Critical acceptance tests

Before calling the MVP functional, verify these properties:

Stealing only the Authentication private key cannot mint a child.
Stealing only the Delegation private key cannot perform an ordinary API operation.
Stealing only the Authorship private key cannot publish through the API.
Stealing only the Box private key cannot authenticate, mint, or publish.
The Credential ID and all four public keys grant no access.
A child cannot receive an action absent from its parent’s delegation ceiling.
A child cannot widen its resource scope.
A child cannot create a longer-lived descendant than permitted.
Revoking a parent immediately blocks every descendant.
Suspending one component does not unnecessarily destroy unrelated historical verification.
Rotating a component does not invalidate historical signatures.
The Owner can inspect every Key and event without possessing Author private keys.
The System Admin Owner cannot cryptographically impersonate an Author.
A claim token cannot be used twice.
A request nonce cannot be used twice.
A modified body fails signature verification.
A modified permission policy changes its policy hash.
Paid and gift accounts produce identical authorization decisions.
No private Author component appears in the database, application logs, error reports, analytics, email, or backups.
An alert is produced for every permission expansion, Primary Author mint, delegation rotation, and subtree revocation.

