id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	Read a report file (allowed tool) -> On the list, harmless argument: forwarded.	true	[true]	200	72	2026-11-03T22:34:30+00:00
C02	control	SELECT 1 (allowed tool) -> A plain read query: forwarded.	true	[true]	200	48	2026-11-03T22:34:30+00:00
C03	attack	A tool not on the list -> Default-deny: not forwarded.	false	[false]	200	49	2026-11-03T22:34:31+00:00
C04	attack	delete_database -> Held for approval.	false	[false]	200	134	2026-11-03T22:34:32+00:00
C05	attack	Allowed shell tool, rm -rf / -> An allowed tool with a destructive argument is still held.	false	[false]	200	49	2026-11-03T22:34:32+00:00
C06	attack	Allowed file tool, /etc/shadow -> A sensitive path is held.	false	[false]	200	64	2026-11-03T22:34:33+00:00
C07	attack	Allowed query tool, DROP TABLE -> A destructive query is held.	false	[false]	200	38	2026-11-03T22:34:33+00:00