{
  "cases": [
    {
      "name": "unauthenticated profile access rejected",
      "method": "GET",
      "path": "/api/profile",
      "expected_status": 401
    },
    {
      "name": "invalid JSON rejected",
      "method": "POST",
      "path": "/api/items",
      "headers": { "Content-Type": "application/json" },
      "json": { "unexpected": "field" },
      "expected_status": 400
    },
    {
      "name": "unsupported method rejected",
      "method": "DELETE",
      "path": "/api/health",
      "expected_status": 405
    }
  ]
}