Permission Self-Test
Verifies ordinary accounts cannot create earnings, payouts, applications, or read other users' private data.
Sign in as an ordinary creator or visitor account (not an admin), then press Run. The test uses your own session — it never shares tokens or passwords. Every row should be PASS, with 0 leaks and 0 leftover records.
