": "resource",
+        "position": {
+          "x": 1730,
+          "y": 340
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "SharePoint (test server)",
+          "provider": "tools",
+          "kind": "source",
+          "description": "Existing SharePoint, represented here by the approved local normalized source-contract test server. It provides snapshots, ACLs, updates and deletes. The native API and real-tenant compatibility are not verified.",
+          "config": {
+            "region": "To be selected",
+            "classification": "Confidential",
+            "timeout": 5000
+          },
+          "origin": "existing",
+          "binding": "normalized-source-contract"
+        }
+      },
+      {
+        "id": "cf-src",
+        "type": "resource",
+        "position": {
+          "x": 1730,
+          "y": 620
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "Confluence (test server)",
+          "provider": "tools",
+          "kind": "source",
+          "description": "Existing Confluence, represented here by the approved local normalized source-contract test server. The native API and real-tenant compatibility are not verified.",
+          "config": {
+            "region": "To be selected",
+            "classification": "Confidential",
+            "timeout": 5000
+          },
+          "origin": "existing",
+          "binding": "normalized-source-contract"
+        }
+      },
+      {
+        "id": "teams-note",
+        "type": "resource",
+        "position": {
+          "x": 50,
+          "y": 340
+        },
+        "data": {
+          "inputPosition": "left",
+          "outputPosition": "right",
+          "label": "Later: Microsoft Teams channel",
+          "provider": "tools",
+          "kind": "note",
+          "description": "Teams is a deferred channel for a later phase. It is not part of this deployment.",
+          "config": {
+            "region": "To be selected",
+            "classification": "Internal",
+            "timeout": 5000
+          },
+          "origin": "proposed"
+        }
+      }
+    ],
+    "edges": [
+      {
+        "id": "e-user-web",
+        "source": "user",
+        "target": "web",
+        "type": "smoothstep",
+        "label": "HTTPS",
+        "integration": "browser-https"
+      },
+      {
+        "id": "e-web-cognito",
+        "source": "web",
+        "target": "cognito",
+        "type": "smoothstep",
+        "label": "sign-in (PKCE + MFA)",
+        "integration": "oauth-pkce"
+      },
+      {
+        "id": "e-cognito-api",
+        "source": "cognito",
+        "target": "api",
+        "type": "smoothstep",
+        "label": "JWT authorizer",
+        "integration": "jwt-authorizer"
+      },
+      {
+        "id": "e-web-api",
+        "source": "web",
+        "target": "api",
+        "type": "smoothstep",
+        "label": "question \u2192 cited answer",
+        "integration": "web-rag-api"
+      },
+      {
+        "id": "e-api-fn",
+        "source": "api",
+        "target": "rag-fn",
+        "type": "smoothstep",
+        "label": "invoke",
+        "integration": "http-api-lambda"
+      },
+      {
+        "id": "e-fn-catalog",
+        "source": "rag-fn",
+        "target": "catalog",
+        "type": "smoothstep",
+        "label": "ACL-filtered keyword read",
+        "integration": "lambda-catalog-read"
+      },
+      {
+        "id": "e-fn-model",
+        "source": "rag-fn",
+        "target": "model",
+        "type": "smoothstep",
+        "label": "Converse (grounded prompt)",
+        "integration": "bedrock-converse"
+      },
+      {
+        "id": "e-sp-catalog",
+        "source": "sp-src",
+        "target": "catalog",
+        "type": "smoothstep",
+        "label": "snapshot sync, ACLs, deletes",
+        "integration": "source-catalog-sync"
+      },
+      {
+        "id": "e-cf-catalog",
+        "source": "cf-src",
+        "target": "catalog",
+        "type": "smoothstep",
+        "label": "snapshot sync, ACLs, deletes",
+        "integration": "source-catalog-sync"
+      }
+    ]
+  },
+  "discovery": {
+    "problem": "Cited answers from approved SharePoint/Confluence documents through a web app. Preserve permissions, updates and deletes. Include recovery and audit. Teams comes later.",
+    "brief": {
+      "application": "Design an AWS knowledge assistant that reads approved documents from existing SharePoint and Confluence systems and provides cited answers through a web application, with Teams as a later channel. Preserve source permissions, updates and deletes. For this stage use the approved local normalized source-contract test servers and bounded keyword retrieval. Keep the requested web application as required scope; an HTTP API alone does not complete that channel. Treat those existing systems as external dependencies; include recovery and audit behavior without claiming native vendor API or real tenant compatibility. Use AWS for this synthetic qualification design. Propose Sydney as a candidate region, but do not record that as an approved deployment region. Draw the architecture and identify the next missing decision. This is a test design, not an instruction to deploy.",
+      "data": "Review this same architecture and its generated Terraform. Keep the original scenario scope and preserve valid component IDs and existing systems. Validation findings: [{\"id\":\"application-not-qualified\",\"owner\":\"application\",\"message\":\"No executable application acceptance evidence for this artifact.\"},{\"id\":\"provider-schema-unverified\",\"owner\":\"validation\",\"message\":\"Run provider-schema validation against this exact export.\"},{\"id\":\"requirements-review-unverified\",\"owner\":\"review\",\"message\":\"Review requirements against emitted configuration, including identity, limits, region, costs and cleanup.\"}]. Correct architecture defects through a proposal where supported. For missing native resources, application code or integrations, explain the product implementation gap and next concrete engineering action; do not claim a diagram edit implemented it. Do not remove required components, weaken acceptance checks or clear unfinished-work gates to obtain a pass. Do not claim tests ran or request deployment. Identify what remains unverified.",
+      "users": "",
+      "systems": "",
+      "quality": "",
+      "cloud": "AWS",
+      "budget": ""
+    },
+    "useCases": [
+      {
+        "id": "example-browser",
+        "title": "Signed-in browser answers with citations and source permissions",
+        "value": "High",
+        "risk": "Medium",
+        "fit": "High",
+        "verdict": "Pursue",
+        "reason": "Implemented by the generated web/API/catalog/model path; local tests cover cited answers and authorization."
+      },
+      {
+        "id": "example-sync",
+        "title": "Local normalized source snapshots, updates and deletes",
+        "value": "High",
+        "risk": "Medium",
+        "fit": "High",
+        "verdict": "Pursue",
+        "reason": "The bundled contract fixtures qualify the normalized interface. Real Microsoft/Atlassian tenants are separate destination integration work."
+      },
+      {
+        "id": "example-native-tenants",
+        "title": "Native SharePoint and Confluence tenant adapters",
+        "value": "High",
+        "risk": "High",
+        "fit": "Medium",
+        "verdict": "Park",
+        "reason": "The original example explicitly uses approved normalized local test servers. No native tenant or permissions compatibility is claimed."
+      },
+      {
+        "id": "example-teams",
+        "title": "Microsoft Teams channel",
+        "value": "Medium",
+        "risk": "Medium",
+        "fit": "Medium",
+        "verdict": "Park",
+        "reason": "Retained from the original deferred-channel note; not part of this example."
+      }
+    ],
+    "facts": [
+      {
+        "id": "fact-6ea5a2af",
+        "name": "cloud.preference",
+        "value": "aws",
+        "unit": "provider",
+        "text": "Design an AWS knowledge assistant that reads approved documents from existing SharePoint and Confluence systems and provides cited answers through a web application, with Teams as a later channel. Preserve source permissions, updates and deletes. For this stage use the approved local normalized sour",
+        "madeAt": "2026-11-07"
+      },
+      {
+        "id": "example-budget",
+        "name": "budget.per_month",
+        "value": 20,
+        "unit": "USD/month",
+        "text": "Illustrative example-author budget target, not a client-approved budget.",
+        "madeAt": "2026-11-15"
+      }
+    ],
+    "workflow": "document-processing",
+    "asked": [
+      "knowledge-assistant:0"
+    ],
+    "lastAsked": {
+      "id": "document-processing:0",
+      "topic": "data",
+      "question": "What kinds of documents arrive, and how many a month?",
+      "beginner": "For example \u201cinvoices, about 3,000 a month, mostly PDF\u201d.",
+      "why": "It shapes the Document extraction design."
+    }
+  },
+  "requirements": [
+    {
+      "id": "req-104d29bf",
+      "kind": "functional",
+      "category": "other",
+      "statement": "Every answer shows its sources",
+      "basis": " Confirmed by the prepared-example author for the bounded local source-contract sample; not a client approval.",
+      "priority": "should",
+      "status": "open",
+      "source": "user",
+      "links": [
+        "web",
+        "api",
+        "rag-fn",
+        "model"
+      ]
+    },
+    {
+      "id": "ai-permission-trimmed-answers",
+      "kind": "nonfunctional",
+      "category": "security",
+      "statement": "Answers may use only documents the signed-in user is allowed to open, based on explicit ACLs copied from the source snapshot. Unknown identities or missing ACLs fail closed.",
+      "rationale": "Without this, the assistant could reveal restricted content. The test servers do not prove native group expansion or inherited permissions, so production stays blocked until those are verified.",
+      "basis": "User: \"Preserve source permissions, updates and deletes.\" Confirmed by the prepared-example author for the bounded local source-contract sample; not a client approval.",
+      "priority": "must",
+      "status": "open",
+      "source": "user",
+      "links": [
+        "catalog",
+        "rag-fn",
+        "sp-src",
+        "cf-src",
+        "cognito"
+      ]
+    },
+    {
+      "id": "ai-source-change-sync",
+      "kind": "functional",
+      "category": "reliability",
+      "statement": "Source updates and deletes reach the catalog through conditional writes and a recovery checkpoint, and revisions are rechecked before an answer is returned.",
+      "rationale": "Stale or deleted documents could otherwise be cited. The checkpoint lets an interrupted sync resume without losing changes.",
+      "basis": "User: \"Preserve source permissions, updates and deletes\" and \"include recovery and audit behavior\". Confirmed by the prepared-example author for the bounded local source-contract sample; not a client approval.",
+      "priority": "must",
+      "status": "open",
+      "source": "user",
+      "links": [
+        "sp-src",
+        "cf-src",
+        "catalog",
+        "rag-fn"
+      ]
+    },
+    {
+      "id": "ai-audit-trail",
+      "kind": "nonfunctional",
+      "category": "compliance",
+      "statement": "Proposed: record who asked, which documents were cited and sync outcomes in logs with a retention period to be agreed.",
+      "rationale": "An audit trail lets us show which sources supported an answer and investigate access questions. The retention period is still unknown.",
+      "basis": "User: \"include recovery and audit behavior\". Confirmed by the prepared-example author for the bounded local source-contract sample; not a client approval.",
+      "priority": "should",
+      "status": "open",
+      "source": "user",
+      "links": [
+        "rag-fn",
+        "api",
+        "sp-src",
+        "cf-src"
+      ]
+    },
+    {
+      "id": "example-australia",
+      "kind": "nonfunctional",
+      "category": "compliance",
+      "statement": "Example application data, model processing and audit logs stay in the selected Australia/Sydney region; source fixtures run locally.",
+      "basis": "Prepared-example author default; destination account/residency verification remains required.",
+      "priority": "must",
+      "status": "open",
+      "source": "user",
+      "links": [
+        "web",
+        "cognito",
+        "api",
+        "rag-fn",
+        "catalog",
+        "model"
+      ]
+    }
+  ],
+  "assumptions": [
+    {
+      "id": "example-usage",
+      "statement": "Monthly sample: 100 users, 10,000 answers, 2,000 input and 1,000 output tokens per answer, 256 MiB ARM Lambda for 5 seconds; no free-tier credits.",
+      "source": "user",
+      "owner": "",
+      "links": [],
+      "madeAt": "2026-11-15"
+    },
+    {
+      "id": "example-cost-scope",
+      "statement": "Incremental AWS costs only. Browser and existing normalized local source fixtures carry no new AWS resource cost. SaaS licenses, tax, support plans and labor are outside this sample.",
+      "source": "user",
+      "owner": "",
+      "links": [],
+      "madeAt": "2026-11-15"
+    }
+  ],
+  "openQuestions": [],
+  "decisions": [
+    {
+      "id": "adr-001",
+      "subject": "platform.cloud",
+      "title": "platform.cloud",
+      "owner": "",
+      "status": "Accepted",
+      "date": "2026-11-07",
+      "context": "User statement: Use AWS for this synthetic qualification design.",
+      "options": "",
+      "decision": "aws",
+      "consequences": "",
+      "revision": 1,
+      "supersedes": null,
+      "supersededBy": null,
+      "reason": "Chosen in the conversation"
+    },
+    {
+      "id": "adr-002",
+      "subject": "design.aws-bounded-keyword-rag-knowledge-assistant-qualification-design",
+      "title": "AWS bounded keyword RAG knowledge assistant (qualification design)",
+      "owner": "",
+      "status": "Superseded",
+      "date": "2026-11-07",
+      "context": "Scope: a web app with Cognito sign-in (PKCE and MFA) calls an IAM/JWT-protected HTTP API. The API calls a bounded keyword-RAG Lambda, which reads a DynamoDB catalog and calls an existing Bedrock model to produce cited answers. SharePoint and Confluence are existing external systems, reached only through the approved local normalized source-contract test servers. This does not verify native vendor APIs, real tenants, group expansion or inherited permissions, so production stays blocked. Teams is deferred and shown as a note. Assumptions: keyword retrieval, not vector search; up to 100 small UTF-8 documents. The region is unselected (Sydney ap-southeast-2 is only a candidate), and the model ID, quotas and availability are unverified. Nothing is deployed.",
+      "options": "",
+      "decision": "Drawn while talking as design revision 2.",
+      "consequences": "",
+      "revision": 1,
+      "supersedes": null,
+      "supersededBy": "example-region",
+      "reason": ""
+    },
+    {
+      "id": "example-region",
+      "subject": "cloud.region",
+      "title": "cloud.region",
+      "owner": "AtMem example defaults",
+      "status": "Accepted",
+      "date": "2026-11-15",
+      "context": "Sydney is selected by the example author for this sample, not as approval for a client deployment.",
+      "options": "",
+      "decision": "ap-southeast-2",
+      "consequences": "",
+      "revision": 1,
+      "supersedes": null,
+      "supersededBy": null,
+      "reason": "Prepared example configuration"
+    },
+    {
+      "id": "example-country",
+      "subject": "data.country",
+      "title": "data.country",
+      "owner": "AtMem example defaults",
+      "status": "Accepted",
+      "date": "2026-11-15",
+      "context": "Example data location; source fixtures run locally. Production residency requires destination review.",
+      "options": "",
+      "decision": "Australia",
+      "consequences": "",
+      "revision": 1,
+      "supersedes": null,
+      "supersededBy": null,
+      "reason": "Prepared example configuration"
+    },
+    {
+      "id": "example-model",
+      "subject": "model.bedrock",
+      "title": "model.bedrock",
+      "owner": "AtMem example defaults",
+      "status": "Accepted",
+      "date": "2026-11-15",
+      "context": "Direct Nova Lite in Sydney. Published regional/Converse support reviewed; account access and quotas remain destination checks.",
+      "options": "",
+      "decision": "amazon.nova-lite-v1:0",
+      "consequences": "",
+      "revision": 1,
+      "supersedes": null,
+      "supersededBy": null,
+      "reason": "Prepared example configuration"
+    },
+    {
+      "id": "example-retention",
+      "subject": "logs.retention",
+      "title": "logs.retention",
+      "owner": "AtMem example defaults",
+      "status": "Accepted",
+      "date": "2026-11-15",
+      "context": "CloudWatch retention for this bounded example. Confirm real client policy before deployment.",
+      "options": "",
+      "decision": "30 days",
+      "consequences": "",
+      "revision": 1,
+      "supersedes": null,
+      "supersededBy": null,
+      "reason": "Prepared example configuration"
+    }
+  ],
+  "estimate": {
+    "projectSize": "small",
+    "details": [
+      {
+        "id": "example-charge-1",
+        "componentId": "user",
+        "description": "Existing staff browser",
+        "quantity": 1,
+        "price": 0,
+        "unit": "existing reference",
+        "currency": "USD",
+        "source": "Example scope: existing browser or local normalized source-contract fixture; no incremental AWS resource.",
+        "date": "2026-11-15",
+        "region": "Local reference",
+        "service": "Existing reference"
+      },
+      {
+        "id": "example-charge-2",
+        "componentId": "web",
+        "description": "CloudFront Australia HTTPS requests",
+        "quantity": 10000,
+        "price": 1.25e-06,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudFront/current/index.json#XXEA4SCG9TSQCDF2",
+        "date": "2026-11-15",
+        "region": "Australia / Global",
+        "service": "AmazonCloudFront"
+      },
+      {
+        "id": "example-charge-3",
+        "componentId": "web",
+        "description": "CloudFront Australia internet egress (GB)",
+        "quantity": 10,
+        "price": 0.114,
+        "unit": "GB",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudFront/current/index.json#8JNNPNBQD9DSHV5K",
+        "date": "2026-11-15",
+        "region": "Australia / Global",
+        "service": "AmazonCloudFront"
+      },
+      {
+        "id": "example-charge-4",
+        "componentId": "web",
+        "description": "S3 assets and all retained object versions (GB-month)",
+        "quantity": 1,
+        "price": 0.025,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/ap-southeast-2/index.json#5QVJMK36NJC9G6DC",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonS3"
+      },
+      {
+        "id": "example-charge-5",
+        "componentId": "web",
+        "description": "S3 asset uploads and listing requests",
+        "quantity": 1000,
+        "price": 5.5e-06,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/ap-southeast-2/index.json#U4DFWUZRRJK76GFK",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonS3"
+      },
+      {
+        "id": "example-charge-6",
+        "componentId": "web",
+        "description": "S3 origin GET requests",
+        "quantity": 10000,
+        "price": 4.4e-07,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/ap-southeast-2/index.json#ZE67FX933AEQ43H2",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonS3"
+      },
+      {
+        "id": "example-charge-7",
+        "componentId": "cognito",
+        "description": "Cognito Essentials monthly active users",
+        "quantity": 100,
+        "price": 0.015,
+        "unit": "CognitoUserPoolsMAU",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCognito/current/ap-southeast-2/index.json#JVU799QJR37664RR",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCognito"
+      },
+      {
+        "id": "example-charge-8",
+        "componentId": "api",
+        "description": "HTTP API requests",
+        "quantity": 10000,
+        "price": 1.29e-06,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonApiGateway/current/ap-southeast-2/index.json#GHZQQPU8NMGFKBQZ",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonApiGateway"
+      },
+      {
+        "id": "example-charge-9",
+        "componentId": "api",
+        "description": "API access log ingestion (GB)",
+        "quantity": 0.5,
+        "price": 0.67,
+        "unit": "GB",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#VSJ57WXDQXM2VKQK",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch"
+      },
+      {
+        "id": "example-charge-10",
+        "componentId": "api",
+        "description": "API access log storage (GB-month)",
+        "quantity": 0.5,
+        "price": 0.033,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#SXS5MH23MB3SHA9C",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch"
+      },
+      {
+        "id": "example-charge-11",
+        "componentId": "rag-fn",
+        "description": "Lambda requests",
+        "quantity": 10000,
+        "price": 2e-07,
+        "unit": "Request",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AWSLambda/current/ap-southeast-2/index.json#ZW6UHD4Q6EPUCZWU",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AWSLambda"
+      },
+      {
+        "id": "example-charge-12",
+        "componentId": "rag-fn",
+        "description": "Lambda ARM 256 MiB \u00d7 5 seconds \u00d7 10,000 answers",
+        "quantity": 12500,
+        "price": 1.33334e-05,
+        "unit": "Lambda-GB-Second",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AWSLambda/current/ap-southeast-2/index.json#KDEJ26SV7QK2N7DW",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AWSLambda"
+      },
+      {
+        "id": "example-charge-13",
+        "componentId": "rag-fn",
+        "description": "Lambda log ingestion (GB)",
+        "quantity": 0.5,
+        "price": 0.67,
+        "unit": "GB",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#VSJ57WXDQXM2VKQK",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch"
+      },
+      {
+        "id": "example-charge-14",
+        "componentId": "rag-fn",
+        "description": "Lambda log storage (GB-month)",
+        "quantity": 0.5,
+        "price": 0.033,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#SXS5MH23MB3SHA9C",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch"
+      },
+      {
+        "id": "example-charge-15",
+        "componentId": "catalog",
+        "description": "DynamoDB read request units; bounded scans and identity reads",
+        "quantity": 1050000,
+        "price": 1.425e-07,
+        "unit": "ReadRequestUnits",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#BQCZ4TYN2JVHEH4Z",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB"
+      },
+      {
+        "id": "example-charge-16",
+        "componentId": "catalog",
+        "description": "DynamoDB conditional write request units",
+        "quantity": 10000,
+        "price": 7.1e-07,
+        "unit": "WriteRequestUnits",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#X43FXEDHFRVHHYQR",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB"
+      },
+      {
+        "id": "example-charge-17",
+        "componentId": "catalog",
+        "description": "DynamoDB standard storage; free allowance assumed consumed",
+        "quantity": 0.1,
+        "price": 0.285,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#NF4X2QKU7Y7QVY5C",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB"
+      },
+      {
+        "id": "example-charge-18",
+        "componentId": "catalog",
+        "description": "DynamoDB point-in-time recovery storage (GB-month)",
+        "quantity": 0.1,
+        "price": 0.228,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#KHP6CW3RY2FP49W3",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB"
+      },
+      {
+        "id": "example-charge-19",
+        "componentId": "model",
+        "description": "Nova Lite input tokens (1,000-token units)",
+        "quantity": 20000,
+        "price": 6.3e-05,
+        "unit": "1K tokens",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonBedrock/current/ap-southeast-2/index.json#VE26ZEBZ95PNKV6H",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonBedrock"
+      },
+      {
+        "id": "example-charge-20",
+        "componentId": "model",
+        "description": "Nova Lite output tokens (1,000-token units)",
+        "quantity": 10000,
+        "price": 0.000252,
+        "unit": "1K tokens",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonBedrock/current/ap-southeast-2/index.json#8QD3UNYB3WE6E2YA",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonBedrock"
+      },
+      {
+        "id": "example-charge-21",
+        "componentId": "sp-src",
+        "description": "Existing local SharePoint contract fixture",
+        "quantity": 1,
+        "price": 0,
+        "unit": "existing reference",
+        "currency": "USD",
+        "source": "Example scope: existing browser or local normalized source-contract fixture; no incremental AWS resource.",
+        "date": "2026-11-15",
+        "region": "Local reference",
+        "service": "Existing reference"
+      },
+      {
+        "id": "example-charge-22",
+        "componentId": "cf-src",
+        "description": "Existing local Confluence contract fixture",
+        "quantity": 1,
+        "price": 0,
+        "unit": "existing reference",
+        "currency": "USD",
+        "source": "Example scope: existing browser or local normalized source-contract fixture; no incremental AWS resource.",
+        "date": "2026-11-15",
+        "region": "Local reference",
+        "service": "Existing reference"
+      }
+    ],
+    "usage": {
+      "requests_per_month": 10000,
+      "tokens_per_request": 3000,
+      "data_gb": 0.1,
+      "events_per_month": 10000,
+      "endpoint_hours": 0,
+      "training_hours": 0
+    },
+    "prices": {},
+    "low": 0.7,
+    "high": 1.5
+  },
+  "extensions": {
+    "requirementNumbers": {
+      "req-104d29bf": 1,
+      "drv-data-access": 2,
+      "drv-data-location": 3,
+      "ai-permission-trimmed-answers": 4,
+      "ai-source-change-sync": 5,
+      "ai-audit-trail": 6
+    },
+    "choices": {},
+    "conceptSig": null,
+    "originalExampleRequirements": [
+      {
+        "id": "req-104d29bf",
+        "kind": "functional",
+        "category": "other",
+        "statement": "Every answer shows its sources",
+        "priority": "should",
+        "status": "open",
+        "source": "user",
+        "links": []
+      },
+      {
+        "id": "ai-permission-trimmed-answers",
+        "kind": "nonfunctional",
+        "category": "security",
+        "statement": "Answers may use only documents the signed-in user is allowed to open, based on explicit ACLs copied from the source snapshot. Unknown identities or missing ACLs fail closed.",
+        "rationale": "Without this, the assistant could reveal restricted content. The test servers do not prove native group expansion or inherited permissions, so production stays blocked until those are verified.",
+        "basis": "User: \"Preserve source permissions, updates and deletes.\"",
+        "priority": "must",
+        "status": "open",
+        "source": "agent",
+        "links": [
+          "catalog",
+          "rag-fn",
+          "sp-src",
+          "cf-src",
+          "cognito"
+        ]
+      },
+      {
+        "id": "ai-source-change-sync",
+        "kind": "functional",
+        "category": "reliability",
+        "statement": "Source updates and deletes reach the catalog through conditional writes and a recovery checkpoint, and revisions are rechecked before an answer is returned.",
+        "rationale": "Stale or deleted documents could otherwise be cited. The checkpoint lets an interrupted sync resume without losing changes.",
+        "basis": "User: \"Preserve source permissions, updates and deletes\" and \"include recovery and audit behavior\".",
+        "priority": "must",
+        "status": "open",
+        "source": "agent",
+        "links": [
+          "sp-src",
+          "cf-src",
+          "catalog",
+          "rag-fn"
+        ]
+      },
+      {
+        "id": "ai-audit-trail",
+        "kind": "nonfunctional",
+        "category": "compliance",
+        "statement": "Proposed: record who asked, which documents were cited and sync outcomes in logs with a retention period to be agreed.",
+        "rationale": "An audit trail lets us show which sources supported an answer and investigate access questions. The retention period is still unknown.",
+        "basis": "User: \"include recovery and audit behavior\".",
+        "priority": "should",
+        "status": "open",
+        "source": "agent",
+        "links": [
+          "rag-fn",
+          "api",
+          "sp-src",
+          "cf-src"
+        ]
+      }
+    ],
+    "preparedExample": {
+      "version": 1,
+      "owner": "AtMem example author",
+      "scope": "Bounded AWS knowledge assistant with local normalized source fixtures",
+      "priceDate": "2026-11-15",
+      "priceLedger": "evidence/price-ledger.json",
+      "cloudDeployment": "not_run",
+      "assumptionNotice": "Sample configuration and usage, not client approval or a quote."
+    },
+    "priceLedger": [
+      {
+        "id": "example-charge-1",
+        "componentId": "user",
+        "description": "Existing staff browser",
+        "quantity": 1,
+        "price": 0,
+        "unit": "existing reference",
+        "currency": "USD",
+        "source": "Example scope: existing browser or local normalized source-contract fixture; no incremental AWS resource.",
+        "date": "2026-11-15",
+        "region": "Local reference",
+        "service": "Existing reference",
+        "note": "Existing paid tenant/license integrations are not part of this local contract example."
+      },
+      {
+        "id": "example-charge-2",
+        "componentId": "web",
+        "description": "CloudFront Australia HTTPS requests",
+        "quantity": 10000,
+        "price": 1.25e-06,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudFront/current/index.json#XXEA4SCG9TSQCDF2",
+        "date": "2026-11-15",
+        "region": "Australia / Global",
+        "service": "AmazonCloudFront",
+        "sku": "XXEA4SCG9TSQCDF2",
+        "meter": "XXEA4SCG9TSQCDF2.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "17e3e9aeb5add88d1f6ba78f7fdcfb2405a83a9388228adc46c8ae09da9ca2ce",
+        "note": ""
+      },
+      {
+        "id": "example-charge-3",
+        "componentId": "web",
+        "description": "CloudFront Australia internet egress (GB)",
+        "quantity": 10,
+        "price": 0.114,
+        "unit": "GB",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudFront/current/index.json#8JNNPNBQD9DSHV5K",
+        "date": "2026-11-15",
+        "region": "Australia / Global",
+        "service": "AmazonCloudFront",
+        "sku": "8JNNPNBQD9DSHV5K",
+        "meter": "8JNNPNBQD9DSHV5K.JRTCKXETXF.Q3Z75P77EN",
+        "sourceSha256": "17e3e9aeb5add88d1f6ba78f7fdcfb2405a83a9388228adc46c8ae09da9ca2ce",
+        "note": ""
+      },
+      {
+        "id": "example-charge-4",
+        "componentId": "web",
+        "description": "S3 assets and all retained object versions (GB-month)",
+        "quantity": 1,
+        "price": 0.025,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/ap-southeast-2/index.json#5QVJMK36NJC9G6DC",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonS3",
+        "sku": "5QVJMK36NJC9G6DC",
+        "meter": "5QVJMK36NJC9G6DC.JRTCKXETXF.PGHJ3S3EYE",
+        "sourceSha256": "77c43a9cc8b6c60ffb39c35ab05fe2526dea57fcfa838117a6b928de6e457af8",
+        "note": ""
+      },
+      {
+        "id": "example-charge-5",
+        "componentId": "web",
+        "description": "S3 asset uploads and listing requests",
+        "quantity": 1000,
+        "price": 5.5e-06,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/ap-southeast-2/index.json#U4DFWUZRRJK76GFK",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonS3",
+        "sku": "U4DFWUZRRJK76GFK",
+        "meter": "U4DFWUZRRJK76GFK.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "77c43a9cc8b6c60ffb39c35ab05fe2526dea57fcfa838117a6b928de6e457af8",
+        "note": ""
+      },
+      {
+        "id": "example-charge-6",
+        "componentId": "web",
+        "description": "S3 origin GET requests",
+        "quantity": 10000,
+        "price": 4.4e-07,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/ap-southeast-2/index.json#ZE67FX933AEQ43H2",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonS3",
+        "sku": "ZE67FX933AEQ43H2",
+        "meter": "ZE67FX933AEQ43H2.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "77c43a9cc8b6c60ffb39c35ab05fe2526dea57fcfa838117a6b928de6e457af8",
+        "note": ""
+      },
+      {
+        "id": "example-charge-7",
+        "componentId": "cognito",
+        "description": "Cognito Essentials monthly active users",
+        "quantity": 100,
+        "price": 0.015,
+        "unit": "CognitoUserPoolsMAU",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCognito/current/ap-southeast-2/index.json#JVU799QJR37664RR",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCognito",
+        "sku": "JVU799QJR37664RR",
+        "meter": "JVU799QJR37664RR.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "351bee050447d176bc15bd5e47856f9e62bf356717ffd971eb633cdc93f56dc1",
+        "note": ""
+      },
+      {
+        "id": "example-charge-8",
+        "componentId": "api",
+        "description": "HTTP API requests",
+        "quantity": 10000,
+        "price": 1.29e-06,
+        "unit": "Requests",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonApiGateway/current/ap-southeast-2/index.json#GHZQQPU8NMGFKBQZ",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonApiGateway",
+        "sku": "GHZQQPU8NMGFKBQZ",
+        "meter": "GHZQQPU8NMGFKBQZ.JRTCKXETXF.9NXBCPDZYR",
+        "sourceSha256": "a51f2b47a8203fb6bc0ff10d7d19c28e29b84981cb2fa9f33be3064e46386dc1",
+        "note": ""
+      },
+      {
+        "id": "example-charge-9",
+        "componentId": "api",
+        "description": "API access log ingestion (GB)",
+        "quantity": 0.5,
+        "price": 0.67,
+        "unit": "GB",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#VSJ57WXDQXM2VKQK",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch",
+        "sku": "VSJ57WXDQXM2VKQK",
+        "meter": "VSJ57WXDQXM2VKQK.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "41a1c77c3a62b48080d37dad91da22acf578f1d4d444de6786f1311802d78dcb",
+        "note": ""
+      },
+      {
+        "id": "example-charge-10",
+        "componentId": "api",
+        "description": "API access log storage (GB-month)",
+        "quantity": 0.5,
+        "price": 0.033,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#SXS5MH23MB3SHA9C",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch",
+        "sku": "SXS5MH23MB3SHA9C",
+        "meter": "SXS5MH23MB3SHA9C.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "41a1c77c3a62b48080d37dad91da22acf578f1d4d444de6786f1311802d78dcb",
+        "note": ""
+      },
+      {
+        "id": "example-charge-11",
+        "componentId": "rag-fn",
+        "description": "Lambda requests",
+        "quantity": 10000,
+        "price": 2e-07,
+        "unit": "Request",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AWSLambda/current/ap-southeast-2/index.json#ZW6UHD4Q6EPUCZWU",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AWSLambda",
+        "sku": "ZW6UHD4Q6EPUCZWU",
+        "meter": "ZW6UHD4Q6EPUCZWU.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "c05d058c61d691378a19a255a5087b4eea9a62dd8793aabf15338556ebb17a31",
+        "note": ""
+      },
+      {
+        "id": "example-charge-12",
+        "componentId": "rag-fn",
+        "description": "Lambda ARM 256 MiB \u00d7 5 seconds \u00d7 10,000 answers",
+        "quantity": 12500,
+        "price": 1.33334e-05,
+        "unit": "Lambda-GB-Second",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AWSLambda/current/ap-southeast-2/index.json#KDEJ26SV7QK2N7DW",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AWSLambda",
+        "sku": "KDEJ26SV7QK2N7DW",
+        "meter": "KDEJ26SV7QK2N7DW.JRTCKXETXF.6NBUNBXSC3",
+        "sourceSha256": "c05d058c61d691378a19a255a5087b4eea9a62dd8793aabf15338556ebb17a31",
+        "note": ""
+      },
+      {
+        "id": "example-charge-13",
+        "componentId": "rag-fn",
+        "description": "Lambda log ingestion (GB)",
+        "quantity": 0.5,
+        "price": 0.67,
+        "unit": "GB",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#VSJ57WXDQXM2VKQK",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch",
+        "sku": "VSJ57WXDQXM2VKQK",
+        "meter": "VSJ57WXDQXM2VKQK.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "41a1c77c3a62b48080d37dad91da22acf578f1d4d444de6786f1311802d78dcb",
+        "note": ""
+      },
+      {
+        "id": "example-charge-14",
+        "componentId": "rag-fn",
+        "description": "Lambda log storage (GB-month)",
+        "quantity": 0.5,
+        "price": 0.033,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json#SXS5MH23MB3SHA9C",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonCloudWatch",
+        "sku": "SXS5MH23MB3SHA9C",
+        "meter": "SXS5MH23MB3SHA9C.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "41a1c77c3a62b48080d37dad91da22acf578f1d4d444de6786f1311802d78dcb",
+        "note": ""
+      },
+      {
+        "id": "example-charge-15",
+        "componentId": "catalog",
+        "description": "DynamoDB read request units; bounded scans and identity reads",
+        "quantity": 1050000,
+        "price": 1.425e-07,
+        "unit": "ReadRequestUnits",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#BQCZ4TYN2JVHEH4Z",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB",
+        "sku": "BQCZ4TYN2JVHEH4Z",
+        "meter": "BQCZ4TYN2JVHEH4Z.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "d822fd12cc7b49c68f5a45d268e5bc3dca817d0170041d6fe1912bb6cc6f3417",
+        "note": ""
+      },
+      {
+        "id": "example-charge-16",
+        "componentId": "catalog",
+        "description": "DynamoDB conditional write request units",
+        "quantity": 10000,
+        "price": 7.1e-07,
+        "unit": "WriteRequestUnits",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#X43FXEDHFRVHHYQR",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB",
+        "sku": "X43FXEDHFRVHHYQR",
+        "meter": "X43FXEDHFRVHHYQR.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "d822fd12cc7b49c68f5a45d268e5bc3dca817d0170041d6fe1912bb6cc6f3417",
+        "note": ""
+      },
+      {
+        "id": "example-charge-17",
+        "componentId": "catalog",
+        "description": "DynamoDB standard storage; free allowance assumed consumed",
+        "quantity": 0.1,
+        "price": 0.285,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#NF4X2QKU7Y7QVY5C",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB",
+        "sku": "NF4X2QKU7Y7QVY5C",
+        "meter": "NF4X2QKU7Y7QVY5C.JRTCKXETXF.VYAP54KATQ",
+        "sourceSha256": "d822fd12cc7b49c68f5a45d268e5bc3dca817d0170041d6fe1912bb6cc6f3417",
+        "note": "Conservative marginal cost with no free allowance applied."
+      },
+      {
+        "id": "example-charge-18",
+        "componentId": "catalog",
+        "description": "DynamoDB point-in-time recovery storage (GB-month)",
+        "quantity": 0.1,
+        "price": 0.228,
+        "unit": "GB-Mo",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json#KHP6CW3RY2FP49W3",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonDynamoDB",
+        "sku": "KHP6CW3RY2FP49W3",
+        "meter": "KHP6CW3RY2FP49W3.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "d822fd12cc7b49c68f5a45d268e5bc3dca817d0170041d6fe1912bb6cc6f3417",
+        "note": ""
+      },
+      {
+        "id": "example-charge-19",
+        "componentId": "model",
+        "description": "Nova Lite input tokens (1,000-token units)",
+        "quantity": 20000,
+        "price": 6.3e-05,
+        "unit": "1K tokens",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonBedrock/current/ap-southeast-2/index.json#VE26ZEBZ95PNKV6H",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonBedrock",
+        "sku": "VE26ZEBZ95PNKV6H",
+        "meter": "VE26ZEBZ95PNKV6H.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "6a873b73dfa422e8e32f73a9d43cc2aaf4bb69a03a02030404186792cce98977",
+        "note": ""
+      },
+      {
+        "id": "example-charge-20",
+        "componentId": "model",
+        "description": "Nova Lite output tokens (1,000-token units)",
+        "quantity": 10000,
+        "price": 0.000252,
+        "unit": "1K tokens",
+        "currency": "USD",
+        "source": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonBedrock/current/ap-southeast-2/index.json#8QD3UNYB3WE6E2YA",
+        "date": "2026-11-15",
+        "region": "ap-southeast-2",
+        "service": "AmazonBedrock",
+        "sku": "8QD3UNYB3WE6E2YA",
+        "meter": "8QD3UNYB3WE6E2YA.JRTCKXETXF.6YS6EN2CT7",
+        "sourceSha256": "6a873b73dfa422e8e32f73a9d43cc2aaf4bb69a03a02030404186792cce98977",
+        "note": ""
+      },
+      {
+        "id": "example-charge-21",
+        "componentId": "sp-src",
+        "description": "Existing local SharePoint contract fixture",
+        "quantity": 1,
+        "price": 0,
+        "unit": "existing reference",
+        "currency": "USD",
+        "source": "Example scope: existing browser or local normalized source-contract fixture; no incremental AWS resource.",
+        "date": "2026-11-15",
+        "region": "Local reference",
+        "service": "Existing reference",
+        "note": "Existing paid tenant/license integrations are not part of this local contract example."
+      },
+      {
+        "id": "example-charge-22",
+        "componentId": "cf-src",
+        "description": "Existing local Confluence contract fixture",
+        "quantity": 1,
+        "price": 0,
+        "unit": "existing reference",
+        "currency": "USD",
+        "source": "Example scope: existing browser or local normalized source-contract fixture; no incremental AWS resource.",
+        "date": "2026-11-15",
+        "region": "Local reference",
+        "service": "Existing reference",
+        "note": "Existing paid tenant/license integrations are not part of this local contract example."
+      }
+    ],
+    "priceSources": [
+      {
+        "service": "AmazonCloudFront",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudFront/current/index.json",
+        "bytes": 226901,
+        "sha256": "17e3e9aeb5add88d1f6ba78f7fdcfb2405a83a9388228adc46c8ae09da9ca2ce",
+        "publicationDate": "2026-10-19T15:05:00Z",
+        "products": 150
+      },
+      {
+        "service": "AmazonApiGateway",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonApiGateway/current/ap-southeast-2/index.json",
+        "bytes": 19850,
+        "sha256": "a51f2b47a8203fb6bc0ff10d7d19c28e29b84981cb2fa9f33be3064e46386dc1",
+        "publicationDate": "2026-11-12T21:59:20Z",
+        "products": 14
+      },
+      {
+        "service": "AmazonDynamoDB",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonDynamoDB/current/ap-southeast-2/index.json",
+        "bytes": 50362,
+        "sha256": "d822fd12cc7b49c68f5a45d268e5bc3dca817d0170041d6fe1912bb6cc6f3417",
+        "publicationDate": "2026-11-11T15:36:12Z",
+        "products": 32
+      },
+      {
+        "service": "AmazonCognito",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCognito/current/ap-southeast-2/index.json",
+        "bytes": 72152,
+        "sha256": "351bee050447d176bc15bd5e47856f9e62bf356717ffd971eb633cdc93f56dc1",
+        "publicationDate": "2026-10-20T23:38:14Z",
+        "products": 45
+      },
+      {
+        "service": "AmazonBedrock",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonBedrock/current/ap-southeast-2/index.json",
+        "bytes": 801043,
+        "sha256": "6a873b73dfa422e8e32f73a9d43cc2aaf4bb69a03a02030404186792cce98977",
+        "publicationDate": "2026-11-11T01:30:37Z",
+        "products": 575
+      },
+      {
+        "service": "AmazonS3",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/ap-southeast-2/index.json",
+        "bytes": 526665,
+        "sha256": "77c43a9cc8b6c60ffb39c35ab05fe2526dea57fcfa838117a6b928de6e457af8",
+        "publicationDate": "2026-11-09T15:43:10Z",
+        "products": 386
+      },
+      {
+        "service": "AWSLambda",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AWSLambda/current/ap-southeast-2/index.json",
+        "bytes": 643553,
+        "sha256": "c05d058c61d691378a19a255a5087b4eea9a62dd8793aabf15338556ebb17a31",
+        "publicationDate": "2026-11-11T22:30:04Z",
+        "products": 489
+      },
+      {
+        "service": "AmazonCloudWatch",
+        "url": "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonCloudWatch/current/ap-southeast-2/index.json",
+        "bytes": 207680,
+        "sha256": "41a1c77c3a62b48080d37dad91da22acf578f1d4d444de6786f1311802d78dcb",
+        "publicationDate": "2026-11-04T21:35:32Z",
+        "products": 114
+      }
+    ]
+  }
+}