npm - @crawlcheck/sdk - Versions diffs - 1.1.0 → 1.2.0 - Mend

@crawlcheck/sdk 1.1.0 → 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/index.d.ts +14 -2
package/dist/index.js +12 -4
package/package.json +1 -1
package/test/fixtures/guard-acceptance.json +1534 -761
package/test/guard-acceptance.test.js +2 -0

package/test/fixtures/guard-acceptance.json CHANGED Viewed

@@ -1,8 +1,8 @@
 {
  "kind": "crawlcheck-guard-acceptance",
  "v": 1,
- "suite_version": "1.0.0",
- "built_at": "2026-10-10T16:05:00.994Z",
+ "suite_version": "1.1.0",
+ "built_at": "2026-10-10T17:37:27.648Z",
  "now": "2026-10-10T16:00:00.000Z",
  "nonce": "ccguard-acceptance-0001",
  "spec": "https://crawlcheck.io/spec/guard",
@@ -17,14 +17,14 @@
  "directory": {
   "keys": [
    {
-    "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+    "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
     "kty": "OKP",
     "crv": "Ed25519",
-    "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+    "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
    }
   ]
  },
- "how": "For each case: serve directory at /.well-known/http-message-signatures-directory and answer POST /api/v1/preflight with crawlcheck (status + body or text; unreachable = refuse the connection; by_domain = the receipt for the domain asked). Call the guard with request (pin nonce and now). A fetch case also serves sites (url -> status, location, body) and records each URL the guard requested and which domain got the CrawlCheck-Receipt header. expect.proceed must match; for fetch cases, fetched must match exactly.",
+ "how": "For each case: serve directory at /.well-known/http-message-signatures-directory and answer POST /api/v1/preflight with crawlcheck (status + body or text; unreachable = refuse the connection; by_op = the receipt for the operation asked, keyed \"METHOD url\"). Call the guard with request (pin nonce and now; pass operation when given). A fetch case also serves sites (url -> status, location, body) and records each URL the guard requested and which domain got the CrawlCheck-Receipt header. expect.proceed must match; for fetch cases, fetched must match exactly.",
  "cases": [
   {
    "id": "allow",
@@ -84,24 +84,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-      "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "UsDfVs9MdXiLtQCome3GgbgNMxcO4_Ii4iSdxdc4q2jDDYc5Gs83SNdqDks4RZJfPgkk18lNBGcjXqeCWZ8hAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -170,24 +170,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "4087deff63f28d80ab6e74f5f97e4071ded917926040b6218ba473d2c70e37a4",
+     "sha256": "a61b3cccddc22e4cc5227c682ae6b9b856e454abd07ac4ff42d61888a31d1a70",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n4087deff63f28d80ab6e74f5f97e4071ded917926040b6218ba473d2c70e37a4",
-      "sig": "-23BwyFV-Yo7YSFv56muqpu_15ByScrYC4zFvAwnP_6V9mkBNmF8_MSbl58B1XijAdlfLHuP4mH_CMf0qqHmAQ",
+      "message": "crawlcheck-data-v1\na61b3cccddc22e4cc5227c682ae6b9b856e454abd07ac4ff42d61888a31d1a70",
+      "sig": "ZePkQvtcc6IP5Fi8CZIgAdavxdo60Rsfa_ckP-37ejn_nlzco-_7-dmBhEkdXbtLlv2YBTgVfmRcWfVMaL-JDA",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -256,24 +256,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "4087deff63f28d80ab6e74f5f97e4071ded917926040b6218ba473d2c70e37a4",
+     "sha256": "a61b3cccddc22e4cc5227c682ae6b9b856e454abd07ac4ff42d61888a31d1a70",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n4087deff63f28d80ab6e74f5f97e4071ded917926040b6218ba473d2c70e37a4",
-      "sig": "-23BwyFV-Yo7YSFv56muqpu_15ByScrYC4zFvAwnP_6V9mkBNmF8_MSbl58B1XijAdlfLHuP4mH_CMf0qqHmAQ",
+      "message": "crawlcheck-data-v1\na61b3cccddc22e4cc5227c682ae6b9b856e454abd07ac4ff42d61888a31d1a70",
+      "sig": "ZePkQvtcc6IP5Fi8CZIgAdavxdo60Rsfa_ckP-37ejn_nlzco-_7-dmBhEkdXbtLlv2YBTgVfmRcWfVMaL-JDA",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -342,24 +342,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "52816e2c02e27246c3e4dd9e7b09990105fa05de6a45f0a1af19b333a471fc67",
+     "sha256": "e787526129272ccf857a71911f05a42f1fb9e14831d98f7ac636c43bfcd5cb7b",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n52816e2c02e27246c3e4dd9e7b09990105fa05de6a45f0a1af19b333a471fc67",
-      "sig": "tnsyDHKS55oKRw2VYB4uEJMNoMadfDzLrBHK1ZcXwTj3k0BKJVnkec04UlLvTgZy7g3XuWXLCQT1P7fSewwHCQ",
+      "message": "crawlcheck-data-v1\ne787526129272ccf857a71911f05a42f1fb9e14831d98f7ac636c43bfcd5cb7b",
+      "sig": "rLs_Ay9ignHeD1GUSGikutuUlK44dk7nuq__uv9pX2F4osxrCZBoFJeoqUbNF8zpyRhYTdhEtvyl0Vv7xgbdBw",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -428,24 +428,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "52816e2c02e27246c3e4dd9e7b09990105fa05de6a45f0a1af19b333a471fc67",
+     "sha256": "e787526129272ccf857a71911f05a42f1fb9e14831d98f7ac636c43bfcd5cb7b",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n52816e2c02e27246c3e4dd9e7b09990105fa05de6a45f0a1af19b333a471fc67",
-      "sig": "tnsyDHKS55oKRw2VYB4uEJMNoMadfDzLrBHK1ZcXwTj3k0BKJVnkec04UlLvTgZy7g3XuWXLCQT1P7fSewwHCQ",
+      "message": "crawlcheck-data-v1\ne787526129272ccf857a71911f05a42f1fb9e14831d98f7ac636c43bfcd5cb7b",
+      "sig": "rLs_Ay9ignHeD1GUSGikutuUlK44dk7nuq__uv9pX2F4osxrCZBoFJeoqUbNF8zpyRhYTdhEtvyl0Vv7xgbdBw",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -514,24 +514,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "52816e2c02e27246c3e4dd9e7b09990105fa05de6a45f0a1af19b333a471fc67",
+     "sha256": "e787526129272ccf857a71911f05a42f1fb9e14831d98f7ac636c43bfcd5cb7b",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n52816e2c02e27246c3e4dd9e7b09990105fa05de6a45f0a1af19b333a471fc67",
-      "sig": "tnsyDHKS55oKRw2VYB4uEJMNoMadfDzLrBHK1ZcXwTj3k0BKJVnkec04UlLvTgZy7g3XuWXLCQT1P7fSewwHCQ",
+      "message": "crawlcheck-data-v1\ne787526129272ccf857a71911f05a42f1fb9e14831d98f7ac636c43bfcd5cb7b",
+      "sig": "rLs_Ay9ignHeD1GUSGikutuUlK44dk7nuq__uv9pX2F4osxrCZBoFJeoqUbNF8zpyRhYTdhEtvyl0Vv7xgbdBw",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -600,24 +600,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "522e43a3fa2a7497609711ac336e5b39c2031731959e416a6093b16e40545e6a",
+     "sha256": "8a971341f14eaa0b679b88acb401b7303f2ee05a96300a927489b73bc49503c3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n522e43a3fa2a7497609711ac336e5b39c2031731959e416a6093b16e40545e6a",
-      "sig": "xiGho7xFzvBn12O6p0b6CvtET7ffAlSJpiUoX01BA3MazC69jlf7CghIEtJ8RmNoHzxYMiE4719AmRVHhsYnAg",
+      "message": "crawlcheck-data-v1\n8a971341f14eaa0b679b88acb401b7303f2ee05a96300a927489b73bc49503c3",
+      "sig": "kKI-SBMBgX9BfnYBmT4P5pSkEyw7JyNQ2Bp36b4x7s7IFGecCetJQfVjjYhxeN2PpKuNeRfy9dY57leCfz4UAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -686,24 +686,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "c7fd52aca25a133afdd65b866ad34523c411fc064c7a40e647a2f1247028c406",
+     "sha256": "6f7cc883053ffd28068c9c2b216c401dfb0450a213f24397d64e8dac2d0d9422",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\nc7fd52aca25a133afdd65b866ad34523c411fc064c7a40e647a2f1247028c406",
-      "sig": "inLocrxYkAYJLWcAr-c5wqxRGX-t7wt9j8Cie1XlTDzfZTlDDzhoo0_chdABkpkrYyLpEVazO9S2F4Y6Oee6CA",
+      "message": "crawlcheck-data-v1\n6f7cc883053ffd28068c9c2b216c401dfb0450a213f24397d64e8dac2d0d9422",
+      "sig": "DpFPdTJj5UHLBFUUbNrUUjkTOypg3MpRXWGfazdPT6CyIMYVDRX-y4vwUoZFUgxNVSx9eZkap1FnefSBAL4MDg",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -772,24 +772,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "3b88ee12d02e097b2dd0eaa9a20359263cddf3e63755f6dae48dfa334b43ab07",
+     "sha256": "a5111ae838a6af5b8760db84a90e6b84b706d05a3966698e76ca0c2d45886cdd",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n3b88ee12d02e097b2dd0eaa9a20359263cddf3e63755f6dae48dfa334b43ab07",
-      "sig": "nuSF6k8YHSlWF5klhgGZ_-XFkP4rvxszED9WzFM2n54qY3i_du4R69yks6xyClK3nRoPO4j6_nWap2Cm40ucDg",
+      "message": "crawlcheck-data-v1\na5111ae838a6af5b8760db84a90e6b84b706d05a3966698e76ca0c2d45886cdd",
+      "sig": "abr7ZjDdhLqDrsl2e-vMo5NVccX8LAr9oOMzL0ZxFOmudp7Dar-PHfJZ11pmZ8RCPWZbsv6inm8aIMywExGNAA",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -858,24 +858,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "29687918f0a949ebb8789fe718613a18698adfd5ae3162d828d0bb7174bc6626",
+     "sha256": "b25f70e751509ac0ff6cd24abdeebb9f1065ac53375e9c4ebab0cf3c69d676e8",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n29687918f0a949ebb8789fe718613a18698adfd5ae3162d828d0bb7174bc6626",
-      "sig": "Qjr9IICsAsyxgc_oEvzg6LpiU2cDCHOujMLuJaM6x_4tFeT9nj2Axv1KslWwph9fjnPTFzw3yhl4iHTJD561CA",
+      "message": "crawlcheck-data-v1\nb25f70e751509ac0ff6cd24abdeebb9f1065ac53375e9c4ebab0cf3c69d676e8",
+      "sig": "1n8qrBKIZr17sEz4FdQa3aWvfmnYM8IztTHnsS67H2c_WRLMOB9Qc6U5x00J_L19gZr5yo_OTEedR8gJQDUjAw",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -944,24 +944,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-      "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "UsDfVs9MdXiLtQCome3GgbgNMxcO4_Ii4iSdxdc4q2jDDYc5Gs83SNdqDks4RZJfPgkk18lNBGcjXqeCWZ8hAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1030,24 +1030,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-      "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "UsDfVs9MdXiLtQCome3GgbgNMxcO4_Ii4iSdxdc4q2jDDYc5Gs83SNdqDks4RZJfPgkk18lNBGcjXqeCWZ8hAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1116,24 +1116,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-      "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "UsDfVs9MdXiLtQCome3GgbgNMxcO4_Ii4iSdxdc4q2jDDYc5Gs83SNdqDks4RZJfPgkk18lNBGcjXqeCWZ8hAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1202,24 +1202,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "4e16cdc5805460543702342938398e334ba33cf094bad8634736518264ef9a63",
+     "sha256": "9634a6bd3462080428f8c9c05743019fa4eae803789a9841eb97fe5bfd4317f2",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n4e16cdc5805460543702342938398e334ba33cf094bad8634736518264ef9a63",
-      "sig": "eS7gUq43ulFerBhaVvsahhid8KJfSxy8FSJZUtrSAqig08HLteuLZXFUeOVKU2hYBxmqxg2R-mFFelnKV6GfBQ",
+      "message": "crawlcheck-data-v1\n9634a6bd3462080428f8c9c05743019fa4eae803789a9841eb97fe5bfd4317f2",
+      "sig": "408_pyEZ2MYCCAmGbc_hGlivY3Vp6N5YyZr29impFM-Jvm0ssq8gxB1PlXlV2dfHOWaJ8RXakIdCRx_8MwX4CA",
       "signed_at": "2026-10-09T15:00:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1288,24 +1288,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "bd9113e82fca1f8acd901cf549ba5d6f92ff2196b6eb95b2a1891e52bd6bc9fd",
+     "sha256": "88b5de1b5005d60eb024fb047032a1d0ee4490fa730c7ddb01ebc4d83669c4d2",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\nbd9113e82fca1f8acd901cf549ba5d6f92ff2196b6eb95b2a1891e52bd6bc9fd",
-      "sig": "FmOn2Uq2mvo38_JMySChVp8yGsmTJl4It5glmhYGqpql4Vo2cOzXtJbXLBENeWaV3jmVjjusCJpoFuYO8EHpCA",
+      "message": "crawlcheck-data-v1\n88b5de1b5005d60eb024fb047032a1d0ee4490fa730c7ddb01ebc4d83669c4d2",
+      "sig": "Tcjm2ChxBM5HpfbdLmzhbyZ8QWZpNUqwGcgclPstFZYWD4T5SSLi0gpTEExBCCPl-XhqrinxSy5GgkQ7hLuOAA",
       "signed_at": "2026-10-09T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1374,24 +1374,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "e7f4b304881647523514b6da29349bf10de4bf7fb646b7f262628dcc92243733",
+     "sha256": "7f87d75cafbb05cb9e52f2b1c69ec76d8b628729dbafc70778e054792282369f",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\ne7f4b304881647523514b6da29349bf10de4bf7fb646b7f262628dcc92243733",
-      "sig": "cyyPmF-ogSRi1FwoP3YkWtjiyAwvKpwOSZP7Yg7XBkk6Dk_ElaWpsrG_7iFwL4HCCsNu_yaXlHL9Y2jR0SD5AA",
+      "message": "crawlcheck-data-v1\n7f87d75cafbb05cb9e52f2b1c69ec76d8b628729dbafc70778e054792282369f",
+      "sig": "4fu2iv2mvKfhq_gq23_oECMg4X6KeojZ5oDXuwNdfGn-RRv0jUkg3l3lMaFLMv8c6bsGdksC_eeUobeCFI7oCQ",
       "signed_at": "2026-10-09T10:00:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1460,24 +1460,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "5ed156bb141263c98315b8bfb7d64b7930f618028c42afee2ec7a330f046432e",
+     "sha256": "50e2b1ea1d4ee144da2cec0667992533283dc4469e3438ade0ebfb4f4b9898ed",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n5ed156bb141263c98315b8bfb7d64b7930f618028c42afee2ec7a330f046432e",
-      "sig": "sRrKuSXcSvHmuPcfWHXG1LIurqafnNtE4AB8gFNCrBq9u0Ng9p5FrovvhMdVkBoqWL23b1oq_EQoZg3nE4rxCw",
+      "message": "crawlcheck-data-v1\n50e2b1ea1d4ee144da2cec0667992533283dc4469e3438ade0ebfb4f4b9898ed",
+      "sig": "8NcKQ_Y589lD4SSp11bA77ewEC_kHjw9bPx5Hx6UHUerj287ONWKf3zJWfocoMPxipl1X3fXjxoJdVOwWPrbAA",
       "signed_at": "2026-10-10T17:00:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1546,24 +1546,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "518e63f730cfa51ef8c7b6f92b277d42d337e86c531b2c66601d0124e6b28ebf",
+     "sha256": "28931a349e9bc0e9c478530c0071f7e20dc24388ea2b815fc8f7228fad31a060",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n518e63f730cfa51ef8c7b6f92b277d42d337e86c531b2c66601d0124e6b28ebf",
-      "sig": "dMQH-IMugStO8ZrjpO1VMgYcV82YQVAxeiZCfOUOGrLFAahPjjbQMJg4c97VUvae2wTqqjU8dqPycDbom_o3BQ",
+      "message": "crawlcheck-data-v1\n28931a349e9bc0e9c478530c0071f7e20dc24388ea2b815fc8f7228fad31a060",
+      "sig": "z3yRMVaKiyxLs9fhA5-SiFKJUyDDlFN9ugDDkdN9TesNm4mONiYqLTvTQup2viQwWXimAcIWuvQz8OjwyBpoAg",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1632,24 +1632,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "38cbaa157d99a121b7739ce6180609667a9ea80878b4f1d048a24fefd8226662",
+     "sha256": "a3648428bf79533bcc8e56824b00d84c1b08b43fbc2b85b05f27d55eca3314ba",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n38cbaa157d99a121b7739ce6180609667a9ea80878b4f1d048a24fefd8226662",
-      "sig": "WOPwEQkLD30kLCHpA5eVx-Lqcbl--FPA2ET69eeNxAKTIbNlTtjyHDgavdFWfumAR_6JFaEL1NVhppqDijy0Bg",
+      "message": "crawlcheck-data-v1\na3648428bf79533bcc8e56824b00d84c1b08b43fbc2b85b05f27d55eca3314ba",
+      "sig": "9etX5NwB1CQ8aMjmlK_gEhI_oTlG7MUeB0MywfUZTxrbZNXdyugALikhw3XDuxhmSSa2OhtxkW-7wXEqU-UIBg",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1717,24 +1717,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "175b9ab45f76068da08b83cda4729043ca2765372671fa4066da4edaf0f76c47",
+     "sha256": "8efa26dc397c0a083301cfffa56352c95928ff4d8300ff5adc6e1c76d847c805",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n175b9ab45f76068da08b83cda4729043ca2765372671fa4066da4edaf0f76c47",
-      "sig": "74Nx196-TvUaHI3if-OR2IqjdYj4rxbtNJ2A69LCXw9-XGrUSVsadWjrtkMsvFMCvspGDWzSCI9RC8zL9pBiDA",
+      "message": "crawlcheck-data-v1\n8efa26dc397c0a083301cfffa56352c95928ff4d8300ff5adc6e1c76d847c805",
+      "sig": "ouapFzifHzyK_aU687FlL2Rnpouo4XCN-RyPd1rnMjny182FzLYa0T8vGRnuN3rbr8oDV3xZYIzBsnTiDvIVBQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1803,24 +1803,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "c10b5197019d39ccdc280e381611cc39fecb4599b3caaf054f2933f61617cce4",
+     "sha256": "709e62feb85e66fa72a4feb01ef8f3480d37629a5260eaba267fb9fad1c16380",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\nc10b5197019d39ccdc280e381611cc39fecb4599b3caaf054f2933f61617cce4",
-      "sig": "JMniM_hoBzoqjk5lxsZ_ZPOKE5jOs0X8veal7KukmwldWuVcf1iJNOtU8shwhPBSd1NiEJrVu1tsNz_F-DgDDQ",
+      "message": "crawlcheck-data-v1\n709e62feb85e66fa72a4feb01ef8f3480d37629a5260eaba267fb9fad1c16380",
+      "sig": "G9hh4BbowgkBY1aWAXWTeCNEOoYLFRKAOQLOxbFACrXZgiJU9XpHoCDI6KwBgt6ifKuvkkRjZdWitadB6F_7Bg",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1888,24 +1888,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "a945f42028e11abc9c38c03935e08e5173d67531b115e51d134d7a6a2a4d6995",
+     "sha256": "ac056e569a560d6663b61c0fc2b73c1b70e4bc832ffe2ca0273fe90885b341c9",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\na945f42028e11abc9c38c03935e08e5173d67531b115e51d134d7a6a2a4d6995",
-      "sig": "lG3TABXmWO05i83q31YHtt8VI50Hpn8U93R-cdhgpE-yYSCC3dmSuPilc0HMqjO9IKzpDprwzAakxXlDF4nCAw",
+      "message": "crawlcheck-data-v1\nac056e569a560d6663b61c0fc2b73c1b70e4bc832ffe2ca0273fe90885b341c9",
+      "sig": "dhuSCnAx7ju0GEy49a4IF8DQYP0_vqRERB00cakQJYEhjPQaRc1DzXuUArD0dSyhAsFvxDYzD4xxDmP0ax8HBA",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1917,16 +1917,20 @@
    }
   },
   {
-   "id": "tampered",
-   "title": "a block receipt edited to allow",
-   "why": "the digest no longer matches",
+   "id": "op-match",
+   "title": "a receipt for exactly this request",
+   "why": "positive control",
    "request": {
     "domain": "good.example",
     "action": "read",
     "allow_warn": false,
     "confirm": null,
     "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
+    "now": "2026-10-10T16:00:00.000Z",
+    "operation": {
+     "method": "GET",
+     "url": "https://good.example/a"
+    }
    },
    "crawlcheck": {
     "status": 200,
@@ -1955,7 +1959,7 @@
       "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
      },
      "decision": "allow",
-     "base_decision": "block",
+     "base_decision": "allow",
      "human_confirmation_required": false,
      "reason_codes": [
       "resolve.actions.read"
@@ -1963,7 +1967,7 @@
      "steps": [
       {
        "rule": "resolve.actions.read",
-       "effect": "block",
+       "effect": "allow",
        "why": "suite fixture"
       }
      ],
@@ -1974,24 +1978,28 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "522e43a3fa2a7497609711ac336e5b39c2031731959e416a6093b16e40545e6a",
+     "operation": {
+      "method": "GET",
+      "url": "https://good.example/a"
+     },
+     "sha256": "f5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n522e43a3fa2a7497609711ac336e5b39c2031731959e416a6093b16e40545e6a",
-      "sig": "xiGho7xFzvBn12O6p0b6CvtET7ffAlSJpiUoX01BA3MazC69jlf7CghIEtJ8RmNoHzxYMiE4719AmRVHhsYnAg",
+      "message": "crawlcheck-data-v1\nf5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
+      "sig": "c_uHr1UCRQ-qxjnCl-Vmr8q3eG6VqaATNtzhLipXlCVRzuYXZ7YHwkhgNO78FpxF9cBhxVRIpACLQ7RLN1ORAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -1999,20 +2007,24 @@
     }
    },
    "expect": {
-    "proceed": false
+    "proceed": true
    }
   },
   {
-   "id": "tampered-unsigned-field",
-   "title": "a field added after signing",
-   "why": "every field is signed",
+   "id": "op-other-url",
+   "title": "a receipt for another URL on the same domain",
+   "why": "a receipt is valid only for the request it names",
    "request": {
     "domain": "good.example",
     "action": "read",
     "allow_warn": false,
     "confirm": null,
     "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
+    "now": "2026-10-10T16:00:00.000Z",
+    "operation": {
+     "method": "GET",
+     "url": "https://good.example/a"
+    }
    },
    "crawlcheck": {
     "status": 200,
@@ -2060,29 +2072,32 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+     "operation": {
+      "method": "GET",
+      "url": "https://good.example/b"
+     },
+     "sha256": "c0a94d0e744a67264826c810e7b748663591aaab3f826e0c53c1820e021a782a",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-      "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+      "message": "crawlcheck-data-v1\nc0a94d0e744a67264826c810e7b748663591aaab3f826e0c53c1820e021a782a",
+      "sig": "98E457J2ESPlgl3Eh-NNQzxIoZgU2i9eXxPytK7orE0EOhgeUSA5i0bFKZYTDubsitPTSDV7Rb5tDGd4H3mdAg",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
-     },
-     "x_note": "added later"
+     }
     }
    },
    "expect": {
@@ -2090,16 +2105,20 @@
    }
   },
   {
-   "id": "unknown-signed-field",
-   "title": "an unknown field that was signed",
-   "why": "forward compatible: ignore unknown fields, but only signed ones",
+   "id": "op-other-method",
+   "title": "a GET receipt used for a POST",
+   "why": "",
    "request": {
     "domain": "good.example",
     "action": "read",
     "allow_warn": false,
     "confirm": null,
     "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
+    "now": "2026-10-10T16:00:00.000Z",
+    "operation": {
+     "method": "POST",
+     "url": "https://good.example/a"
+    }
    },
    "crawlcheck": {
     "status": 200,
@@ -2147,27 +2166,28 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "x_future_field": {
-      "a": 1
+     "operation": {
+      "method": "GET",
+      "url": "https://good.example/a"
      },
-     "sha256": "487bebaef655eb80fbd3a2a40a37175ac7400593f469f55624a4be7340c91d43",
+     "sha256": "f5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n487bebaef655eb80fbd3a2a40a37175ac7400593f469f55624a4be7340c91d43",
-      "sig": "HkbhFMAmngLxT7qDoJiC5iMaTWI3c-VzEZyOJstCDZTwxzM0JvpsJcKHrx1bAhfyq1SfN6BfrdYi06n3I3CqCg",
+      "message": "crawlcheck-data-v1\nf5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
+      "sig": "c_uHr1UCRQ-qxjnCl-Vmr8q3eG6VqaATNtzhLipXlCVRzuYXZ7YHwkhgNO78FpxF9cBhxVRIpACLQ7RLN1ORAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -2175,20 +2195,24 @@
     }
    },
    "expect": {
-    "proceed": true
+    "proceed": false
    }
   },
   {
-   "id": "foreign-key",
-   "title": "a valid signature by a key CrawlCheck does not publish",
-   "why": "integrity is not trust",
+   "id": "op-missing",
+   "title": "the request names an operation, the receipt names none",
+   "why": "an unscoped receipt cannot stand in for a scoped one",
    "request": {
     "domain": "good.example",
     "action": "read",
     "allow_warn": false,
     "confirm": null,
     "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
+    "now": "2026-10-10T16:00:00.000Z",
+    "operation": {
+     "method": "GET",
+     "url": "https://good.example/a"
+    }
    },
    "crawlcheck": {
     "status": 200,
@@ -2236,24 +2260,24 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "hiz1BvdOLd02B_tacU8Ps3pnx-QPuaZiI7DrU-_BMqo",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-      "sig": "hSzvxKW0rwKP83tqJyzp-dQF0TJ55Z9dl9FLuwmXemOeuaXqmTTji5EpWr5w-g24O4Qzhrtp0p1TMSAMflF9AQ",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "UsDfVs9MdXiLtQCome3GgbgNMxcO4_Ii4iSdxdc4q2jDDYc5Gs83SNdqDks4RZJfPgkk18lNBGcjXqeCWZ8hAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "hiz1BvdOLd02B_tacU8Ps3pnx-QPuaZiI7DrU-_BMqo",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "6MBlSJe5bf02wl5uX3c01ubBjBTQLR4wDnu08DytZYU"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -2265,16 +2289,20 @@
    }
   },
   {
-   "id": "kid-mismatch",
-   "title": "a published kid on a signature by another key",
-   "why": "the key id must be the key's thumbprint",
+   "id": "op-tool-schema",
+   "title": "a receipt for the same tool with a different definition",
+   "why": "the tool changed since it was decided",
    "request": {
     "domain": "good.example",
-    "action": "read",
+    "action": "connect",
     "allow_warn": false,
     "confirm": null,
     "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
+    "now": "2026-10-10T16:00:00.000Z",
+    "operation": {
+     "tool": "search",
+     "tool_schema_sha256": "1111111111111111111111111111111111111111111111111111111111111111"
+    }
    },
    "crawlcheck": {
     "status": 200,
@@ -2282,11 +2310,11 @@
      "kind": "crawlcheck-decision",
      "v": 1,
      "decided_at": "2026-10-10T15:59:00.000Z",
-     "expires_at": "2026-10-11T15:59:00.000Z",
+     "expires_at": "2026-10-10T16:59:00.000Z",
      "clock_skew_s": 300,
      "nonce": "ccguard-acceptance-0001",
      "domain": "good.example",
-     "action": "read",
+     "action": "connect",
      "agent": null,
      "template": null,
      "policy": {
@@ -2306,11 +2334,11 @@
      "base_decision": "allow",
      "human_confirmation_required": false,
      "reason_codes": [
-      "resolve.actions.read"
+      "resolve.actions.connect"
      ],
      "steps": [
       {
-       "rule": "resolve.actions.read",
+       "rule": "resolve.actions.connect",
        "effect": "allow",
        "why": "suite fixture"
       }
@@ -2322,24 +2350,28 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+     "operation": {
+      "tool": "search",
+      "tool_schema_sha256": "2222222222222222222222222222222222222222222222222222222222222222"
+     },
+     "sha256": "6fc292bb0ff400aabc2f916ea164f1bebf21c840239a5c73fe61eb4f7e5a1458",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-      "sig": "hSzvxKW0rwKP83tqJyzp-dQF0TJ55Z9dl9FLuwmXemOeuaXqmTTji5EpWr5w-g24O4Qzhrtp0p1TMSAMflF9AQ",
+      "message": "crawlcheck-data-v1\n6fc292bb0ff400aabc2f916ea164f1bebf21c840239a5c73fe61eb4f7e5a1458",
+      "sig": "zNgadyQyufJZyrEp4iHDuWkM6RmaHpMxRX1UQ2qMUx0SaE3dPyZQIF2PM0luJ1HuAUKamPIZH2dq1gQwLtb0Cw",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "6MBlSJe5bf02wl5uX3c01ubBjBTQLR4wDnu08DytZYU"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -2351,16 +2383,24 @@
    }
   },
   {
-   "id": "unsigned",
-   "title": "no signature",
+   "id": "op-scopes",
+   "title": "a receipt for fewer scopes than requested",
    "why": "",
    "request": {
     "domain": "good.example",
-    "action": "read",
+    "action": "connect",
     "allow_warn": false,
     "confirm": null,
     "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
+    "now": "2026-10-10T16:00:00.000Z",
+    "operation": {
+     "tool": "search",
+     "tool_schema_sha256": "1111111111111111111111111111111111111111111111111111111111111111",
+     "scopes": [
+      "read",
+      "write"
+     ]
+    }
    },
    "crawlcheck": {
     "status": 200,
@@ -2368,11 +2408,11 @@
      "kind": "crawlcheck-decision",
      "v": 1,
      "decided_at": "2026-10-10T15:59:00.000Z",
-     "expires_at": "2026-10-11T15:59:00.000Z",
+     "expires_at": "2026-10-10T16:59:00.000Z",
      "clock_skew_s": 300,
      "nonce": "ccguard-acceptance-0001",
      "domain": "good.example",
-     "action": "read",
+     "action": "connect",
      "agent": null,
      "template": null,
      "policy": {
@@ -2392,11 +2432,11 @@
      "base_decision": "allow",
      "human_confirmation_required": false,
      "reason_codes": [
-      "resolve.actions.read"
+      "resolve.actions.connect"
      ],
      "steps": [
       {
-       "rule": "resolve.actions.read",
+       "rule": "resolve.actions.connect",
        "effect": "allow",
        "why": "suite fixture"
       }
@@ -2408,10 +2448,35 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72"
+     "operation": {
+      "tool": "search",
+      "tool_schema_sha256": "1111111111111111111111111111111111111111111111111111111111111111",
+      "scopes": [
+       "read"
+      ]
+     },
+     "sha256": "52ffd782a311c7c68db33dd386780799d707b17ec967e7b031584675f232629e",
+     "signature": {
+      "v": 1,
+      "alg": "Ed25519",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "over": "sha256",
+      "message": "crawlcheck-data-v1\n52ffd782a311c7c68db33dd386780799d707b17ec967e7b031584675f232629e",
+      "sig": "tm9A4uS8fGfcfSaVqBDc5MGVyFJgI07LVPsvwOEzQgoYFNQNq7s3ZDJf6_iiHqRI5bL86crqs-5Qn2Pe2LoMBA",
+      "signed_at": "2026-10-10T15:59:00.000Z",
+      "key": {
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+       "jwk": {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
+       },
+       "published_in": "the suite's directory"
+      }
+     }
     }
    },
    "expect": {
@@ -2419,9 +2484,9 @@
    }
   },
   {
-   "id": "resolve-unbound",
-   "title": "no resolve answer named",
-   "why": "a decision must name the answer it was made from",
+   "id": "tampered",
+   "title": "a block receipt edited to allow",
+   "why": "the digest no longer matches",
    "request": {
     "domain": "good.example",
     "action": "read",
@@ -2457,7 +2522,7 @@
       "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
      },
      "decision": "allow",
-     "base_decision": "allow",
+     "base_decision": "block",
      "human_confirmation_required": false,
      "reason_codes": [
       "resolve.actions.read"
@@ -2465,7 +2530,7 @@
      "steps": [
       {
        "rule": "resolve.actions.read",
-       "effect": "allow",
+       "effect": "block",
        "why": "suite fixture"
       }
      ],
@@ -2474,21 +2539,26 @@
       "report": "https://crawlcheck.io/r/suitefixture",
       "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      },
-     "sha256": "5cb17bb16c0e5575318767d9c4a85b881a347c18e25976a90862e791061517c5",
+     "resolve": {
+      "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+     },
+     "sha256": "8a971341f14eaa0b679b88acb401b7303f2ee05a96300a927489b73bc49503c3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n5cb17bb16c0e5575318767d9c4a85b881a347c18e25976a90862e791061517c5",
-      "sig": "iY3dfYatdpJrXKlAjNv_BQql91IT-1_DldVn06ZHXgq6cqnzW2J8pL4Ff_5-n-Ga1Y_QEbau58MrSqbBAxchAQ",
+      "message": "crawlcheck-data-v1\n8a971341f14eaa0b679b88acb401b7303f2ee05a96300a927489b73bc49503c3",
+      "sig": "kKI-SBMBgX9BfnYBmT4P5pSkEyw7JyNQ2Bp36b4x7s7IFGecCetJQfVjjYhxeN2PpKuNeRfy9dY57leCfz4UAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -2500,9 +2570,9 @@
    }
   },
   {
-   "id": "wrong-kind",
-   "title": "a signed document of another kind",
-   "why": "only a decision receipt decides",
+   "id": "tampered-unsigned-field",
+   "title": "a field added after signing",
+   "why": "every field is signed",
    "request": {
     "domain": "good.example",
     "action": "read",
@@ -2514,7 +2584,7 @@
    "crawlcheck": {
     "status": 200,
     "body": {
-     "kind": "crawlcheck-resolve",
+     "kind": "crawlcheck-decision",
      "v": 1,
      "decided_at": "2026-10-10T15:59:00.000Z",
      "expires_at": "2026-10-11T15:59:00.000Z",
@@ -2557,28 +2627,29 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "4d0cdf12eddf6dc14b7997eda8e9b5645105c2826a6fd8e5863cae562c83f122",
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n4d0cdf12eddf6dc14b7997eda8e9b5645105c2826a6fd8e5863cae562c83f122",
-      "sig": "zdiF4ay6wGDX8I8BTE0KWlhPVyzWs6xvxYFQZwFJ6wTetVclirqVmuwz-SN6IzXo29LlQqYd_HDgQuoVDR_ABw",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "UsDfVs9MdXiLtQCome3GgbgNMxcO4_Ii4iSdxdc4q2jDDYc5Gs83SNdqDks4RZJfPgkk18lNBGcjXqeCWZ8hAQ",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
-     }
+     },
+     "x_note": "added later"
     }
    },
    "expect": {
@@ -2586,9 +2657,9 @@
    }
   },
   {
-   "id": "wrong-version",
-   "title": "a decision of an unknown version",
-   "why": "",
+   "id": "unknown-signed-field",
+   "title": "an unknown field that was signed",
+   "why": "forward compatible: ignore unknown fields, but only signed ones",
    "request": {
     "domain": "good.example",
     "action": "read",
@@ -2601,7 +2672,7 @@
     "status": 200,
     "body": {
      "kind": "crawlcheck-decision",
-     "v": 2,
+     "v": 1,
      "decided_at": "2026-10-10T15:59:00.000Z",
      "expires_at": "2026-10-11T15:59:00.000Z",
      "clock_skew_s": 300,
@@ -2643,24 +2714,27 @@
      },
      "resolve": {
       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
      },
-     "sha256": "6f7d751e54530891cae051857199c1318e01ac672be9688b15d3ac8f4d2bbc67",
+     "x_future_field": {
+      "a": 1
+     },
+     "sha256": "da7b06f7aee6ece8fee69ca93a3eac3f94771bba686c8e1cfb67348ed0c46bf8",
      "signature": {
       "v": 1,
       "alg": "Ed25519",
-      "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
       "over": "sha256",
-      "message": "crawlcheck-data-v1\n6f7d751e54530891cae051857199c1318e01ac672be9688b15d3ac8f4d2bbc67",
-      "sig": "BPPmNlTUjYlrHFU3ibHC250cynzfS9KSTa5tkTs-2-zGMtRXKaTfyd_Iejed1E55DsDGoiq-21xy-se9-g67Dw",
+      "message": "crawlcheck-data-v1\nda7b06f7aee6ece8fee69ca93a3eac3f94771bba686c8e1cfb67348ed0c46bf8",
+      "sig": "vCW6ktdLeLxqwqG-yYoCcwdmY_XaUFys-UUkNHhbSFi9pXRyKYOiaLuUd8gVMWNOSqcDK0nL0ARlx-t2KR2JAA",
       "signed_at": "2026-10-10T15:59:00.000Z",
       "key": {
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "jwk": {
         "kty": "OKP",
         "crv": "Ed25519",
-        "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
        },
        "published_in": "the suite's directory"
       }
@@ -2668,33 +2742,13 @@
     }
    },
    "expect": {
-    "proceed": false
-   }
-  },
-  {
-   "id": "malformed-empty",
-   "title": "an empty object",
-   "why": "",
-   "request": {
-    "domain": "good.example",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
-   },
-   "crawlcheck": {
-    "status": 200,
-    "body": {}
-   },
-   "expect": {
-    "proceed": false
+    "proceed": true
    }
   },
   {
-   "id": "malformed-array",
-   "title": "a JSON array",
-   "why": "",
+   "id": "foreign-key",
+   "title": "a valid signature by a key CrawlCheck does not publish",
+   "why": "integrity is not trust",
    "request": {
     "domain": "good.example",
     "action": "read",
@@ -2705,16 +2759,82 @@
    },
    "crawlcheck": {
     "status": 200,
-    "body": []
+    "body": {
+     "kind": "crawlcheck-decision",
+     "v": 1,
+     "decided_at": "2026-10-10T15:59:00.000Z",
+     "expires_at": "2026-10-11T15:59:00.000Z",
+     "clock_skew_s": 300,
+     "nonce": "ccguard-acceptance-0001",
+     "domain": "good.example",
+     "action": "read",
+     "agent": null,
+     "template": null,
+     "policy": {
+      "max_age_hours": null,
+      "on_warn": "warn",
+      "require_entity": false,
+      "human_approval": [],
+      "allow": [],
+      "deny": []
+     },
+     "policy_id": null,
+     "engine": {
+      "version": "pf4",
+      "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
+     },
+     "decision": "allow",
+     "base_decision": "allow",
+     "human_confirmation_required": false,
+     "reason_codes": [
+      "resolve.actions.read"
+     ],
+     "steps": [
+      {
+       "rule": "resolve.actions.read",
+       "effect": "allow",
+       "why": "suite fixture"
+      }
+     ],
+     "alternatives": [],
+     "evidence": {
+      "report": "https://crawlcheck.io/r/suitefixture",
+      "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+     },
+     "resolve": {
+      "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+     },
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+     "signature": {
+      "v": 1,
+      "alg": "Ed25519",
+      "kid": "yl1T31KADTAVyxbGzRRj5F-ZmYYC6hqeN0iAAlxnGbs",
+      "over": "sha256",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "hQFqinhT0T9SEPgoCUadIOgKPLXvs12IfZNjFPGK_09gVMVen4oxKGHQ2puJPbwPe6Ug587nopt4tAdXTILKBg",
+      "signed_at": "2026-10-10T15:59:00.000Z",
+      "key": {
+       "kid": "yl1T31KADTAVyxbGzRRj5F-ZmYYC6hqeN0iAAlxnGbs",
+       "jwk": {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "wXXmhnfSBlMlbzr3YAoTDw7Lv9xn1BSmojPy9f2lPUA"
+       },
+       "published_in": "the suite's directory"
+      }
+     }
+    }
    },
    "expect": {
     "proceed": false
    }
   },
   {
-   "id": "malformed-text",
-   "title": "not JSON",
-   "why": "",
+   "id": "kid-mismatch",
+   "title": "a published kid on a signature by another key",
+   "why": "the key id must be the key's thumbprint",
    "request": {
     "domain": "good.example",
     "action": "read",
@@ -2725,44 +2845,491 @@
    },
    "crawlcheck": {
     "status": 200,
-    "text": "<html>maintenance</html>"
-   },
-   "expect": {
-    "proceed": false
-   }
-  },
-  {
-   "id": "http-500",
-   "title": "CrawlCheck answers 500",
-   "why": "fail closed",
-   "request": {
-    "domain": "good.example",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
-   },
-   "crawlcheck": {
-    "status": 500,
-    "text": "{\"error\":\"internal\"}"
-   },
-   "expect": {
-    "proceed": false
-   }
-  },
-  {
-   "id": "http-429",
-   "title": "CrawlCheck answers 429",
-   "why": "fail closed",
-   "request": {
-    "domain": "good.example",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z"
-   },
+    "body": {
+     "kind": "crawlcheck-decision",
+     "v": 1,
+     "decided_at": "2026-10-10T15:59:00.000Z",
+     "expires_at": "2026-10-11T15:59:00.000Z",
+     "clock_skew_s": 300,
+     "nonce": "ccguard-acceptance-0001",
+     "domain": "good.example",
+     "action": "read",
+     "agent": null,
+     "template": null,
+     "policy": {
+      "max_age_hours": null,
+      "on_warn": "warn",
+      "require_entity": false,
+      "human_approval": [],
+      "allow": [],
+      "deny": []
+     },
+     "policy_id": null,
+     "engine": {
+      "version": "pf4",
+      "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
+     },
+     "decision": "allow",
+     "base_decision": "allow",
+     "human_confirmation_required": false,
+     "reason_codes": [
+      "resolve.actions.read"
+     ],
+     "steps": [
+      {
+       "rule": "resolve.actions.read",
+       "effect": "allow",
+       "why": "suite fixture"
+      }
+     ],
+     "alternatives": [],
+     "evidence": {
+      "report": "https://crawlcheck.io/r/suitefixture",
+      "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+     },
+     "resolve": {
+      "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+     },
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+     "signature": {
+      "v": 1,
+      "alg": "Ed25519",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "over": "sha256",
+      "message": "crawlcheck-data-v1\n99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3",
+      "sig": "hQFqinhT0T9SEPgoCUadIOgKPLXvs12IfZNjFPGK_09gVMVen4oxKGHQ2puJPbwPe6Ug587nopt4tAdXTILKBg",
+      "signed_at": "2026-10-10T15:59:00.000Z",
+      "key": {
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+       "jwk": {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "wXXmhnfSBlMlbzr3YAoTDw7Lv9xn1BSmojPy9f2lPUA"
+       },
+       "published_in": "the suite's directory"
+      }
+     }
+    }
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "unsigned",
+   "title": "no signature",
+   "why": "",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 200,
+    "body": {
+     "kind": "crawlcheck-decision",
+     "v": 1,
+     "decided_at": "2026-10-10T15:59:00.000Z",
+     "expires_at": "2026-10-11T15:59:00.000Z",
+     "clock_skew_s": 300,
+     "nonce": "ccguard-acceptance-0001",
+     "domain": "good.example",
+     "action": "read",
+     "agent": null,
+     "template": null,
+     "policy": {
+      "max_age_hours": null,
+      "on_warn": "warn",
+      "require_entity": false,
+      "human_approval": [],
+      "allow": [],
+      "deny": []
+     },
+     "policy_id": null,
+     "engine": {
+      "version": "pf4",
+      "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
+     },
+     "decision": "allow",
+     "base_decision": "allow",
+     "human_confirmation_required": false,
+     "reason_codes": [
+      "resolve.actions.read"
+     ],
+     "steps": [
+      {
+       "rule": "resolve.actions.read",
+       "effect": "allow",
+       "why": "suite fixture"
+      }
+     ],
+     "alternatives": [],
+     "evidence": {
+      "report": "https://crawlcheck.io/r/suitefixture",
+      "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+     },
+     "resolve": {
+      "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+     },
+     "sha256": "99a82a7c79a27033a71bc20072bfed7ad8e93fd0e9f216d9e96458d6cf4e5ef3"
+    }
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "resolve-unbound",
+   "title": "no resolve answer named",
+   "why": "a decision must name the answer it was made from",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 200,
+    "body": {
+     "kind": "crawlcheck-decision",
+     "v": 1,
+     "decided_at": "2026-10-10T15:59:00.000Z",
+     "expires_at": "2026-10-11T15:59:00.000Z",
+     "clock_skew_s": 300,
+     "nonce": "ccguard-acceptance-0001",
+     "domain": "good.example",
+     "action": "read",
+     "agent": null,
+     "template": null,
+     "policy": {
+      "max_age_hours": null,
+      "on_warn": "warn",
+      "require_entity": false,
+      "human_approval": [],
+      "allow": [],
+      "deny": []
+     },
+     "policy_id": null,
+     "engine": {
+      "version": "pf4",
+      "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
+     },
+     "decision": "allow",
+     "base_decision": "allow",
+     "human_confirmation_required": false,
+     "reason_codes": [
+      "resolve.actions.read"
+     ],
+     "steps": [
+      {
+       "rule": "resolve.actions.read",
+       "effect": "allow",
+       "why": "suite fixture"
+      }
+     ],
+     "alternatives": [],
+     "evidence": {
+      "report": "https://crawlcheck.io/r/suitefixture",
+      "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+     },
+     "sha256": "5cb17bb16c0e5575318767d9c4a85b881a347c18e25976a90862e791061517c5",
+     "signature": {
+      "v": 1,
+      "alg": "Ed25519",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "over": "sha256",
+      "message": "crawlcheck-data-v1\n5cb17bb16c0e5575318767d9c4a85b881a347c18e25976a90862e791061517c5",
+      "sig": "z7QtHWMSFyvH3u8VxcI2quYyJWpXTktELwYH241XOmOigeUzpZaHQhx5RYwT3-9A8MZzkVsbaEXdj_kBwlqtCg",
+      "signed_at": "2026-10-10T15:59:00.000Z",
+      "key": {
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+       "jwk": {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
+       },
+       "published_in": "the suite's directory"
+      }
+     }
+    }
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "wrong-kind",
+   "title": "a signed document of another kind",
+   "why": "only a decision receipt decides",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 200,
+    "body": {
+     "kind": "crawlcheck-resolve",
+     "v": 1,
+     "decided_at": "2026-10-10T15:59:00.000Z",
+     "expires_at": "2026-10-11T15:59:00.000Z",
+     "clock_skew_s": 300,
+     "nonce": "ccguard-acceptance-0001",
+     "domain": "good.example",
+     "action": "read",
+     "agent": null,
+     "template": null,
+     "policy": {
+      "max_age_hours": null,
+      "on_warn": "warn",
+      "require_entity": false,
+      "human_approval": [],
+      "allow": [],
+      "deny": []
+     },
+     "policy_id": null,
+     "engine": {
+      "version": "pf4",
+      "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
+     },
+     "decision": "allow",
+     "base_decision": "allow",
+     "human_confirmation_required": false,
+     "reason_codes": [
+      "resolve.actions.read"
+     ],
+     "steps": [
+      {
+       "rule": "resolve.actions.read",
+       "effect": "allow",
+       "why": "suite fixture"
+      }
+     ],
+     "alternatives": [],
+     "evidence": {
+      "report": "https://crawlcheck.io/r/suitefixture",
+      "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+     },
+     "resolve": {
+      "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+     },
+     "sha256": "a7ad1c79f538083495aee20e357c264b35bdfb850b1e9d5380383e4050d0d8f8",
+     "signature": {
+      "v": 1,
+      "alg": "Ed25519",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "over": "sha256",
+      "message": "crawlcheck-data-v1\na7ad1c79f538083495aee20e357c264b35bdfb850b1e9d5380383e4050d0d8f8",
+      "sig": "Gapv0EJNq3OINfUfJSKPodyuAv_4UzeaKcKX0CsuSm_LH4f_Uj4_v4H4OxI4kmHGBIZagZiqVTL9oPILLohyAA",
+      "signed_at": "2026-10-10T15:59:00.000Z",
+      "key": {
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+       "jwk": {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
+       },
+       "published_in": "the suite's directory"
+      }
+     }
+    }
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "wrong-version",
+   "title": "a decision of an unknown version",
+   "why": "",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 200,
+    "body": {
+     "kind": "crawlcheck-decision",
+     "v": 2,
+     "decided_at": "2026-10-10T15:59:00.000Z",
+     "expires_at": "2026-10-11T15:59:00.000Z",
+     "clock_skew_s": 300,
+     "nonce": "ccguard-acceptance-0001",
+     "domain": "good.example",
+     "action": "read",
+     "agent": null,
+     "template": null,
+     "policy": {
+      "max_age_hours": null,
+      "on_warn": "warn",
+      "require_entity": false,
+      "human_approval": [],
+      "allow": [],
+      "deny": []
+     },
+     "policy_id": null,
+     "engine": {
+      "version": "pf4",
+      "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
+     },
+     "decision": "allow",
+     "base_decision": "allow",
+     "human_confirmation_required": false,
+     "reason_codes": [
+      "resolve.actions.read"
+     ],
+     "steps": [
+      {
+       "rule": "resolve.actions.read",
+       "effect": "allow",
+       "why": "suite fixture"
+      }
+     ],
+     "alternatives": [],
+     "evidence": {
+      "report": "https://crawlcheck.io/r/suitefixture",
+      "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+     },
+     "resolve": {
+      "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+     },
+     "sha256": "6a17a0a9f53e94751e932fa623f0f51532236cc379d02c3ce7b3265cc59bce8b",
+     "signature": {
+      "v": 1,
+      "alg": "Ed25519",
+      "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+      "over": "sha256",
+      "message": "crawlcheck-data-v1\n6a17a0a9f53e94751e932fa623f0f51532236cc379d02c3ce7b3265cc59bce8b",
+      "sig": "NUgeuPZb-sFRodihtYOBVuRxS5_8toNvne83d8-LrtFaFZdoBm6VoaxXwqCEx2xX4aVIbRS2TrDjFZNPNsFtDQ",
+      "signed_at": "2026-10-10T15:59:00.000Z",
+      "key": {
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+       "jwk": {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
+       },
+       "published_in": "the suite's directory"
+      }
+     }
+    }
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "malformed-empty",
+   "title": "an empty object",
+   "why": "",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 200,
+    "body": {}
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "malformed-array",
+   "title": "a JSON array",
+   "why": "",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 200,
+    "body": []
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "malformed-text",
+   "title": "not JSON",
+   "why": "",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 200,
+    "text": "<html>maintenance</html>"
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "http-500",
+   "title": "CrawlCheck answers 500",
+   "why": "fail closed",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
+   "crawlcheck": {
+    "status": 500,
+    "text": "{\"error\":\"internal\"}"
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "http-429",
+   "title": "CrawlCheck answers 429",
+   "why": "fail closed",
+   "request": {
+    "domain": "good.example",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z"
+   },
    "crawlcheck": {
     "status": 429,
     "text": "{\"error\":\"slow down\"}"
@@ -2783,19 +3350,123 @@
     "nonce": "ccguard-acceptance-0001",
     "now": "2026-10-10T16:00:00.000Z"
    },
-   "crawlcheck": {
-    "unreachable": true
+   "crawlcheck": {
+    "unreachable": true
+   },
+   "expect": {
+    "proceed": false
+   }
+  },
+  {
+   "id": "fetch-ok",
+   "title": "a guarded fetch with no redirect",
+   "why": "positive control",
+   "request": {
+    "url": "https://good.example/page",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z",
+    "max_hops": 10
+   },
+   "crawlcheck": {
+    "by_op": {
+     "GET https://good.example/page": {
+      "kind": "crawlcheck-decision",
+      "v": 1,
+      "decided_at": "2026-10-10T15:59:00.000Z",
+      "expires_at": "2026-10-11T15:59:00.000Z",
+      "clock_skew_s": 300,
+      "nonce": "ccguard-acceptance-0001",
+      "domain": "good.example",
+      "action": "read",
+      "agent": null,
+      "template": null,
+      "policy": {
+       "max_age_hours": null,
+       "on_warn": "warn",
+       "require_entity": false,
+       "human_approval": [],
+       "allow": [],
+       "deny": []
+      },
+      "policy_id": null,
+      "engine": {
+       "version": "pf4",
+       "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
+      },
+      "decision": "allow",
+      "base_decision": "allow",
+      "human_confirmation_required": false,
+      "reason_codes": [
+       "resolve.actions.read"
+      ],
+      "steps": [
+       {
+        "rule": "resolve.actions.read",
+        "effect": "allow",
+        "why": "suite fixture"
+       }
+      ],
+      "alternatives": [],
+      "evidence": {
+       "report": "https://crawlcheck.io/r/suitefixture",
+       "manifest_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      },
+      "resolve": {
+       "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+       "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+      },
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/page"
+      },
+      "sha256": "2c1fd83227227a18c144440a720c790e61ace324824a7346c5d75908a883cd95",
+      "signature": {
+       "v": 1,
+       "alg": "Ed25519",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+       "over": "sha256",
+       "message": "crawlcheck-data-v1\n2c1fd83227227a18c144440a720c790e61ace324824a7346c5d75908a883cd95",
+       "sig": "b05mD7BdSyT-tzUoDc3nFr3dNays8pk-iW2-g9pgP4ITlYRtpIHLnrAUChAGqruH9VTuVUxpHZRwwdcfs6bJCQ",
+       "signed_at": "2026-10-10T15:59:00.000Z",
+       "key": {
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
+        "jwk": {
+         "kty": "OKP",
+         "crv": "Ed25519",
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
+        },
+        "published_in": "the suite's directory"
+       }
+      }
+     }
+    }
+   },
+   "sites": {
+    "https://good.example/page": {
+     "status": 200,
+     "body": "ok"
+    }
    },
    "expect": {
-    "proceed": false
+    "proceed": true,
+    "fetched": [
+     "https://good.example/page"
+    ],
+    "receipt_header_to": [
+     "good.example"
+    ]
    }
   },
   {
-   "id": "fetch-ok",
-   "title": "a guarded fetch with no redirect",
-   "why": "positive control",
+   "id": "fetch-blocked",
+   "title": "a blocked domain is never contacted",
+   "why": "the check runs before the request",
    "request": {
-    "url": "https://good.example/page",
+    "url": "https://evil.example/",
     "action": "read",
     "allow_warn": false,
     "confirm": null,
@@ -2804,15 +3475,15 @@
     "max_hops": 10
    },
    "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+    "by_op": {
+     "GET https://evil.example/": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "good.example",
+      "domain": "evil.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -2829,8 +3500,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "allow",
-      "base_decision": "allow",
+      "decision": "block",
+      "base_decision": "block",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -2838,7 +3509,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "allow",
+        "effect": "block",
         "why": "suite fixture"
        }
       ],
@@ -2849,37 +3520,64 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://evil.example/"
+      },
+      "sha256": "0ebb069d2a0c8c95f574562d17e1ce6b1bc2cd5c263e2f8ddd0ddea24299fbc5",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\n0ebb069d2a0c8c95f574562d17e1ce6b1bc2cd5c263e2f8ddd0ddea24299fbc5",
+       "sig": "tV-VN78CqsiUFbR-GhQ88KgLLR8JSUOG_D49lBWkPnZMQ5BDMY6DKyjgJ9d7MO4ke-cR-JZy8MCgOQHzDi_ADg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     },
-     "also-good.example": {
+     }
+    }
+   },
+   "sites": {},
+   "expect": {
+    "proceed": false,
+    "fetched": []
+   }
+  },
+  {
+   "id": "redirect-to-blocked",
+   "title": "an allowed page redirects to a blocked domain",
+   "why": "every hop is re-checked; the blocked hop is never requested",
+   "request": {
+    "url": "https://good.example/go",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z",
+    "max_hops": 10
+   },
+   "crawlcheck": {
+    "by_op": {
+     "GET https://good.example/go": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "also-good.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -2916,30 +3614,34 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/go"
+      },
+      "sha256": "aba6ad434a1d2ec98b90be069a5ae0904f76dce5cbfcfe87e5828fb3d075fd10",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\naba6ad434a1d2ec98b90be069a5ae0904f76dce5cbfcfe87e5828fb3d075fd10",
+       "sig": "jfieGzBbf0P2BSTC6--qOWbQ5CXsDkfhEotzs3g-SSV9pqImkUiPhW8ASSzlqo7-lEtaDIwQcQCrM-kzHaxOCw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "evil.example": {
+     "GET https://evil.example/x": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -2983,24 +3685,28 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://evil.example/x"
+      },
+      "sha256": "febbd36ba855928ee2f33b302b7134654e39b617bc36c7a489053a0504a0f5ce",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\nfebbd36ba855928ee2f33b302b7134654e39b617bc36c7a489053a0504a0f5ce",
+       "sig": "NMBmq1gfGfANK9UuQawcLOKFrjSVRdsFaGEfa3FOUX4YdV_DLZ_2zNQvHmU-Tf7uPRLHwFXCZbvE17b6mWCwBg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
@@ -3009,27 +3715,24 @@
     }
    },
    "sites": {
-    "https://good.example/page": {
-     "status": 200,
-     "body": "ok"
+    "https://good.example/go": {
+     "status": 302,
+     "location": "https://evil.example/x"
     }
    },
    "expect": {
-    "proceed": true,
+    "proceed": false,
     "fetched": [
-     "https://good.example/page"
-    ],
-    "receipt_header_to": [
-     "good.example"
+     "https://good.example/go"
     ]
    }
   },
   {
-   "id": "fetch-blocked",
-   "title": "a blocked domain is never contacted",
-   "why": "the check runs before the request",
+   "id": "redirect-to-allowed",
+   "title": "an allowed page redirects to another allowed domain",
+   "why": "each domain gets its own receipt",
    "request": {
-    "url": "https://evil.example/",
+    "url": "https://good.example/go",
     "action": "read",
     "allow_warn": false,
     "confirm": null,
@@ -3038,8 +3741,8 @@
     "max_hops": 10
    },
    "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+    "by_op": {
+     "GET https://good.example/go": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -3083,30 +3786,34 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/go"
+      },
+      "sha256": "aba6ad434a1d2ec98b90be069a5ae0904f76dce5cbfcfe87e5828fb3d075fd10",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\naba6ad434a1d2ec98b90be069a5ae0904f76dce5cbfcfe87e5828fb3d075fd10",
+       "sig": "jfieGzBbf0P2BSTC6--qOWbQ5CXsDkfhEotzs3g-SSV9pqImkUiPhW8ASSzlqo7-lEtaDIwQcQCrM-kzHaxOCw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "also-good.example": {
+     "GET https://also-good.example/y": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -3150,37 +3857,80 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://also-good.example/y"
+      },
+      "sha256": "b1c9629627e262b05e543e05386d553f708e96e561ee1e8abe4510839423f37e",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\nb1c9629627e262b05e543e05386d553f708e96e561ee1e8abe4510839423f37e",
+       "sig": "_FAD0r_ykYkuaBtDvnmQxYHJH4qM4kApum-RWwhT_QOBLG1-Ey8dyFk34dEG8m2RX3d4wM10ScxQS9P4-bMjAw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     },
-     "evil.example": {
+     }
+    }
+   },
+   "sites": {
+    "https://good.example/go": {
+     "status": 301,
+     "location": "https://also-good.example/y"
+    },
+    "https://also-good.example/y": {
+     "status": 200,
+     "body": "ok"
+    }
+   },
+   "expect": {
+    "proceed": true,
+    "fetched": [
+     "https://good.example/go",
+     "https://also-good.example/y"
+    ],
+    "receipt_header_to": [
+     "good.example",
+     "also-good.example"
+    ]
+   }
+  },
+  {
+   "id": "redirect-relative",
+   "title": "a relative redirect stays on the checked domain",
+   "why": "",
+   "request": {
+    "url": "https://good.example/a",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z",
+    "max_hops": 10
+   },
+   "crawlcheck": {
+    "by_op": {
+     "GET https://good.example/a": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "evil.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -3197,8 +3947,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "block",
-      "base_decision": "block",
+      "decision": "allow",
+      "base_decision": "allow",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -3206,7 +3956,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "block",
+        "effect": "allow",
         "why": "suite fixture"
        }
       ],
@@ -3217,53 +3967,34 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/a"
+      },
+      "sha256": "f5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\nf5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
+       "sig": "c_uHr1UCRQ-qxjnCl-Vmr8q3eG6VqaATNtzhLipXlCVRzuYXZ7YHwkhgNO78FpxF9cBhxVRIpACLQ7RLN1ORAQ",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     }
-    }
-   },
-   "sites": {},
-   "expect": {
-    "proceed": false,
-    "fetched": []
-   }
-  },
-  {
-   "id": "redirect-to-blocked",
-   "title": "an allowed page redirects to a blocked domain",
-   "why": "every hop is re-checked; the blocked hop is never requested",
-   "request": {
-    "url": "https://good.example/go",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z",
-    "max_hops": 10
-   },
-   "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+     },
+     "GET https://good.example/b": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -3307,37 +4038,76 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/b"
+      },
+      "sha256": "c0a94d0e744a67264826c810e7b748663591aaab3f826e0c53c1820e021a782a",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\nc0a94d0e744a67264826c810e7b748663591aaab3f826e0c53c1820e021a782a",
+       "sig": "98E457J2ESPlgl3Eh-NNQzxIoZgU2i9eXxPytK7orE0EOhgeUSA5i0bFKZYTDubsitPTSDV7Rb5tDGd4H3mdAg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     },
-     "also-good.example": {
+     }
+    }
+   },
+   "sites": {
+    "https://good.example/a": {
+     "status": 307,
+     "location": "/b"
+    },
+    "https://good.example/b": {
+     "status": 200,
+     "body": "ok"
+    }
+   },
+   "expect": {
+    "proceed": true,
+    "fetched": [
+     "https://good.example/a",
+     "https://good.example/b"
+    ]
+   }
+  },
+  {
+   "id": "redirect-scheme",
+   "title": "a redirect to a file: URL",
+   "why": "only http(s)",
+   "request": {
+    "url": "https://good.example/a",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z",
+    "max_hops": 10
+   },
+   "crawlcheck": {
+    "by_op": {
+     "GET https://good.example/a": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "also-good.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -3374,37 +4144,71 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/a"
+      },
+      "sha256": "f5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\nf5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
+       "sig": "c_uHr1UCRQ-qxjnCl-Vmr8q3eG6VqaATNtzhLipXlCVRzuYXZ7YHwkhgNO78FpxF9cBhxVRIpACLQ7RLN1ORAQ",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     },
-     "evil.example": {
+     }
+    }
+   },
+   "sites": {
+    "https://good.example/a": {
+     "status": 302,
+     "location": "file:///etc/passwd"
+    }
+   },
+   "expect": {
+    "proceed": false,
+    "fetched": [
+     "https://good.example/a"
+    ]
+   }
+  },
+  {
+   "id": "redirect-loop",
+   "title": "more than the hop limit",
+   "why": "at most 10 redirects",
+   "request": {
+    "url": "https://good.example/l0",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z",
+    "max_hops": 10
+   },
+   "crawlcheck": {
+    "by_op": {
+     "GET https://good.example/l0": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "evil.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -3421,8 +4225,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "block",
-      "base_decision": "block",
+      "decision": "allow",
+      "base_decision": "allow",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -3430,7 +4234,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "block",
+        "effect": "allow",
         "why": "suite fixture"
        }
       ],
@@ -3441,60 +4245,34 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l0"
+      },
+      "sha256": "6be88fd03a218633a441152bfb59b49e00a7a629b97af80ab3e94119d8f00d7b",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\n6be88fd03a218633a441152bfb59b49e00a7a629b97af80ab3e94119d8f00d7b",
+       "sig": "1GdXPPHS6Wmi2F5Ybt3dR-798YoDcfu5pXkDR5LaoU5WvOPH1iRnwpIzEF47T_-9fI1sSbb-Wu9NZvFp-bNKDg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     }
-    }
-   },
-   "sites": {
-    "https://good.example/go": {
-     "status": 302,
-     "location": "https://evil.example/x"
-    }
-   },
-   "expect": {
-    "proceed": false,
-    "fetched": [
-     "https://good.example/go"
-    ]
-   }
-  },
-  {
-   "id": "redirect-to-allowed",
-   "title": "an allowed page redirects to another allowed domain",
-   "why": "each domain gets its own receipt",
-   "request": {
-    "url": "https://good.example/go",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z",
-    "max_hops": 10
-   },
-   "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+     },
+     "GET https://good.example/l1": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -3538,37 +4316,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l1"
+      },
+      "sha256": "6ef5ddcead414acf8ed4fbbe76d9fef442afa9d31fd10be29fd65a805e0bc768",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\n6ef5ddcead414acf8ed4fbbe76d9fef442afa9d31fd10be29fd65a805e0bc768",
+       "sig": "jowaqTjKyzFzxrSuTbxlzLzuC6vb9sN9ADdaq7myhmTx4VmQWsZ-ibN0nAsh4zInlJWjzLOd9orLc01uVWdzBg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "also-good.example": {
+     "GET https://good.example/l2": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "also-good.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -3605,37 +4387,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l2"
+      },
+      "sha256": "85a3637b6d6566a582c6672636d578acead8ca42ece56788c90eb7da348f4a5c",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\n85a3637b6d6566a582c6672636d578acead8ca42ece56788c90eb7da348f4a5c",
+       "sig": "QQIDpRkN5roA5JejjaXIzHcVOUFHUBFz_IxgcMpVpqIVhUJ5tXI6f8wRMyZgMhjdTnRkrXDoarsOeS8pxfJyDg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "evil.example": {
+     "GET https://good.example/l3": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "evil.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -3652,8 +4438,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "block",
-      "base_decision": "block",
+      "decision": "allow",
+      "base_decision": "allow",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -3661,7 +4447,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "block",
+        "effect": "allow",
         "why": "suite fixture"
        }
       ],
@@ -3672,69 +4458,34 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l3"
+      },
+      "sha256": "7e669bdeb432f4b40a25ca8a3d38cf14e80406bd2bfb7f1c4e5fb2b56a39e2da",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\n7e669bdeb432f4b40a25ca8a3d38cf14e80406bd2bfb7f1c4e5fb2b56a39e2da",
+       "sig": "9PNPoSAr4lGgnhyyBz8MT5plaDdIYl6T20rfsoQ7MRZodOdvbzHF9Z2pHB1pRdjjNPre29bV66Ln89aIIwH6AA",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     }
-    }
-   },
-   "sites": {
-    "https://good.example/go": {
-     "status": 301,
-     "location": "https://also-good.example/y"
-    },
-    "https://also-good.example/y": {
-     "status": 200,
-     "body": "ok"
-    }
-   },
-   "expect": {
-    "proceed": true,
-    "fetched": [
-     "https://good.example/go",
-     "https://also-good.example/y"
-    ],
-    "receipt_header_to": [
-     "good.example",
-     "also-good.example"
-    ]
-   }
-  },
-  {
-   "id": "redirect-relative",
-   "title": "a relative redirect stays on the checked domain",
-   "why": "",
-   "request": {
-    "url": "https://good.example/a",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z",
-    "max_hops": 10
-   },
-   "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+     },
+     "GET https://good.example/l4": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -3778,37 +4529,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l4"
+      },
+      "sha256": "8ca3cc41e1f04668ec0777da3c8a8f3501236c7cab6151120ce61ae5265c2f13",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\n8ca3cc41e1f04668ec0777da3c8a8f3501236c7cab6151120ce61ae5265c2f13",
+       "sig": "OpbovtXl-t9oY6qvDIZUgTP0QqrQAOzfwG16MNr1u8wceYBzGG2BrJeAdGwH6xaqIOzTNjhgTBmwke7xle8CBw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "also-good.example": {
+     "GET https://good.example/l5": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "also-good.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -3845,37 +4600,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l5"
+      },
+      "sha256": "1500364a809ae54fea3f46bfff9a84c6e62712f1f3dd4380e83119e31209dd72",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\n1500364a809ae54fea3f46bfff9a84c6e62712f1f3dd4380e83119e31209dd72",
+       "sig": "7sr4p95KW-FF49UG9wE6onXj8CYU-pGslES7DGKFRhaGS9AIDm63VC79s9gCXjULU0m6FunlJF5IGLhpLec5Bg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "evil.example": {
+     "GET https://good.example/l6": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "evil.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -3892,8 +4651,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "block",
-      "base_decision": "block",
+      "decision": "allow",
+      "base_decision": "allow",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -3901,7 +4660,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "block",
+        "effect": "allow",
         "why": "suite fixture"
        }
       ],
@@ -3912,65 +4671,34 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l6"
+      },
+      "sha256": "eb019b58a4da7ce3d8ad9a3ac403a8ef9e3b27979f8c7802faef59a8ba47d194",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\neb019b58a4da7ce3d8ad9a3ac403a8ef9e3b27979f8c7802faef59a8ba47d194",
+       "sig": "YbRvbTY_0ZWItSEWfbVGnIUkjDULkWUJldj5GpGqmTexRr9_H5TG8HOEDuB8rmAeoisfNoo1lKICK6tP-nIkCw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     }
-    }
-   },
-   "sites": {
-    "https://good.example/a": {
-     "status": 307,
-     "location": "/b"
-    },
-    "https://good.example/b": {
-     "status": 200,
-     "body": "ok"
-    }
-   },
-   "expect": {
-    "proceed": true,
-    "fetched": [
-     "https://good.example/a",
-     "https://good.example/b"
-    ]
-   }
-  },
-  {
-   "id": "redirect-scheme",
-   "title": "a redirect to a file: URL",
-   "why": "only http(s)",
-   "request": {
-    "url": "https://good.example/a",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z",
-    "max_hops": 10
-   },
-   "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+     },
+     "GET https://good.example/l7": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -4014,37 +4742,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l7"
+      },
+      "sha256": "64fceb396a00b8fce150d1ac278b8db3bfabdca05d2a3724e5b589144898c30f",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\n64fceb396a00b8fce150d1ac278b8db3bfabdca05d2a3724e5b589144898c30f",
+       "sig": "NNVkXW3n5V0XGr5-malhRPgHhD4GbONJE7KxsSygdbBziq6t0r8eIeS-7W1w1TwCSsC9z5u488D4-9JzfbSXAw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "also-good.example": {
+     "GET https://good.example/l8": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "also-good.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -4081,37 +4813,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l8"
+      },
+      "sha256": "946cead4f9574a933bdc17f6d548e7442ce6953a542421a21ed2db0a3fcf07c4",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\n946cead4f9574a933bdc17f6d548e7442ce6953a542421a21ed2db0a3fcf07c4",
+       "sig": "R0mPIKVuGdtU_THywB-BsNDvMRtp5KlsDpFAE8dxRv35BNLIfbWkVUBQe7i4d0ZOkNYj_GXIw_uO6ORikbIBDg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "evil.example": {
+     "GET https://good.example/l9": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "evil.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -4128,8 +4864,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "block",
-      "base_decision": "block",
+      "decision": "allow",
+      "base_decision": "allow",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -4137,7 +4873,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "block",
+        "effect": "allow",
         "why": "suite fixture"
        }
       ],
@@ -4148,60 +4884,34 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l9"
+      },
+      "sha256": "10bf0adbcef8b90d260b44ffb98d6a5003dd8aada3df876f4a67344be6967907",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\n10bf0adbcef8b90d260b44ffb98d6a5003dd8aada3df876f4a67344be6967907",
+       "sig": "YsDfh0jy5zfpg1y3uanq-zyi9HxAakAkSt6x-XFuEQlJt02uUeHgebhJvo0mB1D2t0mQ-Bil1DLtPEcq40-GAA",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     }
-    }
-   },
-   "sites": {
-    "https://good.example/a": {
-     "status": 302,
-     "location": "file:///etc/passwd"
-    }
-   },
-   "expect": {
-    "proceed": false,
-    "fetched": [
-     "https://good.example/a"
-    ]
-   }
-  },
-  {
-   "id": "redirect-loop",
-   "title": "more than the hop limit",
-   "why": "at most 10 redirects",
-   "request": {
-    "url": "https://good.example/l0",
-    "action": "read",
-    "allow_warn": false,
-    "confirm": null,
-    "nonce": "ccguard-acceptance-0001",
-    "now": "2026-10-10T16:00:00.000Z",
-    "max_hops": 10
-   },
-   "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+     },
+     "GET https://good.example/l10": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -4245,37 +4955,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l10"
+      },
+      "sha256": "1584f6de4672a43bed931bb9761144a7b198689ef0caa07871e1402e2b7d041c",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\n1584f6de4672a43bed931bb9761144a7b198689ef0caa07871e1402e2b7d041c",
+       "sig": "3jnBi1WG_h1OBUEnOoO80qDn9sZq5V8-f9G7VyQOBsG80iUXdyMruMiJd9pKTVCXy6d5IfBR5_ABpOSWpM9aBg",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "also-good.example": {
+     "GET https://good.example/l11": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "also-good.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -4312,37 +5026,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l11"
+      },
+      "sha256": "39b809e7cc2c999fe51cc878fa2ed22f8272162babd4d243f84e5cfe61c11596",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\n39b809e7cc2c999fe51cc878fa2ed22f8272162babd4d243f84e5cfe61c11596",
+       "sig": "HQb7ERT0czSVYCDT7dI_ZD-pFBh9Mh9AWTFeQOa31nuim9xUrL9AUeMy3S158HG-FgrE8ZZP_Y7ICcwqOZwlAQ",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "evil.example": {
+     "GET https://good.example/l12": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "evil.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -4359,8 +5077,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "block",
-      "base_decision": "block",
+      "decision": "allow",
+      "base_decision": "allow",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -4368,7 +5086,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "block",
+        "effect": "allow",
         "why": "suite fixture"
        }
       ],
@@ -4379,24 +5097,28 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/l12"
+      },
+      "sha256": "de26e5a5b64b8ac3c696469cb57c83be478a8b2b17387466ff880341a80bafd5",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\nde26e5a5b64b8ac3c696469cb57c83be478a8b2b17387466ff880341a80bafd5",
+       "sig": "NAFTW0iHUnTIo8pkxTEOMdHmWG1IiawE3Mq5qzJOqPBRGYwRDpfG9MPThZxyXgfhdwyBu4V4yd4o1lHCIKrQCQ",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
@@ -4473,8 +5195,8 @@
     "max_hops": 10
    },
    "crawlcheck": {
-    "by_domain": {
-     "good.example": {
+    "by_op": {
+     "GET https://good.example/a": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
@@ -4518,37 +5240,71 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/a"
+      },
+      "sha256": "f5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n538189facc04db817956a840415c602c48cf9c29ce7b626fbd2d6cd2db3a2b72",
-       "sig": "kebBznICRjh4gEDCOyvn4YRYaSxkCj4cvsRPWaC7NCCfPrFKgCiZHrVAFhODv_hWa7OfWpNvWME0Tio0W5UXAQ",
+       "message": "crawlcheck-data-v1\nf5c32a5a5e31c7d5b390eec9d83ef6f31c1ce5b3675da60226d24e5514c8ce67",
+       "sig": "c_uHr1UCRQ-qxjnCl-Vmr8q3eG6VqaATNtzhLipXlCVRzuYXZ7YHwkhgNO78FpxF9cBhxVRIpACLQ7RLN1ORAQ",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
-     },
-     "also-good.example": {
+     }
+    }
+   },
+   "sites": {
+    "https://good.example/a": {
+     "status": 302,
+     "location": "http://169.254.169.254/latest"
+    }
+   },
+   "expect": {
+    "proceed": false,
+    "fetched": [
+     "https://good.example/a"
+    ]
+   }
+  },
+  {
+   "id": "fetch-receipt-reuse",
+   "title": "a receipt for one page used for another page on the same domain",
+   "why": "each hop asks again; the first page's receipt never covers the second",
+   "request": {
+    "url": "https://good.example/one",
+    "action": "read",
+    "allow_warn": false,
+    "confirm": null,
+    "nonce": "ccguard-acceptance-0001",
+    "now": "2026-10-10T16:00:00.000Z",
+    "max_hops": 10
+   },
+   "crawlcheck": {
+    "by_op": {
+     "GET https://good.example/one": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "also-good.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -4585,37 +5341,41 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/one"
+      },
+      "sha256": "09909478ae8928c3cb51c3bf8664419e815df9563d1bb64e96613e7633ca2513",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\n397e79eadb3c6457282bf8ffc33b5840cada8edbfb2e3c56ddc8bada2fd62ee1",
-       "sig": "CR_y7ei6pqwnAASl9hRtXwus3SNLpNzozCzHf_DyGwPxQilYPdubDDnTjnZDqvPDS49-0q-Ygt2mtpUbIQh0CQ",
+       "message": "crawlcheck-data-v1\n09909478ae8928c3cb51c3bf8664419e815df9563d1bb64e96613e7633ca2513",
+       "sig": "qQCvgJ_GdJ08Azk3rahCKcHP9AEzh7OcJxHkuD_aXrWvgrnF6xbYbpayukzJ4T4ehhOO8k6CMMoR5sN4z16wDw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
       }
      },
-     "evil.example": {
+     "GET https://good.example/two": {
       "kind": "crawlcheck-decision",
       "v": 1,
       "decided_at": "2026-10-10T15:59:00.000Z",
       "expires_at": "2026-10-11T15:59:00.000Z",
       "clock_skew_s": 300,
       "nonce": "ccguard-acceptance-0001",
-      "domain": "evil.example",
+      "domain": "good.example",
       "action": "read",
       "agent": null,
       "template": null,
@@ -4632,8 +5392,8 @@
        "version": "pf4",
        "rules_sha256": "18dd5636e0896692ab518050cb401744edea2e6f1086dff94fead314959bdc3e"
       },
-      "decision": "block",
-      "base_decision": "block",
+      "decision": "allow",
+      "base_decision": "allow",
       "human_confirmation_required": false,
       "reason_codes": [
        "resolve.actions.read"
@@ -4641,7 +5401,7 @@
       "steps": [
        {
         "rule": "resolve.actions.read",
-        "effect": "block",
+        "effect": "allow",
         "why": "suite fixture"
        }
       ],
@@ -4652,24 +5412,28 @@
       },
       "resolve": {
        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "leaf_hash": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       },
-      "sha256": "da1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
+      "operation": {
+       "method": "GET",
+       "url": "https://good.example/two"
+      },
+      "sha256": "edc6362d635092fe71d3d110d86f982b431082c8a3d1f44352aa6d4d848c9d24",
       "signature": {
        "v": 1,
        "alg": "Ed25519",
-       "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+       "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
        "over": "sha256",
-       "message": "crawlcheck-data-v1\nda1b746cfc0ec51e4a6efcefc5e63d824652ef99c21828054d237df6055ae9e9",
-       "sig": "BZFgavq6NoUbGwIS_A8Vdbge-EGp4hi5HXxy396I5UuHvjukMIcnXrae6hwPDmY_UIdpGWTHz8fMyW0FAEvODw",
+       "message": "crawlcheck-data-v1\nedc6362d635092fe71d3d110d86f982b431082c8a3d1f44352aa6d4d848c9d24",
+       "sig": "JCzfvo38IwvIDn2oUcy4ARo1Qh119VysdiNgTPUdZygo-MVYuaPFEgrdra6odyacycfgl2-hV17ANi3rRf5gCw",
        "signed_at": "2026-10-10T15:59:00.000Z",
        "key": {
-        "kid": "xrog-5dLQHQuXmIsVCTFRFfPSzLVonFLRoWdifn1AmE",
+        "kid": "31mkD74PDlWkpu5l3AJSLIUGkn4fRqfdwbhwVG8z-sM",
         "jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
-         "x": "_EeVevPcJyuRWRCjFyG3-wRgmEdZmrn9tlBTvD31u8Q"
+         "x": "EgIpAYR0Yo4mx1ZNTSewDqB7sBbi76bqpUkXoc6ukKc"
         },
         "published_in": "the suite's directory"
        }
@@ -4678,15 +5442,24 @@
     }
    },
    "sites": {
-    "https://good.example/a": {
+    "https://good.example/one": {
      "status": 302,
-     "location": "http://169.254.169.254/latest"
+     "location": "/two"
+    },
+    "https://good.example/two": {
+     "status": 200,
+     "body": "ok"
     }
    },
    "expect": {
-    "proceed": false,
+    "proceed": true,
     "fetched": [
-     "https://good.example/a"
+     "https://good.example/one",
+     "https://good.example/two"
+    ],
+    "receipt_header_to": [
+     "good.example",
+     "good.example"
     ]
    }
   }