{
  "schema": "rncr-evidence-v1",
  "note": "Fill from actual observations. Attach original outputs, screenshot and PCAP separately. These records are student assertions, not proof of execution.",
  "captured_at": "REPLACE WITH UTC ISO-8601 TIMESTAMP",
  "hosts": [
    {"name": "PC1", "ipv4": "REPLACE", "prefix": 24},
    {"name": "PC2", "ipv4": "REPLACE", "prefix": 24}
  ]
}