{
  "$comment": "Contract A4 seed items for the tenancy-roles-and-audit domain. This domain exists because an ASHR.work operator is asked, sooner or later, to show an auditor how the record holds up — and to answer the question every prospect asks about a shared platform.",
  "track": "ashr-ops",
  "domain": "tenancy-roles-and-audit",
  "items": [
    {
      "id": "ashr-ops.tenancy-roles-and-audit.01",
      "kind": "mcq",
      "domain": "tenancy-roles-and-audit",
      "stem": "An admin corrected a mistaken role change and wants to tidy the corresponding entry out of the audit log so the record 'reads cleanly'. What should you tell them?",
      "options": [
        { "key": "a", "text": "Entries can be edited by a Super Admin, but not deleted" },
        { "key": "b", "text": "Entries are permanent and cannot be changed or removed — that is exactly what makes the log trustworthy for compliance" },
        { "key": "c", "text": "Entries can be deleted within 24 hours of the action" },
        { "key": "d", "text": "The log can be cleared wholesale at the start of each financial year" }
      ],
      "answer_key": { "correct": ["b"] },
      "max_points": 1,
      "cites": ["https://ashr.work/help/admin/audit-log"]
    },
    {
      "id": "ashr-ops.tenancy-roles-and-audit.02",
      "kind": "mcq",
      "domain": "tenancy-roles-and-audit",
      "stem": "A prospective customer asks whether another organisation using ASHR.work could ever see their audit log or their people data. What is the accurate answer?",
      "options": [
        { "key": "a", "text": "Data is separated by a filter in the application, so a bug could expose it" },
        { "key": "b", "text": "The log and the data are scoped to that organisation only — you never see other tenants, and they never see yours" },
        { "key": "c", "text": "Other organisations see anonymised copies for benchmarking" },
        { "key": "d", "text": "Support staff at each customer can view any tenant they have the id for" }
      ],
      "answer_key": { "correct": ["b"] },
      "max_points": 1,
      "cites": [
        "https://ashr.work/help/admin/audit-log",
        "https://ashr.work/docs/explanation/tenancy-and-roles"
      ]
    },
    {
      "id": "ashr-ops.tenancy-roles-and-audit.03",
      "kind": "multi",
      "domain": "tenancy-roles-and-audit",
      "stem": "Which of the following are true about roles and module visibility in ASHR.work? Select all that apply.",
      "options": [
        { "key": "a", "text": "A role can be changed at any time and takes effect right away, so a wrong assignment is easy to correct" },
        { "key": "b", "text": "An organisation can have more than one Super Admin, which is wise so nobody is locked out if one person leaves" },
        { "key": "c", "text": "Switching a module off in Admin → Settings hides it from everyone in the organisation, and the navigation updates for the whole org" },
        { "key": "d", "text": "Switching a module off deletes the data that module held" }
      ],
      "answer_key": { "correct": ["a", "b", "c"] },
      "max_points": 2,
      "cites": [
        "https://ashr.work/help/admin/role-management",
        "https://ashr.work/help/admin/module-visibility"
      ]
    }
  ]
}