{
  "leak_id": "8a651d0c-683d-4e45-8347-48c84395dc5e",
  "generated_at": "2026-08-31T03:53:07Z",
  "document_name": "Q3_2025_Risk_Assessment.docx",
  "matched_user": {
    "user_id": "FNB-U1041",
    "name": "Emily Carter",
    "email": "emily.carter@fnbank.com",
    "department": "Risk Management"
  },
  "watermark_id": "579d338b-5898-4239-827b-652025ff24b6",
  "issued_at": "2026-07-20T03:15:00Z",
  "detected_at": "2026-08-14T03:15:00Z",
  "detected_by": "QMark reconciler sweep",
  "recovery_channel": "External file sharing service",
  "confidence": 97.4,
  "algorithm": "ML-DSA-87",
  "signature_bytes": 4627,
  "signature_snippet": "AZQHWoRZxnH2ehzwhcK/wmmLZCNIYWCP...",
  "verification": "VALID",
  "status": "CONFIRMED",
  "chain_of_custody": [
    {
      "at": "2026-07-20T03:15:00Z",
      "event": "Watermark issued",
      "detail": "Payload bound to emily.carter@fnbank.com and signed with ML-DSA-87."
    },
    {
      "at": "2026-07-20T03:19:00Z",
      "event": "Document released",
      "detail": "Copy delivered to recipient through the managed document portal."
    },
    {
      "at": "2026-08-14T03:15:00Z",
      "event": "Leak observed",
      "detail": "Copy recovered from: External file sharing service."
    },
    {
      "at": "2026-08-14T03:17:00Z",
      "event": "Watermark extracted",
      "detail": "Embedded payload recovered at 97.4% confidence."
    },
    {
      "at": "2026-08-14T03:18:00Z",
      "event": "Signature verified",
      "detail": "ML-DSA-87 verification returned VALID against the issuance ledger."
    }
  ],
  "simulated": true,
  "product": "QMark — Primum & Terminus"
}