Tools stage synthesis. Write a short evidence note; this worksheet is ungraded.
Original models. No browser, CyberChef bake, proxy, or Nmap run was observed.
Write six lines. The rubric is on this card.

1. Page
Source sentence: Bring the spare cable.
A local Elements edit shows: Bring the spare lamp.
After a reload of the unchanged file, the sentence is: Bring the spare cable.
Rubric: name browser developer tools. The file still says cable. The edit lived in the browser.

2. Transform
Input: 6c616d70
The characters are hex digits.
Rubric: one From Hex step. Predicted plain text: lamp.
Python's standard library produced that prediction while this card was written.
Magic is a hypothesis until the step is written down.

3. Proxy
Held request: GET /cable HTTP/1.1, Host: 127.0.0.1:8000
Rubric: name the control from the proxy lesson that sends this held request.
Then write the cleanup: intercept or global break off, lab browser proxy cleared, everyday browser left without a lab CA.
Keep this request a model; sending it is unnecessary.

4. Recon
A file in this case says Disallow: /private/
A link on the same card names cable.txt.
Rubric: cable.txt is a clue you were given. The Disallow line is a request to crawlers. It does not grant a test.

5. Scan model
127.0.0.1 port 8000, row 8000/tcp open, labeled synthetic.
Rubric: the row records a listener in the model. It does not by itself prove a vulnerability.

6. Time
Stamp on the bad note: 2026-10-12T09:00:00
Rubric: the date is present and the timezone is missing.
Do not fill the missing zone by assuming your own location.

Stop when the six lines are written. Do not start a tool to finish the case.