Author a schema and permission policy. Test a valid action, extra field, wrong type and unauthorised action.
Name the expected effect, metric and what would count against the hypothesis.
Record fixtures, source, version, parameters, units, controls and how cases are split.
| Case and split | Baseline result | Changed result | Interpretation |
|---|---|---|---|
A syntactically and structurally valid request for another owner passes early gates but must fail authorisation.
Record your new case and rerun the original cases after redesign.
Explain the mechanism, one exact result and what would overturn your conclusion.
This is a small explicitly declared schema, not a complete JSON Schema implementation.
Next test: _ . Project filename: _ . Work that is mine and tools I used: ____ .
Use fictional data. Download a resumable project before changing devices. On a shared device, turn remembering off and clear your work when finished.