authz.lock: fastapi-todos@c059889: pr-mut-update-todo-no-owner.v1

Verdict: FAIL · 16 new invariant violations · 12 widened cells · 12 changed cells

probes	693
probe time (s)	96.2
coverage	17/20 operations
never green (unprobed)	DELETE /users/{id}, POST /auth/reset-password, POST /auth/verify
harness	valid
app	fastapi-todos@c059889
expected	FAIL
what	PUT /todos/{id}: service-level owner comparison removed

Invariant violations introduced by this PR

rule	cell (op \| identity \| target \| variant)	detail
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| user_b \| base`	user_a updated a todo row owned by user_b (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| user_b \| base`	user_a deleted a todo_category row owned by user_b
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| user_b \| hostile`	user_a updated a todo row owned by user_b (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| user_b \| hostile`	user_a deleted a todo_category row owned by user_b
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| superuser \| base`	user_a updated a todo row owned by superuser (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| superuser \| base`	user_a deleted a todo_category row owned by superuser
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| superuser \| hostile`	user_a updated a todo row owned by superuser (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_a \| superuser \| hostile`	user_a deleted a todo_category row owned by superuser
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| user_a \| base`	user_b updated a todo row owned by user_a (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| user_a \| base`	user_b deleted a todo_category row owned by user_a
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| user_a \| hostile`	user_b updated a todo row owned by user_a (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| user_a \| hostile`	user_b deleted a todo_category row owned by user_a
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| superuser \| base`	user_b updated a todo row owned by superuser (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| superuser \| base`	user_b deleted a todo_category row owned by superuser
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| superuser \| hostile`	user_b updated a todo row owned by superuser (ownership moved to self)
I3 write-isolation	`PUT /todos/{todo_id} \| user_b \| superuser \| hostile`	user_b deleted a todo_category row owned by superuser

Access widened (lockfile diff)

cell	base	head
`PUT /todos/{todo_id} \| superuser \| user_a \| base`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_a', 'update:todo:user_a->self'] count=None
`PUT /todos/{todo_id} \| superuser \| user_a \| hostile`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_a', 'update:todo:user_a->self'] count=None
`PUT /todos/{todo_id} \| superuser \| user_b \| base`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_b', 'update:todo:user_b->self'] count=None
`PUT /todos/{todo_id} \| superuser \| user_b \| hostile`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_b', 'update:todo:user_b->self'] count=None
`PUT /todos/{todo_id} \| user_a \| superuser \| base`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:superuser', 'update:todo:superuser->self'] count=None
`PUT /todos/{todo_id} \| user_a \| superuser \| hostile`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:superuser', 'update:todo:superuser->self'] count=None
`PUT /todos/{todo_id} \| user_a \| user_b \| base`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_b', 'update:todo:user_b->self'] count=None
`PUT /todos/{todo_id} \| user_a \| user_b \| hostile`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_b', 'update:todo:user_b->self'] count=None
`PUT /todos/{todo_id} \| user_b \| superuser \| base`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:superuser', 'update:todo:superuser->self'] count=None
`PUT /todos/{todo_id} \| user_b \| superuser \| hostile`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:superuser', 'update:todo:superuser->self'] count=None
`PUT /todos/{todo_id} \| user_b \| user_a \| base`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_a', 'update:todo:user_a->self'] count=None
`PUT /todos/{todo_id} \| user_b \| user_a \| hostile`	DENY 403 leaks=- db=- count=None	ALLOW 200 leaks=- db=['delete:todo_category:user_a', 'update:todo:user_a->self'] count=None

Identity × operation

PASS = no invariant violation in any probe of that pair; FAIL = at least one new violation; CHANGED = widened vs base without a violation. Letters: A=ALLOW D=DENY I=INCONCLUSIVE probe counts. Expand a cell for per-probe evidence (status, leaked canary owners, DB row changes with owner attribution); request/response bodies are not stored in the lock, and tokens/passwords are redacted.

operation alg_none anonymous deleted_user expired forged_sig inactive superuser user_a user_b

DELETE /categories/{category_id}

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS A1 D4

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 403	-	-	None
superuser	base	ALLOW 204	-	delete:category:self, delete:todo_category:self, delete:todo_category:self	None
user_a	base	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None

PASS A1 D4

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	ALLOW 204	-	delete:category:self, delete:todo_category:self, delete:todo_category:self, delete:todo_category:self, delete:todo_category:self, delete:todo_category:self, delete:todo_category:self, delete:todo_category:self	None
user_b	base	DENY 403	-	-	None

PASS A1 D4

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_b	base	ALLOW 204	-	delete:category:self, delete:todo_category:self, delete:todo_category:self, delete:todo_category:self	None

DELETE /todos/{todo_id}

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS A1 D4

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
superuser	base	ALLOW 204	-	delete:todo:self, delete:todo_category:self	None
user_a	base	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None

PASS A1 D4

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	ALLOW 204	-	delete:todo:self, delete:todo_category:self	None
user_b	base	DENY 403	-	-	None

PASS A1 D4

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_b	base	ALLOW 204	-	delete:todo:self, delete:todo_category:self	None

DELETE /users/{id}

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D2 I3

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
superuser	base	INCONCLUSIVE 500	-	-	None
user_a	base	INCONCLUSIVE 500	-	-	None
user_b	base	INCONCLUSIVE 500	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 403	-	-	None
shared	base	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 403	-	-	None
shared	base	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None

GET /categories

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

GET /priorities

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	-	-	None

GET /todos

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

GET /users/me

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	-	None

GET /users/{id}

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None

PASS A3 D2

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
superuser	base	ALLOW 200	self	-	None
user_a	base	ALLOW 200	user_a	-	None
user_b	base	ALLOW 200	user_b	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 403	-	-	None
shared	base	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None

PASS D5

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 403	-	-	None
shared	base	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None

PATCH /users/me

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	update:user:self	None
-	hostile	ALLOW 200	self	update:user:self	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	update:user:self	None
-	hostile	ALLOW 200	self	update:user:self	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	self	update:user:self	None
-	hostile	ALLOW 200	self	update:user:self	None

PATCH /users/{id}

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS A6 D4

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
nonexistent	hostile	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
shared	hostile	DENY 404	-	-	None
superuser	base	ALLOW 200	self	update:user:self	None
superuser	hostile	ALLOW 200	self	update:user:self	None
user_a	base	ALLOW 200	user_a	update:user:user_a	None
user_a	hostile	ALLOW 200	user_a	update:user:user_a[priv:is_superuser]	None
user_b	base	ALLOW 200	user_b	update:user:user_b	None
user_b	hostile	ALLOW 200	user_b	update:user:user_b[priv:is_superuser]	None

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 403	-	-	None
nonexistent	hostile	DENY 403	-	-	None
shared	base	DENY 403	-	-	None
shared	hostile	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
superuser	hostile	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_a	hostile	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None
user_b	hostile	DENY 403	-	-	None

PASS D10

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 403	-	-	None
nonexistent	hostile	DENY 403	-	-	None
shared	base	DENY 403	-	-	None
shared	hostile	DENY 403	-	-	None
superuser	base	DENY 403	-	-	None
superuser	hostile	DENY 403	-	-	None
user_a	base	DENY 403	-	-	None
user_a	hostile	DENY 403	-	-	None
user_b	base	DENY 403	-	-	None
user_b	hostile	DENY 403	-	-	None

POST /auth/forgot-password

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

POST /auth/login

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

PASS A3 D7

target	variant	decision	leaked canaries	DB changes	count
nonexistent	valid_creds	DENY 400	-	-	None
nonexistent	wrong_password	DENY 400	-	-	None
shared	valid_creds	DENY 400	-	-	None
shared	wrong_password	DENY 400	-	-	None
superuser	valid_creds	ALLOW 200	-	-	None
superuser	wrong_password	DENY 400	-	-	None
user_a	valid_creds	ALLOW 200	-	-	None
user_a	wrong_password	DENY 400	-	-	None
user_b	valid_creds	ALLOW 200	-	-	None
user_b	wrong_password	DENY 400	-	-	None

POST /auth/logout

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS D1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	-	-	None

PASS A1

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 200	-	-	None

POST /auth/register

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:user:new	None
-	hostile	ALLOW 201	-	insert:user:new	None

POST /auth/request-verify-token

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 202	-	-	None
-	hostile	ALLOW 202	-	-	None

POST /auth/reset-password

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

POST /auth/verify

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 400	-	-	None
-	hostile	DENY 400	-	-	None

POST /categories

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:category:self	None
-	hostile	ALLOW 201	-	insert:category:self	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:category:self	None
-	hostile	ALLOW 201	-	insert:category:self	None

PASS A2

target	variant	decision	leaked canaries	DB changes	count	violation
-	base	ALLOW 201	-	insert:category:self	None
-	hostile	ALLOW 201	-	insert:category:self	None

POST /todos

PASS D3

target	variant	decision	leaked canaries	DB changes	count
-	base	DENY 401	-	-	None
-	foreign_ref	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D3

target	variant	decision	leaked canaries	DB changes	count
-	base	DENY 401	-	-	None
-	foreign_ref	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D3

target	variant	decision	leaked canaries	DB changes	count
-	base	DENY 401	-	-	None
-	foreign_ref	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D3

target	variant	decision	leaked canaries	DB changes	count
-	base	DENY 401	-	-	None
-	foreign_ref	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D3

target	variant	decision	leaked canaries	DB changes	count
-	base	DENY 401	-	-	None
-	foreign_ref	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS D3

target	variant	decision	leaked canaries	DB changes	count
-	base	DENY 401	-	-	None
-	foreign_ref	DENY 401	-	-	None
-	hostile	DENY 401	-	-	None

PASS A2 D1

target	variant	decision	leaked canaries	DB changes	count
-	base	ALLOW 201	-	insert:todo:self	None
-	foreign_ref	DENY 400	-	-	None
-	hostile	ALLOW 201	-	insert:todo:self	None

PASS A2 D1

target	variant	decision	leaked canaries	DB changes	count
-	base	ALLOW 201	-	insert:todo:self	None
-	foreign_ref	DENY 400	-	-	None
-	hostile	ALLOW 201	-	insert:todo:self	None

PASS A2 D1

target	variant	decision	leaked canaries	DB changes	count
-	base	ALLOW 201	-	insert:todo:self	None
-	foreign_ref	DENY 400	-	-	None
-	hostile	ALLOW 201	-	insert:todo:self	None

PUT /todos/{todo_id}

PASS D15

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	foreign_ref	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	foreign_ref	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	foreign_ref	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	foreign_ref	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	foreign_ref	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D15

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	foreign_ref	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	foreign_ref	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	foreign_ref	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	foreign_ref	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	foreign_ref	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D15

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	foreign_ref	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	foreign_ref	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	foreign_ref	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	foreign_ref	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	foreign_ref	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D15

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	foreign_ref	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	foreign_ref	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	foreign_ref	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	foreign_ref	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	foreign_ref	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D15

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	foreign_ref	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	foreign_ref	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	foreign_ref	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	foreign_ref	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	foreign_ref	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

PASS D15

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 401	-	-	None
nonexistent	foreign_ref	DENY 401	-	-	None
nonexistent	hostile	DENY 401	-	-	None
shared	base	DENY 401	-	-	None
shared	foreign_ref	DENY 401	-	-	None
shared	hostile	DENY 401	-	-	None
superuser	base	DENY 401	-	-	None
superuser	foreign_ref	DENY 401	-	-	None
superuser	hostile	DENY 401	-	-	None
user_a	base	DENY 401	-	-	None
user_a	foreign_ref	DENY 401	-	-	None
user_a	hostile	DENY 401	-	-	None
user_b	base	DENY 401	-	-	None
user_b	foreign_ref	DENY 401	-	-	None
user_b	hostile	DENY 401	-	-	None

CHANGED A6 D9

target	variant	decision	leaked canaries	DB changes	count
nonexistent	base	DENY 404	-	-	None
nonexistent	foreign_ref	DENY 404	-	-	None
nonexistent	hostile	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
shared	foreign_ref	DENY 404	-	-	None
shared	hostile	DENY 404	-	-	None
superuser	base	ALLOW 200	-	delete:todo_category:self, update:todo:self	None
superuser	foreign_ref	DENY 400	-	-	None
superuser	hostile	ALLOW 200	-	delete:todo_category:self, update:todo:self	None
user_a	base	ALLOW 200	-	delete:todo_category:user_a, update:todo:user_a->self	None
user_a	foreign_ref	DENY 400	-	-	None
user_a	hostile	ALLOW 200	-	delete:todo_category:user_a, update:todo:user_a->self	None
user_b	base	ALLOW 200	-	delete:todo_category:user_b, update:todo:user_b->self	None
user_b	foreign_ref	DENY 400	-	-	None
user_b	hostile	ALLOW 200	-	delete:todo_category:user_b, update:todo:user_b->self	None

FAIL A6 D9

target	variant	decision	leaked canaries	DB changes	count	violation
nonexistent	base	DENY 404	-	-	None
nonexistent	foreign_ref	DENY 404	-	-	None
nonexistent	hostile	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
shared	foreign_ref	DENY 404	-	-	None
shared	hostile	DENY 404	-	-	None
superuser	base	ALLOW 200	-	delete:todo_category:superuser, update:todo:superuser->self	None	⚠ I3 write-isolation: user_a updated a todo row owned by superuser (ownership moved to self); I3 write-isolation: user_a deleted a todo_category row owned by superuser
superuser	foreign_ref	DENY 400	-	-	None
superuser	hostile	ALLOW 200	-	delete:todo_category:superuser, update:todo:superuser->self	None	⚠ I3 write-isolation: user_a updated a todo row owned by superuser (ownership moved to self); I3 write-isolation: user_a deleted a todo_category row owned by superuser
user_a	base	ALLOW 200	-	delete:todo_category:self, update:todo:self	None
user_a	foreign_ref	DENY 400	-	-	None
user_a	hostile	ALLOW 200	-	delete:todo_category:self, update:todo:self	None
user_b	base	ALLOW 200	-	delete:todo_category:user_b, update:todo:user_b->self	None	⚠ I3 write-isolation: user_a updated a todo row owned by user_b (ownership moved to self); I3 write-isolation: user_a deleted a todo_category row owned by user_b
user_b	foreign_ref	DENY 400	-	-	None
user_b	hostile	ALLOW 200	-	delete:todo_category:user_b, update:todo:user_b->self	None	⚠ I3 write-isolation: user_a updated a todo row owned by user_b (ownership moved to self); I3 write-isolation: user_a deleted a todo_category row owned by user_b

FAIL A6 D9

target	variant	decision	leaked canaries	DB changes	count	violation
nonexistent	base	DENY 404	-	-	None
nonexistent	foreign_ref	DENY 404	-	-	None
nonexistent	hostile	DENY 404	-	-	None
shared	base	DENY 404	-	-	None
shared	foreign_ref	DENY 404	-	-	None
shared	hostile	DENY 404	-	-	None
superuser	base	ALLOW 200	-	delete:todo_category:superuser, update:todo:superuser->self	None	⚠ I3 write-isolation: user_b updated a todo row owned by superuser (ownership moved to self); I3 write-isolation: user_b deleted a todo_category row owned by superuser
superuser	foreign_ref	DENY 400	-	-	None
superuser	hostile	ALLOW 200	-	delete:todo_category:superuser, update:todo:superuser->self	None	⚠ I3 write-isolation: user_b updated a todo row owned by superuser (ownership moved to self); I3 write-isolation: user_b deleted a todo_category row owned by superuser
user_a	base	ALLOW 200	-	delete:todo_category:user_a, update:todo:user_a->self	None	⚠ I3 write-isolation: user_b updated a todo row owned by user_a (ownership moved to self); I3 write-isolation: user_b deleted a todo_category row owned by user_a
user_a	foreign_ref	DENY 400	-	-	None
user_a	hostile	ALLOW 200	-	delete:todo_category:user_a, update:todo:user_a->self	None	⚠ I3 write-isolation: user_b updated a todo row owned by user_a (ownership moved to self); I3 write-isolation: user_b deleted a todo_category row owned by user_a
user_b	base	ALLOW 200	-	delete:todo_category:self, update:todo:self	None
user_b	foreign_ref	DENY 400	-	-	None
user_b	hostile	ALLOW 200	-	delete:todo_category:self, update:todo:self	None

Generated by report.py from the lockfile; the verdict is computed by authzlock.diff (deterministic, no LLM).