The attack, live

A ticket comment asserts a fact and issues an instruction. Anyone who can comment can write it. Choose what authority it claims, and what it tries to influence.

Untrusted content

Source — determines integrity

Capability it requests

Select a workspace first.

This calls the same check_capability_allowed() that MemoryGate.admit() calls, and stops after the decision. It never admits, on any verdict — the write path is not exposed on the public demo. The database-writes figure is measured server-side, not asserted.