id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	Read a catalogue (low consequence), identity verified -> Low risk, enough evidence.	"AUTHORIZE"	["AUTHORIZE"]	200	42	2026-11-03T22:48:08+00:00
C02	attack	Same read with no evidence at all -> Below the bar.	"DENY"	["DENY"]	200	39	2026-11-03T22:48:08+00:00
C03	attack	WIRE_TRANSFER (not a known action) at critical -> Unknown action: denied.	"DENY"	["DENY"]	200	46	2026-11-03T22:48:09+00:00
C04	attack	What level does that unknown action require? -> The highest level, never the lowest.	"A8_FEDERATED_TRUST_VERIFIED"	["A8_FEDERATED_TRUST_VERIFIED"]	200	0	2026-11-03T22:48:09+00:00