# Draft evidence record: Test the failure path of a permission hook

DRAFT TEMPLATE. Confirm any prefilled proposed requirements against your actual task. Replace blank fields with evidence from your authorized task. Unknown is the default, not success.

## Task

[Fill in]

## Scope and version

[Fill in]

## Current authorization

[Fill in]

## Method reference

- guide_id: permission-hooks
- build_revision: release-2026-11-11-r12
- source_sha256: 38252d3af9f8d111d69b1f9dfd0af85b3d9b26413c38ff1779c22c97ab3b8ad0

Record template build revision: release-2026-11-11-r12
Task/artifact version belongs in scope_and_version.
Recommendation: investigate

## Required checks

### Check 1

- Requirement: Proposed requirement to confirm for your task: The valid path works; a system that denies everything does not pass.
- Observed evidence: [Fill in]
- Evidence reference: [Fill in]
- Status (pass / fail / unavailable): unavailable

### Check 2

- Requirement: Proposed requirement to confirm for your task: Each failure case preserves the required authorization boundary.
- Observed evidence: [Fill in]
- Evidence reference: [Fill in]
- Status (pass / fail / unavailable): unavailable

### Check 3

- Requirement: Proposed requirement to confirm for your task: Capability absence is visible and prevents use of the affected path.
- Observed evidence: [Fill in]
- Evidence reference: [Fill in]
- Status (pass / fail / unavailable): unavailable

## Decision (accept / reject / unknown)

unknown

## Reason

Draft only. Confirm the proposed requirements against the actual task; no checks have evidence yet.

## Next authorized action

[Fill in]

## Stop or recovery

[Fill in]

## Limits

- Draft prefilled from a proposed worksheet. Confirm requirements against the actual task and its governing instructions.
- No checks have been executed; observations and evidence references are blank.
- No task-specific authorization, action or performance result is established.

Rule: A demonstrated required failure means reject. With no demonstrated failure, any unavailable required check means unknown. Accept requires positive evidence for every required check. This record never grants permission to act.

## Use this draft

Read the [matching guide](guide.md), including its proposed evidence plan and examples of insufficient proof. Planning notes are not observations. Before entering real observations, change record_type to task_record in the JSON version and replace draft limitations with what remains unknown. Keep the method reference tied to the version you actually used. No permission is created by filling this file.

Optional local check from the reading-pack root: `python3 tools/check_record.py guides/permission-hooks/record-template.json --guide guides/permission-hooks/guide.json --manifest reading-pack-manifest.json`

A method match is not a completed task or proof of authorization.