id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	Ask for search:query (on the pass) -> Listed on the pass, so it is accepted.	true	[true]	200	162	2026-11-03T22:48:00+00:00
C02	control	Ask for docs:read (on the pass) -> Also listed: accepted.	true	[true]	200	104	2026-11-03T22:48:01+00:00
C03	attack	Ask for billing:refund -> Not on the pass: refused, even though the pass itself is genuine.	false	[false]	200	116	2026-11-03T22:48:01+00:00
C04	attack	Ask for docs:write (a close cousin of docs:read) -> Read does not imply write.	false	[false]	200	161	2026-11-03T22:48:02+00:00
C05	attack	Ask for admin:* (a wildcard) -> Wildcards are not granted by asking.	false	[false]	200	159	2026-11-03T22:48:03+00:00
C06	attack	Ask for two permissions glued together -> A made-up combined permission is not on the pass.	false	[false]	200	117	2026-11-03T22:48:03+00:00