Scores protected MCP tool rejection and PLATPHORM_API_KEY enforcement.
Built-in suites describe real checks, but no pass/fail result is claimed until a run persists evidence.