## Test files - `tests/test_firewall.py` — row cap, field cap, char truncation, max_depth, all 4 response modes, raw-without-permission fallback - `tests/test_redaction.py` (or in test_firewall) — PII redaction, allowed_fields override, nested scanning, warnings - `tests/test_handles.py` — store/retrieve, TTL, expand pagination, field selection, filtering, combined query - `tests/test_trace.py` — record/get, list ordering, immutability ## Acceptance criteria - [ ] Every budget type has a truncation test - [ ] Every response mode tested - [ ] Redaction tested with and without allowed_fields - [ ] Handle expand tested with every query type + combinations - [ ] All test files pass
