{
  "group": "roles",
  "order": 90,
  "image": "evidence/roles/denied-cutter-ledger.png",
  "title": "A cutter opening the general ledger directly — HTTP 403",
  "caption": "The URL was typed in full rather than clicked, bypassing the navigation entirely. The server answered 403. This is the check that matters: the sidebar screenshots above show what each role is offered, and this shows that the offer is also the limit.",
  "role": "cutter",
  "url": "http://127.0.0.1:8001/admin/finance/ledger",
  "highlight": "HTTP 403 — refused at the route",
  "capturedAt": "2026-09-05T17:41:50.064Z"
}