{
  "ticket": "B02",
  "date": "2026-09-08",
  "scenario": "Retain A profile request, logout, sign in as B, submit with B cookies/fresh CSRF and retained request context",
  "before": { "status": 200, "a": "Private A", "b": "A draft must never enter B" },
  "after": { "status": 409, "a": "Private A", "b": "Private B" },
  "fixtures": "Permanent Playwright API tests against actual API, Identity/session checks and isolated SQLite; synthetic accounts only",
  "historicalEvidenceUnchanged": ["probes.mjs", "evidence/observations.json"]
}