Adapter Health Checks Should Exercise the Denial Path Too

A health check that only proves the adapter can succeed says nothing about whether it can still refuse correctly, and the refusal path is the one governance depends on.

Green health checks usually mean the adapter can do things. Governance depends on the opposite guarantee: that it still refuses the things it must refuse.

A denial-aware health check

• Periodically attempt a canary action that policy must deny.
• Alert when the denial is slow, malformed, or absent.
• Track denial-path health as a first-class adapter metric.

Use the adapter system, AuthGuardian, and benchmarks to keep proving the adapter can still say no.