Six deterministic states
Minimum access, over-broad denial, owner approval, expiry, read-limit denial and an incomplete result are available for replay.
Synthetic agent-security cases
Every record in this lab is fabricated. The scenarios exercise policy behavior without accepting real private data.
No public upload
The first version deliberately has no upload field, customer record connector or credential path.
A future live model stays separate
Model-driven requests may be added later, but the policy result must remain independently reproducible.