[
  {
    "case_ref": "CASE-01",
    "known_outcome": "fraud",
    "event": {
      "event_type": "login",
      "account_id": "ACC-A",
      "device_id": "DEV-1",
      "payload": {
        "is_new_device": true,
        "proxy_vpn": true,
        "impossible_travel": true,
        "recent_password_reset": true,
        "after_credential_event": true,
        "device_account_count": 3
      }
    }
  },
  {
    "case_ref": "CASE-02",
    "known_outcome": "clean",
    "event": {
      "event_type": "withdrawal",
      "account_id": "ACC-B",
      "device_id": "DEV-2",
      "payload": {
        "seconds_since_login": 1800,
        "device_account_count": 1
      }
    }
  },
  {
    "case_ref": "CASE-03",
    "known_outcome": "disputed",
    "event": {
      "event_type": "withdrawal",
      "account_id": "ACC-C",
      "device_id": "DEV-3",
      "payload": {
        "datacenter_asn": true,
        "recent_payout_change": true,
        "seconds_since_login": 90,
        "velocity_spike": true,
        "time_to_cashout_seconds": 240,
        "shared_payout_cluster": true,
        "device_account_count": 2
      }
    }
  }
]