The bench's default identity — wildcard user + wildcard grants,
registered as the default token on the bench's fake client so the
engine token-resolves it (/users/me + the ACL path) exactly like
production.
Production code never sees this; pass createBench({ access }) to
test denial paths.
The bench's default identity — wildcard user + wildcard grants, registered as the default token on the bench's fake client so the engine token-resolves it (
/users/me+ the ACL path) exactly like production.Production code never sees this; pass
createBench({ access })to test denial paths.