# OPS005-LAB1 — local trust-path evidence

This lab is offline and synthetic. It does not modify public DNS, contact a certificate authority, probe a production host, or use credentials.

1. Inspect `fixtures/cases.json`.
2. Run `python run_checks.py` to verify fixture structure.
3. Implement `analyze(case)` in `starter.py` using only supplied evidence.
4. For each case, fill Edge Request Trust Path Record v1.
5. Keep DNS, TTL/cache, TLS transport, server identity, proxy route, upstream response, and HSTS policy separate.
6. For the transfer case, recompute every conclusion from changed evidence.

Do not infer a layer from another layer's success. A 200 response, DNS resolution, or TLS connection is never a universal proof token.