permission-diff
CI-native differential authorization regression testing for Python—replay exact permission cases, enforce invariants, and catch DENY→ALLOW changes.