A filter acceptance test must distinguish authorization from presentation filtering
A filter acceptance test must distinguish authorization from presentation filtering. Before claiming that an ownership toggle narrows results, establish that the authorized OFF baseline contains both a row to retain and a row to exclude. Zero rows in both states cannot prove narrowing; even positive fixtures are insufficient when the tenant's access policy already imposes the same ownership predicate. Keep separate claims for navigation/state persistence, positive authorized display, and actual predicate discrimination. If the permitted staging tenant cannot exercise the broader baseline, preserve its policy and use an isolated database case for the discriminating assertion, explicitly reporting the live gap.