id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	A listed, low-risk read -> On the allowlist and low risk: the tool runs.	true	[true]	200	46	2026-11-03T22:34:39+00:00
C02	attack	A tool nobody listed -> Default-deny: an unknown tool does not run.	false	[false]	200	37	2026-11-03T22:34:39+00:00
C03	attack	Listed, but it deletes all users -> Being on the list does not excuse a destructive action.	false	[false]	200	59	2026-11-03T22:34:40+00:00
C04	attack	Listed shell tool, piped download -> curl piped to bash is stopped by its arguments.	false	[false]	200	73	2026-11-03T22:34:41+00:00
C05	attack	A payment declared HIGH risk -> High risk waits for approval.	false	[false]	200	45	2026-11-03T22:34:41+00:00
C06	control	Handoff with narrower authority -> A sub-agent may receive less authority.	true	[true]	200	148	2026-11-03T22:34:42+00:00
C07	attack	Handoff adding a 'delete' permission -> A sub-agent cannot receive more than its parent held.	false	[false]	200	117	2026-11-03T22:34:42+00:00
C08	attack	Handoff living longer than its parent -> A sub-agent's authority cannot outlive its parent's.	false	[false]	200	36	2026-11-03T22:34:43+00:00