# LOC-003 Lab — Capability/CSP Least-Privilege Matrix

Implement `evaluate_case(case)` in `starter.py`. Use only the supplied synthetic fixture. Return exactly these fields: `effective_capability_set`, `effective_permissions`, `native_exposure`, `csp_exposure`, `merge_risk`, `release_blocker`, `decision`, `reason`.

Do not perform network calls, invoke Tauri, touch OS permissions, or guess hidden answer outputs. Preserve unknown capability and platform mismatch states rather than coercing them to PASS.