A support agent just got a hijacked request. Set its mandate, run the attack, and see if the gate holds. The decisions are real and signed, and you can still lose.