A 403 is a claim, not a verdict. What building the MockForge CVE toolkit taught me about judging at the layer where the truth lives, putting safety in the schema, and tools that say what they cannot prove.
MockForge is my open-source, Rust-built API mocking framework covering REST, gRPC, GraphQL, and WebSocket from one config — plus MockForge Cloud for teams.