{
  "synthetic": true,
  "notice": "Every business, identifier and account number is fictional. These two provenance narratives are research metadata, not OpenAuditor request fields or observed customer cases.",
  "world_a": {
    "callback_contact_source": "An independently established supplier contact retained before the change request, with the source and identity review documented outside this request.",
    "called_party": "The authorized supplier representative.",
    "account_ownership_in_this_fiction": "The destination account belongs to the supplier.",
    "copies": "The bank-change form, vendor report and payment proposal inherit the approved master account.",
    "decision_implication": "The callback evidence may support the account-verification conclusion after reviewing its source and authorization. No conclusion about all other payment controls follows."
  },
  "world_b": {
    "callback_contact_source": "The new telephone number in the same unverified email that requested the account change.",
    "called_party": "The sender of the impersonating email, not an authorized supplier representative.",
    "account_ownership_in_this_fiction": "The destination account does not belong to the supplier.",
    "copies": "The bank-change form, vendor report and payment proposal inherit the unverified master account.",
    "decision_implication": "Do not close the account-verification question on the recorded callback and agreement. Obtain verification using an independently established contact route and follow the payment-control process."
  },
  "invariant": "A different employee really placed a callback before the recorded payment in both worlds. The request records the action and method, but not the source of the telephone number or the called party's authenticated authority."
}
