Parity tests
Compare source-native access decisions with ECG disclosure decisions using safe vectors.
Test source ACL parity, nested groups, revocation propagation, field restrictions, link access, and failure behavior before evidence can be admitted.
Compare source-native access decisions with ECG disclosure decisions using safe vectors.
Treat unavailable identity or policy state as a reason to exclude—not to widen.
Expose unsupported permission modes in the catalog and manifest.