id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	A calculator that really adds -> Clean.	"REAL"	["REAL"]	200	86	2026-11-03T22:52:01+00:00
C02	attack	A description with a hidden instruction -> Prompt injection in the description.	"STUB"	["STUB"]	200	83	2026-11-03T22:52:02+00:00
C03	attack	A command parameter that exposes a secret -> Unconstrained parameter.	"PARTIAL"	["PARTIAL"]	200	51	2026-11-03T22:52:02+00:00
C04	control	A 'search' that ignores the query (scan only) -> The scan alone cannot see this: its description is fine. That is why the probe below exists.	"REAL"	["REAL"]	200	41	2026-11-03T22:52:03+00:00
C05	attack	Probe the canned search, then prove the fix -> Behaviour tests fail on the canned tool (same answer for different queries) and pass on the fixed one.	"VERIFIED_ATTESTATION"	["VERIFIED_ATTESTATION"]	200	1664	2026-11-03T22:52:05+00:00