{
  "result": "PASS",
  "binary_sha256": "4bde593ecf3df12059e5c0fd03aab471b7e6bad2a392ed0ed6e90abfc4b08ae4",
  "cells": 4,
  "survivors": [],
  "note": "Actual CLI: effective-token gate admits download despite stale account, invalid signed metadata still refuses; denied read, timeout and missing CLI remain separate. Signed valid staging is covered by composite_e2e."
}