2 bob, setting on: 200 application/json {"artifacts": [
{"hash": "96cf26f4cde7df744f797d594d5ad8b8478409325abf55cbd173ed4d0f66d7df", "received": true, "rid": 3,
 "rcvid": 2, "user": "alice",
 "capabilities": "cghijnorz234"}
]}
   address shown: False
3 anonymous: 200 /rcvlogin?name=96cf26f4cde7df744f797d594d5ad8b8478409325abf55cbd173ed4d0f66d7df {"artifacts": [ {"hash": "96cf26f4cde7df744f797d594d5ad8b8478409325abf55cbd173ed4d0f66d7df", "received": true, "rid": 3,
4 bob asks alice's capabilities: {"user": "alice", "known": true, "capabilities": "cghijnorz234",
 "modreq_wiki": false,
 "modreq_tkt": false}
5 alice's post through /forume1: 200 /forumpost/3d74baa7b8
   bob reads its receipt: {"artifacts": [
{"hash": "3d74baa7b8", "received": false}
]}
6 prefilled reply form: 200 content shown: True | Submit button: True | csrf in form: True
   replies stored by the prefill alone: 0
7 CSP on Fossil's pages: default-src 'self' data:; script-src 'self' 'nonce-552afae1585d8cd000749a2a6ad23d44d73598dac421c005'; style-src 'self' 'unsafe-inline'; img-src * data:
{"artifacts": [{"hash": "3d74baa7b8ec829f99e46151449222292cb6e689a3e6efcdad5a6bc643088e48", "received": true, "rid": 4, "rcvid": 3, "user": "alice", "capabilities": "cghijnorz234"}]}setting off: 302 -> http://127.0.0.1:54769/login?g=rcvlogin%3fname%3D3d74baa7b8ec829f99e46151449222292cb6e689a3e6efcdad5a6bc643088e48&anon=1
