id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	Published receipt verifies -> Signed by a quorum of the pinned cluster.	"NOTARIZED"	["NOTARIZED"]	200	109	2026-11-03T22:47:17+00:00
C02	attack	Digest changed -> The quorum signed this digest, not yours.	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	140	2026-11-03T22:47:17+00:00
C03	attack	Cluster renamed (unsigned top-level field) -> cluster_id must equal the signed membership's; the 2026-11-03 lab found the verifier echoing it. Fixed and deployed 2026-11-03.	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	132	2026-11-03T22:47:18+00:00
C04	attack	Request id swapped -> The commit certificate names exactly one request.	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	126	2026-11-03T22:47:19+00:00
C05	attack	Sequence moved -> The certificate is for one slot in the log.	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	110	2026-11-03T22:47:19+00:00
C06	attack	Operation digest differs from the receipt digest -> The operation must notarize exactly the receipt's digest.	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	106	2026-11-03T22:47:20+00:00
C07	attack	Commit signatures dropped to one -> One replica is not a quorum (needs 3 of 4).	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	125	2026-11-03T22:47:21+00:00
C08	attack	Wrong pin (another cluster's configuration) -> Pinned to a configuration this receipt was not signed by.	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	92	2026-11-03T22:47:21+00:00
C09	attack	Commit certificate removed -> No commit quorum, no notarization.	"NOT_VERIFIED"	["NOT_VERIFIED"]	200	87	2026-11-03T22:47:22+00:00
