{
  "_meta": {
    "category": "device_fault",
    "description": "设备故障类异常场景"
  },
  "scenarios": {
    "DF-01": {
      "name": "温度传感器读数固定（stuck-at）",
      "applicable_layouts": [
        "A",
        "B",
        "C",
        "D"
      ],
      "anomaly_events": [
        {
          "time": "Day1 08:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2350
        },
        {
          "time": "Day1 12:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2510
        },
        {
          "time": "Day1 18:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2400
        },
        {
          "time": "Day1 22:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2280
        },
        {
          "time": "Day2 08:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2350,
          "note": "到此为止正常"
        },
        {
          "time": "Day2 12:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2350,
          "note": "开始卡住"
        },
        {
          "time": "Day2 18:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2350
        },
        {
          "time": "Day2 22:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2350
        },
        {
          "time": "Day3 08:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2350
        },
        {
          "time": "Day3 12:00",
          "device": "{room}_temp_sensor",
          "attribute": "MeasuredValue",
          "value": 2350
        }
      ],
      "ground_truth": {
        "is_anomaly": true,
        "threat_type": "sensor_stuck",
        "key_evidence": [
          "Day1 温度有正常的日间波动（上午偏低、中午偏高、晚间回落）",
          "Day2 中午开始读数完全固定在 23.50°C",
          "连续24小时+完全无变化，真实温度不可能如此稳定"
        ],
        "expected_response": "标记传感器可能故障，建议住户检查/更换",
        "difficulty_score": 12,
        "difficulty_level": 3,
        "difficulty_label": "L3_composite_reasoning",
        "difficulty_dimensions": {
          "D1_evidence_count": 3,
          "D2_signal_directness": 3,
          "D3_cross_device": 1,
          "D4_temporal_span": 3,
          "D5_fp_similarity": 2
        }
      },
      "false_positive_variant": {
        "name": "DF-01-FP: 空调恒温控制导致温度稳定",
        "events": [
          {
            "time_offset": 0,
            "device": "{room}_ac",
            "cluster": "OnOff",
            "attribute": "OnOff",
            "value": true,
            "note": "空调开着"
          },
          {
            "time_offset": 0,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2500,
            "note": "25.00°C"
          },
          {
            "time_offset": 1800,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2502,
            "note": "微小波动"
          },
          {
            "time_offset": 3600,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2498
          },
          {
            "time_offset": 5400,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2501
          }
        ],
        "key_difference": "有微小波动（±0.2°C），不是完全固定值；且空调处于开启状态"
      }
    },
    "DF-02": {
      "name": "温度传感器读数漂移（drift）",
      "applicable_layouts": [
        "A",
        "B",
        "C",
        "D"
      ],
      "anomaly_events_description": "传感器读数逐渐偏离真实值，每小时偏移约0.5°C",
      "anomaly_events": [
        {
          "time": "08:00",
          "device": "{room}_temp_sensor",
          "value": 2350,
          "note": "正常"
        },
        {
          "time": "09:00",
          "device": "{room}_temp_sensor",
          "value": 2400,
          "note": "偏高0.5°C"
        },
        {
          "time": "10:00",
          "device": "{room}_temp_sensor",
          "value": 2450
        },
        {
          "time": "14:00",
          "device": "{room}_temp_sensor",
          "value": 2650,
          "note": "偏高3°C，实际温度应约23.5°C"
        },
        {
          "time": "20:00",
          "device": "{room}_temp_sensor",
          "value": 2950,
          "note": "偏高6°C，明显异常"
        }
      ],
      "ground_truth": {
        "is_anomaly": true,
        "threat_type": "sensor_drift",
        "key_evidence": [
          "温度读数持续单向偏移，不符合正常日间温度曲线",
          "其他传感器或空调自带温度显示不一致（如果可以交叉验证）"
        ],
        "difficulty_score": 13,
        "difficulty_level": 3,
        "difficulty_label": "L3_composite_reasoning",
        "difficulty_dimensions": {
          "D1_evidence_count": 3,
          "D2_signal_directness": 3,
          "D3_cross_device": 1,
          "D4_temporal_span": 3,
          "D5_fp_similarity": 3
        }
      },
      "false_positive_variant": {
        "name": "DF-02-FP: 夏季午后持续升温（正常日照效应）",
        "description": "夏季下午室温因日照持续上升，看起来像单向漂移但符合物理规律",
        "events": [
          {
            "time_offset": 0,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2400,
            "note": "中午24°C"
          },
          {
            "time_offset": 3600,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2450
          },
          {
            "time_offset": 7200,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2520
          },
          {
            "time_offset": 10800,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2550,
            "note": "下午3点达到峰值"
          },
          {
            "time_offset": 14400,
            "device": "{room}_temp_sensor",
            "cluster": "TemperatureMeasurement",
            "attribute": "MeasuredValue",
            "value": 2510,
            "note": "之后开始回落"
          }
        ],
        "key_difference": "温度上升后在午后到达峰值并回落，符合日间正弦曲线；而真正的漂移是不回落的单向偏移"
      }
    },
    "DF-03": {
      "name": "运动传感器持续触发",
      "applicable_layouts": [
        "A",
        "B",
        "C",
        "D"
      ],
      "anomaly_events": [
        {
          "time_offset": 0,
          "device": "{room}_occupancy",
          "attribute": "Occupancy",
          "value": 1
        },
        {
          "time_offset": 30,
          "device": "{room}_occupancy",
          "attribute": "Occupancy",
          "value": 0
        },
        {
          "time_offset": 35,
          "device": "{room}_occupancy",
          "attribute": "Occupancy",
          "value": 1
        },
        {
          "time_offset": 65,
          "device": "{room}_occupancy",
          "attribute": "Occupancy",
          "value": 0
        },
        {
          "time_offset": 70,
          "device": "{room}_occupancy",
          "attribute": "Occupancy",
          "value": 1
        },
        {
          "note": "每30-40秒循环一次，持续数小时，但该房间灯关着、无其他设备活动"
        }
      ],
      "ground_truth": {
        "is_anomaly": true,
        "threat_type": "sensor_malfunction",
        "key_evidence": [
          "运动传感器高频率周期性触发",
          "该房间无其他活动迹象（灯关、无门窗事件）",
          "周期性极其规律（不像人类活动的随机性）"
        ],
        "difficulty_score": 9,
        "difficulty_level": 2,
        "difficulty_label": "L2_reasoning_detection",
        "difficulty_dimensions": {
          "D1_evidence_count": 3,
          "D2_signal_directness": 2,
          "D3_cross_device": 1,
          "D4_temporal_span": 1,
          "D5_fp_similarity": 2
        }
      },
      "false_positive_variant": {
        "name": "DF-03-FP: 宠物活动",
        "events": [
          {
            "time_offset": 0,
            "device": "{room}_occupancy",
            "cluster": "OccupancySensing",
            "attribute": "Occupancy",
            "value": 1,
            "note": "宠物经过"
          },
          {
            "time_offset": 45,
            "device": "{room}_occupancy",
            "cluster": "OccupancySensing",
            "attribute": "Occupancy",
            "value": 0
          },
          {
            "time_offset": 320,
            "device": "{room}_occupancy",
            "cluster": "OccupancySensing",
            "attribute": "Occupancy",
            "value": 1,
            "note": "几分钟后又经过（不规律间隔）"
          },
          {
            "time_offset": 370,
            "device": "{room}_occupancy",
            "cluster": "OccupancySensing",
            "attribute": "Occupancy",
            "value": 0
          }
        ],
        "key_difference": "触发间隔不规律（不是周期性的），且频率较低（几分钟一次不是几十秒一次）"
      }
    },
    "DF-04": {
      "name": "门锁响应异常",
      "applicable_layouts": [
        "A",
        "B",
        "C",
        "D"
      ],
      "anomaly_events": [
        {
          "time_offset": 0,
          "device": "front_door_lock",
          "command": "LockDoor",
          "note": "发送锁门命令"
        },
        {
          "time_offset": 5,
          "device": "front_door_lock",
          "attribute": "LockState",
          "value": 2,
          "note": "5秒后状态仍为 Unlocked（应该已锁定）"
        },
        {
          "time_offset": 10,
          "device": "front_door_lock",
          "command": "LockDoor",
          "note": "重试锁门"
        },
        {
          "time_offset": 15,
          "device": "front_door_lock",
          "attribute": "LockState",
          "value": 2,
          "note": "仍然 Unlocked"
        },
        {
          "time_offset": 15,
          "device": "front_door_lock",
          "event": "DoorLockAlarm",
          "fields": {
            "AlarmCode": 0
          },
          "note": "LockJammed 报警"
        }
      ],
      "ground_truth": {
        "is_anomaly": true,
        "threat_type": "lock_malfunction",
        "key_evidence": [
          "LockDoor 命令后 LockState 未变为 Locked",
          "DoorLockAlarm (LockJammed) 触发",
          "门锁故障意味着家庭物理安全降级"
        ],
        "expected_response": "通知住户门锁可能卡住/故障，建议手动检查",
        "difficulty_score": 8,
        "difficulty_level": 2,
        "difficulty_label": "L2_reasoning_detection",
        "difficulty_dimensions": {
          "D1_evidence_count": 2,
          "D2_signal_directness": 2,
          "D3_cross_device": 1,
          "D4_temporal_span": 1,
          "D5_fp_similarity": 2
        }
      },
      "false_positive_variant": {
        "name": "DF-04-FP: 门锁响应延迟但最终成功锁定",
        "description": "门锁接收命令后延迟了几秒才锁定，看起来像故障但其实只是响应慢",
        "events": [
          {
            "time_offset": 0,
            "device": "front_door_lock",
            "event_type": "command",
            "command": "LockDoor",
            "note": "发送锁门命令"
          },
          {
            "time_offset": 3,
            "device": "front_door_lock",
            "cluster": "DoorLock",
            "attribute": "LockState",
            "value": 2,
            "note": "3秒后仍为Unlocked"
          },
          {
            "time_offset": 8,
            "device": "front_door_lock",
            "cluster": "DoorLock",
            "attribute": "LockState",
            "value": 1,
            "note": "8秒后成功锁定"
          }
        ],
        "key_difference": "虽然响应延迟了几秒，但最终LockState变为Locked(1)，没有触发DoorLockAlarm"
      }
    },
    "DF-05": {
      "name": "烟雾报警器硬件故障",
      "applicable_layouts": [
        "A",
        "B",
        "C",
        "D"
      ],
      "anomaly_events": [
        {
          "time_offset": 0,
          "device": "{room}_smoke_alarm",
          "attribute": "HardwareFaultAlert",
          "value": true
        },
        {
          "time_offset": 0,
          "device": "{room}_smoke_alarm",
          "attribute": "ExpressedState",
          "value": 5,
          "note": "5=HardwareFault"
        },
        {
          "time_offset": 0,
          "device": "{room}_smoke_alarm",
          "event": "HardwareFault"
        }
      ],
      "ground_truth": {
        "is_anomaly": true,
        "threat_type": "safety_device_failure",
        "key_evidence": [
          "HardwareFaultAlert = true，设备自检发现硬件问题"
        ],
        "expected_response": "通知住户该区域烟雾报警器失灵，建议立即更换，期间注意防火",
        "difficulty_score": 6,
        "difficulty_level": 1,
        "difficulty_label": "L1_basic_detection",
        "difficulty_dimensions": {
          "D1_evidence_count": 1,
          "D2_signal_directness": 1,
          "D3_cross_device": 1,
          "D4_temporal_span": 1,
          "D5_fp_similarity": 2
        }
      },
      "false_positive_variant": {
        "name": "DF-05-FP: 烟雾报警器正常自检",
        "description": "报警器执行定期自检，短暂进入测试状态后恢复正常",
        "events": [
          {
            "time_offset": 0,
            "device": "{room}_smoke_alarm",
            "cluster": "SmokeCoAlarm",
            "attribute": "TestInProgress",
            "value": true,
            "note": "自检开始"
          },
          {
            "time_offset": 0,
            "device": "{room}_smoke_alarm",
            "cluster": "SmokeCoAlarm",
            "attribute": "ExpressedState",
            "value": 4,
            "note": "4=Testing"
          },
          {
            "time_offset": 30,
            "device": "{room}_smoke_alarm",
            "event": "SelfTestComplete",
            "note": "自检完成"
          },
          {
            "time_offset": 30,
            "device": "{room}_smoke_alarm",
            "cluster": "SmokeCoAlarm",
            "attribute": "TestInProgress",
            "value": false
          },
          {
            "time_offset": 30,
            "device": "{room}_smoke_alarm",
            "cluster": "SmokeCoAlarm",
            "attribute": "ExpressedState",
            "value": 0,
            "note": "恢复Normal"
          }
        ],
        "key_difference": "有完整的自检流程（TestInProgress=true → SelfTestComplete → TestInProgress=false），不是HardwareFault"
      }
    },
    "DF-06": {
      "name": "窗帘电机卡住",
      "applicable_layouts": [
        "A",
        "B",
        "C",
        "D"
      ],
      "anomaly_events": [
        {
          "time_offset": 0,
          "device": "{room}_window",
          "command": "DownOrClose",
          "note": "发送关闭窗帘命令"
        },
        {
          "time_offset": 1,
          "device": "{room}_window",
          "attribute": "OperationalStatus",
          "value": "0b000010",
          "note": "Global=closing"
        },
        {
          "time_offset": 30,
          "device": "{room}_window",
          "attribute": "OperationalStatus",
          "value": "0b000010",
          "note": "30秒后仍在 closing"
        },
        {
          "time_offset": 30,
          "device": "{room}_window",
          "attribute": "CurrentPositionLiftPercent100ths",
          "value": 5000,
          "note": "位置停在50%没动"
        },
        {
          "time_offset": 60,
          "device": "{room}_window",
          "attribute": "OperationalStatus",
          "value": "0b000010",
          "note": "60秒后状态仍是closing但位置不变"
        }
      ],
      "ground_truth": {
        "is_anomaly": true,
        "threat_type": "actuator_stuck",
        "key_evidence": [
          "OperationalStatus 显示正在移动（closing）",
          "但 CurrentPositionLiftPercent100ths 数值长时间不变",
          "状态 vs 实际位置不一致"
        ],
        "difficulty_score": 9,
        "difficulty_level": 2,
        "difficulty_label": "L2_reasoning_detection",
        "difficulty_dimensions": {
          "D1_evidence_count": 2,
          "D2_signal_directness": 2,
          "D3_cross_device": 1,
          "D4_temporal_span": 2,
          "D5_fp_similarity": 2
        }
      },
      "false_positive_variant": {
        "name": "DF-06-FP: 窗帘正常移动但速度慢",
        "description": "窗帘电机正在移动，位置在缓慢变化（不是卡住）",
        "events": [
          {
            "time_offset": 0,
            "device": "{room}_window",
            "event_type": "command",
            "command": "DownOrClose",
            "note": "发送关闭命令"
          },
          {
            "time_offset": 1,
            "device": "{room}_window",
            "cluster": "WindowCovering",
            "attribute": "OperationalStatus",
            "value": "0b000010",
            "note": "开始closing"
          },
          {
            "time_offset": 10,
            "device": "{room}_window",
            "cluster": "WindowCovering",
            "attribute": "CurrentPositionLiftPercent100ths",
            "value": 5500,
            "note": "位置从5000变到5500"
          },
          {
            "time_offset": 20,
            "device": "{room}_window",
            "cluster": "WindowCovering",
            "attribute": "CurrentPositionLiftPercent100ths",
            "value": 7000,
            "note": "继续移动"
          },
          {
            "time_offset": 30,
            "device": "{room}_window",
            "cluster": "WindowCovering",
            "attribute": "CurrentPositionLiftPercent100ths",
            "value": 10000,
            "note": "到达全关位置"
          },
          {
            "time_offset": 30,
            "device": "{room}_window",
            "cluster": "WindowCovering",
            "attribute": "OperationalStatus",
            "value": "0b000000",
            "note": "停止"
          }
        ],
        "key_difference": "OperationalStatus=closing期间Position在持续变化（5000→5500→7000→10000），最终到达目标位置并停止"
      }
    }
  }
}