Replay every deterministic permission scenario through the real PermissionEngine and fail on current-policy regressions while reporting secure-target gaps separately. Encode allowlist, standing-rule, and risk-override state directly in corpus fixtures so runs are self-contained.
