id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	attack	After one violation, trust is 'degraded' -> Evidence, not opinion, lowered it.	"degraded"	["degraded"]	200	133	2026-11-03T22:55:04+00:00
C02	attack	A high-risk action is then denied -> High risk plus degraded trust: deny.	"deny"	["deny"]	200	0	2026-11-03T22:55:04+00:00
C03	control	The explanation names the violation -> Anyone can see why.	"Trust degraded due to: 1 policy violation(s) detected"	["Trust degraded due to: 1 policy violation(s) detected"]	200	0	2026-11-03T22:55:05+00:00