{
  "tenant_id": "acme",
  "snapshot_id": "01HZX3GN4V6KBW1PXJ0K3VXEGT",
  "component_purl": "pkg:npm/alpha@1.0.0",
  "advisory_id": "ADV-1",
  "severity_fused": "high",
  "score": 0.900,
  "sources": [
    { "source": "policy-engine", "weight": 1.050, "severity": "high", "score": 0.945 }
  ],
  "reason_codes": ["weights-applied", "deterministic-fusion"]
}