Final run

The recorded session compared three paths: direct execution outside Stipul, an allowed $150 call through Writ, and a denied $900 call through Writ. The denied call was not forwarded to Stripe.

Stipul governs only calls routed through Writ. Direct Stripe API access, unmanaged SDK calls, leaked credentials, compromised hosts, and bypass paths remain outside this demonstration's control boundary.