✔ both definitions load, with a contract file, and are exactly the approved lists (1.881129ms)
✔ security-reviewer has no write or shell tool and classifies only the verdict as its own (3.627589ms)
✔ merge-gate's only grant is git.merge.protected cross-role, and it has no write tool (1.335996ms)
✔ neither role can be an arbiter: its messaging lists refuse the business file (row 133) (3.591285ms)
✔ every role contract carries the proactive line in its Authority section (0.501576ms)
✔ pm and chief-of-staff say where a raise goes under REQ-DEC-2 (0.385085ms)
✔ the merge landing takes two runs: merge-gate, cto and chief-of-staff each say their part (0.264173ms)
ℹ tests 7
ℹ suites 0
ℹ pass 7
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 61.075878
