# OPS017-LAB1 — Auth-Audit Runtime Foundation Record v1

Use the eight deterministic local fixtures in `fixtures/cases.json`.

For each case:
1. identify authentication state and principal attribution;
2. verify whether the protected action has a server-side authorization check;
3. evaluate deny-by-default and the explicit policy evidence;
4. record the allow/deny outcome and reason;
5. verify whether the audit event is attributable to the same actor/action;
6. verify request/audit correlation;
7. confirm the synthetic secret is absent from logged fields; and
8. classify the row as supported, blocker, or OPEN with a bounded repair.

Implement `build_record(case)` in `starter.py`. Learner files contain no hidden expected classifications. All identities, secrets, resources, and events are synthetic and local; no network or real account is used.