Original request model. No proxy was started. No browser was configured.
No certificate was installed. No response was received.

Grant
Target: 127.0.0.1, port 8000 only
Allowed action: read the owned desk page
Excluded: any other host, any scan, the school portal
Stop: if the grant does not match, do not send the request

Worked model
GET /note HTTP/1.1
Host: 127.0.0.1:8000

State: held at intercept. The server has not received it yet.
Burp's control that sends a held request is Forward.
ZAP's Step sends the trapped message and leaves the global break set.
ZAP's Continue sends it and turns that global break off.
ZAP's Drop does not send it.
Deleting cookies does not send it.
Predicted after a send: the server would see this one request. Not observed.

Activity model
GET /desk HTTP/1.1
Host: 127.0.0.1:8000

Check: method GET, path /desk, host 127.0.0.1, port 8000.

Replay of that same request
GET /desk HTTP/1.1
Host: 127.0.0.1:8000

The second copy has the same request line. That is one replay, still inside the grant.
A request aimed at another host would leave the grant.

Predicted status if the Stage 06 loopback server were serving an existing file: 200.
That status reuses the Stage 06 success model. It was not observed here.

Field model
POST /time HTTP/1.1
Host: 127.0.0.1:8000

State: held. The lab browser is waiting.