{
  "id": "authorization-ambiguity",
  "title": "Authorization carrier ambiguity fails closed",
  "description": "Two AEP-recognized carriers, invalid dedicated credentials, duplicate lines, and combined credentials are rejected without fallback or disclosure.",
  "drafts": ["draft-kavian-agent-enrollment-protocol-04"],
  "category": "protected-resource",
  "applicability": {
    "agent": {
      "expectation": "required",
      "profile": "core-http"
    },
    "platform": {
      "expectation": "unsupported"
    },
    "service": {
      "expectation": "required",
      "profile": "core-http"
    }
  },
  "input": {"cases": ["both-aep-recognized", "invalid-dedicated-plus-valid-standard", "duplicate-dedicated-lines", "combined-dedicated-values"]},
  "expected": {"code": "not_recognized", "disclosure": "none", "fallback": false, "selected_credential": null}
}