# v1.6 disclosure — fragment 1 of 4: claim-set A auth-boundary

Calibration fragment — per-class rollup and row-level findings for
claim-set A (auth-boundary review), findings A-1 through A-3.

## Per-class rollup

| class | n | TP | CTX | NOISE | noise driver |
|---|---|---|---|---|---|
| token-scope | 2 | 2 | 0 | 0 | — |
| endpoint-auth | 1 | 0 | 1 | 0 | — |
| **total** | **3** | **2** | **1** | **0** | |

Severity mix: 1 HIGH / 1 MED / 1 LOW.

**Adjudicated precision: 2/3 = 66.7%.**

## Row-level table (all 3)

| # | claim | sev | class.rule | location | verdict | note |
|---|---|---|---|---|---|---|
| 1 | A-1 | HIGH | token-scope.r1 | auth/jwt.js:41 | TP | refresh-token scope accepted cross-tenant |
| 2 | A-2 | MED | token-scope.r2 | auth/jwt.js:58 | TP | aud claim not pinned to issuer |
| 3 | A-3 | LOW | endpoint-auth.r1 | api/admin.js:12 | CTX | debug route gated by env flag only |