{
  "tool": "get_evaluation_plan",
  "boundary": {
    "k2_stops_at": "evaluation_plan",
    "customer_owns": [
      "generate_inputs",
      "execute",
      "score",
      "review",
      "report",
      "guardrails",
      "grc_export"
    ]
  },
  "request": {
    "target_id": "target-supportbot-v2.3",
    "modalities": ["text", "image"],
    "environment": "staging",
    "max_plan_entries": 8,
    "include_watchlist": true
  },
  "response_excerpt": {
    "schema": "k2.adversarial_context.evaluation_plan.v1",
    "plan_entries": [
      {
        "seed_id": "seed-0142-regression",
        "generator_hint": "indirect-prompt-injection",
        "scope_verdict": "review-required",
        "lineage": {
          "threat": "threat-2024-0142",
          "policy": "policy-fin-001",
          "target_fact": "target-supportbot-v2.3.tools_enabled",
          "past_finding": "finding-supportbot-2026-03-018"
        },
        "citations": [
          {
            "id": "threat-2024-0142",
            "source": "public-research"
          },
          {
            "id": "policy-fin-001",
            "source": "customer-policy"
          },
          {
            "id": "target-supportbot-v2.3",
            "source": "customer-target"
          },
          {
            "id": "finding-supportbot-2026-03-018",
            "source": "customer-finding"
          }
        ]
      }
    ]
  }
}
