The toy JSON example keeps its boundary narrow.
What this toy model checks
The trust boundary parses one POST request, checks its JSON Content-Type and length, then accepts one pinned JSON object.
recompute JSON rows \text{recompute JSON rows} recompute JSON rows JSON honesty boundary The body bytes, parsed JSON fields, and length check are recomputed from pinned POST bytes. JSON honesty boundary - POST /api JSON body 17 bytes, fields ok=true and n=3 section name value check request line method POST parsed request line path /api parsed request line version HTTP/1.1 parsed header Host api.example exact header Content-Type application/json JSON header Content-Length 17 declared bytes body display words ok true comma n three safe display form body exact hex 7b226f6b223a747275652c226e223a337d pinned bytes body byte length 17 counted field ok ok=true parsed field n n=3 parsed check Content-Length 17 declared check body bytes 17 recomputed check match yes same count
Honesty boundary
NOTE: toy HTTP JSON body only; not full JSON edge cases, Unicode or escaping beyond pinned ASCII, schema validation, arrays or nested objects, streaming, chunked transfer, compression, auth, CORS, frameworks, API versioning, or production server config.
toy JSON body only \text{toy JSON body only} toy JSON body only JSON honesty boundary The body bytes, parsed JSON fields, and length check are recomputed from pinned POST bytes. JSON honesty boundary - POST /api JSON body 17 bytes, fields ok=true and n=3 section name value check request line method POST parsed request line path /api parsed request line version HTTP/1.1 parsed header Host api.example exact header Content-Type application/json JSON header Content-Length 17 declared bytes body display words ok true comma n three safe display form body exact hex 7b226f6b223a747275652c226e223a337d pinned bytes body byte length 17 counted field ok ok=true parsed field n n=3 parsed check Content-Length 17 declared check body bytes 17 recomputed check match yes same count
No client compute
The page shows already validated rows. It does not parse JSON in browser code.
static validated rows \text{static validated rows} static validated rows JSON honesty boundary The body bytes, parsed JSON fields, and length check are recomputed from pinned POST bytes. JSON honesty boundary - POST /api JSON body 17 bytes, fields ok=true and n=3 section name value check request line method POST parsed request line path /api parsed request line version HTTP/1.1 parsed header Host api.example exact header Content-Type application/json JSON header Content-Length 17 declared bytes body display words ok true comma n three safe display form body exact hex 7b226f6b223a747275652c226e223a337d pinned bytes body byte length 17 counted field ok ok=true parsed field n n=3 parsed check Content-Length 17 declared check body bytes 17 recomputed check match yes same count
Summary
A JSON body can carry named fields after the headers.
JSON names fields \text{JSON names fields} JSON names fields JSON honesty boundary The body bytes, parsed JSON fields, and length check are recomputed from pinned POST bytes. JSON honesty boundary - POST /api JSON body 17 bytes, fields ok=true and n=3 section name value check request line method POST parsed request line path /api parsed request line version HTTP/1.1 parsed header Host api.example exact header Content-Type application/json JSON header Content-Length 17 declared bytes body display words ok true comma n three safe display form body exact hex 7b226f6b223a747275652c226e223a337d pinned bytes body byte length 17 counted field ok ok=true parsed field n n=3 parsed check Content-Length 17 declared check body bytes 17 recomputed check match yes same count