{
  "name": "session.hello \u2014 an unpaired WebSocket client is refused",
  "description": "The WS transport is reachable by any local process, so a token is mandatory there. The Unix socket needs none: SO_PEERCRED already proved same-UID.",
  "transport": "ws",
  "request": {
    "jsonrpc": "2.0",
    "id": 101,
    "method": "session.hello",
    "params": {
      "clientType": "extension",
      "clientName": "Velox for Firefox",
      "protocolVersion": "1.0.0",
      "token": "not-a-real-token"
    }
  },
  "response": {
    "jsonrpc": "2.0",
    "id": 101,
    "error": {
      "code": -32002,
      "message": "not paired: call session.pair first"
    }
  },
  "assertions": [
    "only session.pair is served on an unauthenticated WebSocket connection",
    "the reply does not reveal whether the token was absent, malformed or merely wrong",
    "this failure counts towards the pairing rate limit"
  ]
}