From 6a93a5f8455da19213b75f34c074bbaafdc201a4 Mon Sep 17 00:00:00 2001
From: David Henning <david@webcodr.io>
Date: Sat, 25 Jul 2026 21:31:26 +0200
Subject: [PATCH] docs(site): add claim validation to the capabilities list

Add a "Validate claims" capability card covering --verify-claims and the
--aud/--iss assertions, placed after "Verify signatures" and renumbering
the following cards. Reflects the opt-in claim validation shipped in #21.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 site/index.html | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/site/index.html b/site/index.html
index 713b830..3ebba72 100644
--- a/site/index.html
+++ b/site/index.html
@@ -185,6 +185,16 @@ <h3>Verify signatures</h3>
           </article>
           <article>
             <span>03</span>
+            <div>
+              <h3>Validate claims</h3>
+              <p>
+                Enforce expiry and not-before, or require an audience or issuer,
+                exiting nonzero on failure.
+              </p>
+            </div>
+          </article>
+          <article>
+            <span>04</span>
             <div>
               <h3>Decrypt JWEs</h3>
               <p>
@@ -194,7 +204,7 @@ <h3>Decrypt JWEs</h3>
             </div>
           </article>
           <article>
-            <span>04</span>
+            <span>05</span>
             <div>
               <h3>Inspect nested tokens</h3>
               <p>
@@ -203,7 +213,7 @@ <h3>Inspect nested tokens</h3>
             </div>
           </article>
           <article>
-            <span>05</span>
+            <span>06</span>
             <div>
               <h3>Use established key formats</h3>
               <p>
@@ -212,7 +222,7 @@ <h3>Use established key formats</h3>
             </div>
           </article>
           <article>
-            <span>06</span>
+            <span>07</span>
             <div>
               <h3>Script with JSON</h3>
               <p>