Honesty Boundary

The toy example keeps its boundary narrow.

highlighted = computed this step

What this toy model checks

The trust boundary parses one Set-Cookie response, parses one later request, and checks that the returned label matches.

\text{recompute cookie round trip}

NOTE: toy HTTP cookie round trip only; not login, authentication, sessions, tracking, privacy law, SameSite, Secure, HttpOnly, expiration, domain matching, multiple cookies, storage policy, browser behavior details, CSRF, or production security config.

\text{toy cookie label only}

No client compute

The page shows already validated rows. It does not store cookies or run browser behavior.

\text{static validated rows}

Summary

A Set-Cookie response header can become a Cookie request header later.

\text{header returns later}