Pure checks for AI Usage Permissions

Verification Boundary

The suite checks deterministic module behavior and declared configuration using local inputs.

What This Suite Proves

Unqualified callers cannot inspect system usage. Reader policies omit content authority. Combined bindings require every named suite; a component assertion alone does not establish the full experiment.

What It Does Not Prove

These checks do not establish database transactions, deployed permissions, provider availability or a complete user journey.

Real Dependencies and Test Doubles

Service permission declarations, route metadata and the staff reader policy are real. The suite inspects declarations without substituting grants.

Must Not Be Doubled

Retain the function, configuration or boundary guard under test and its assertions; replacing them removes the evidence.