Honesty Boundary

The toy Basic auth example keeps its boundary narrow.

highlighted = computed this step

What this toy model checks

The trust boundary parses one GET request, one Basic Authorization header, one base-sixty-four token, one decoded credential, and one empty response.

\text{recompute Basic auth rows}

NOTE: toy HTTP Basic auth only; not TLS protection, password storage, sessions, cookies, OAuth, bearer tokens, password hashing, rate limits, phishing defenses, browser prompts, proxies, HTTP/2 or HTTP/3, frameworks, or production auth config.

\text{toy Basic auth only}

No client compute

The page shows already validated rows. It does not decode credentials in browser code.

\text{static validated rows}

Summary

Basic auth encoding is easy to reverse; it is not encryption.

\text{encoding, not encryption}