{
  "contract_id": "synthetic-archive-002",
  "human_role": "security_owner",
  "requested_ttl_minutes": 120,
  "required": [
    {"id": "O1", "description": "Archive last quarter's synthetic logs", "evidenced": false,
     "required_rights": [{"action": "write", "resource": "synthetic://archive/q3"}]}
  ]
}