Authority
Insufficient authority and expired delegation stop before execution.
Proof Lab
Adverse cases must stop visibly.
Test insufficient authority, expired delegation, policy conflict, changed input, evidence mismatch, replay mismatch, prohibited action, and missing approval.
Adverse catalog
Denial is part of the product.
Every case is safe, local, and deterministic.
Policy
Conflict and prohibited action produce deny.
Evidence
Changed input surfaces digest failure.
Replay
Replay mismatch prevents verified outcome.
Approval
Missing approval stops at the checkpoint.
No side effects
No demo calls a production tool or changes data.