id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	Mint and use once -> The exact request it was minted for works.	"HTTP 200"	[]	200	312	2026-11-03T22:46:04+00:00
C02	attack	Use the same credential twice -> Single use: a replay is refused.	"HTTP 403"	[]	403	123	2026-11-03T22:46:04+00:00
C03	attack	Use it for another order -> Bound to one path.	"HTTP 403"	[]	403	95	2026-11-03T22:46:05+00:00
C04	attack	Path traversal on the bound path -> Normalised before matching.	"HTTP 403"	[]	403	92	2026-11-03T22:46:06+00:00
C05	attack	Mint for a path the agent was never granted -> No grant, no credential.	"DENY"	["DENY"]	200	260	2026-11-03T22:46:06+00:00
C06	attack	Attenuate to a wider path -> Attenuation can only narrow.	"HTTP 403"	[]	403	113	2026-11-03T22:46:07+00:00
C07	attack	Introspect a garbage token -> alg=none and malformed tokens are inactive.	false	[false]	200	38	2026-11-03T22:46:08+00:00