id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	attack	Sample fleet: Accounts-payable agent: wire transfers and bank-detail changes ran ungated -> A fail-closed risk score computed from CAIN decision evidence.	"HIGH_RISK"	["HIGH_RISK", "ELEVATED_RISK"]	200	88	2026-11-03T22:45:41+00:00
C02	attack	Sample fleet: Coding agent: shell commands and a branch deletion ran without a human -> A fail-closed risk score computed from CAIN decision evidence.	"HIGH_RISK"	["HIGH_RISK", "ELEVATED_RISK"]	200	57	2026-11-03T22:45:42+00:00
C03	control	Sample fleet: Support agent: every consequential action held or blocked by CAIN -> A fail-closed risk score computed from CAIN decision evidence.	"LOW_RISK"	["LOW_RISK"]	200	46	2026-11-03T22:45:42+00:00
C04	control	Sample evidence, unchanged -> The same evidence through the free-form route scores the same.	"LOW_RISK"	["LOW_RISK"]	200	130	2026-11-03T22:45:43+00:00
C05	attack	Same evidence with every decision removed -> Zero decisions is NO_EVIDENCE, not a good score.	"NO_EVIDENCE"	["NO_EVIDENCE"]	200	134	2026-11-03T22:45:43+00:00
C06	attack	One decision only (thin evidence) -> Too little evidence cannot earn LOW_RISK.	"MODERATE_RISK"	["MODERATE_RISK", "ELEVATED_RISK", "HIGH_RISK"]	200	179	2026-11-03T22:45:44+00:00
C07	attack	Evidence with no decisions list -> Malformed evidence is refused, not scored.	"HTTP 400"	[]	400	69	2026-11-03T22:45:45+00:00