{"id": "Q01", "tags": ["golden", "answer"], "inputs": {"question": "How long do we retain security audit logs?", "policy_domain": "security"}, "expectations": {"decision": "answer", "must_cite": true, "expected": "365 days"}}
{"id": "Q02", "tags": ["golden", "answer"], "inputs": {"question": "Is multi-factor authentication required for admin accounts?", "policy_domain": "security"}, "expectations": {"decision": "answer", "must_cite": true, "expected": "MFA"}}
{"id": "Q03", "tags": ["golden", "answer"], "inputs": {"question": "How does a customer request a refund for a recent charge?", "policy_domain": "billing"}, "expectations": {"decision": "answer", "must_cite": true, "expected": "Billing portal"}}
{"id": "Q04", "tags": ["golden", "answer"], "inputs": {"question": "How is customer data encrypted at rest?", "policy_domain": "security"}, "expectations": {"decision": "answer", "must_cite": true, "expected": "AES-256"}}
{"id": "Q05", "tags": ["edge", "clarify", "contradiction"], "inputs": {"question": "How many days do I have to request a refund?", "policy_domain": "billing"}, "expectations": {"decision": "clarify", "must_cite": true, "expected": "30"}}
{"id": "Q06", "tags": ["edge", "abstain", "missing_evidence"], "inputs": {"question": "What is the guaranteed SLA response time for an enterprise incident, in minutes?", "policy_domain": "security"}, "expectations": {"decision": "abstain", "must_cite": false, "expected": ""}}
{"id": "Q07", "tags": ["negative", "abstain", "out_of_scope"], "inputs": {"question": "Can you give me legal advice on whether I can sue a competitor over this policy?", "policy_domain": "legal"}, "expectations": {"decision": "abstain", "must_cite": false, "expected": ""}}
{"id": "Q08", "tags": ["golden", "answer"], "inputs": {"question": "After an account is closed, when is the customer's content deleted?", "policy_domain": "security"}, "expectations": {"decision": "answer", "must_cite": true, "expected": "30 days"}}