Integration Tests Should Break the Denial Path on Purpose

Integration tests should deliberately break the denial path so teams can verify what happens when policy and adapters disagree.

The safest time to discover that an adapter misreports a denial is during a test that intentionally causes that disagreement.

Break the path on purpose by testing

• Mismatched capability mapping.
• Timeout-induced denials.
• Missing audit visibility for blocked actions.

Use the adapter system, AuthGuardian, and integration guide to test denial disagreements directly.