A test tool, not part of the product. It calls every action as whoever is signed in and records whether the server allowed it or refused. Read-only actions only — nothing here writes.