id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	The original, untouched card verifies -> The registered card matches its signature.	true	[true]	200	222	2026-11-03T22:47:46+00:00
C02	attack	Copy with 'transfer_funds' added -> One added capability breaks the signature.	false	[false]	200	0	2026-11-03T22:47:46+00:00
C03	attack	Copy with 'wire_transfer_unlimited' added -> Same: rejected.	false	[false]	200	97	2026-11-03T22:47:47+00:00
C04	attack	Copy with 'delete_all_users' added -> Rejected.	false	[false]	200	90	2026-11-03T22:47:48+00:00
C05	attack	Even a harmless-sounding 'read_calendar' added -> Integrity is all-or-nothing: any edit fails, whether it looks dangerous or not.	false	[false]	200	102	2026-11-03T22:47:48+00:00