# K1 Access Groups conformance
This test-only library owns the Groups-dependent authorization scenarios for the K1 Access facade. It exercises ordinary groups, synthetic sentinels, group ownership, independent user/model viewer groups, and immediate membership revocation through one real local Ordering, Peering, Groups, and Access stack.
## Public API
```rust
pub fn verify() -> Result<(), String>;
```
`verify` creates a fresh temporary root, opens each dependency once, performs the complete deterministic scenario, and returns the first labeled dependency or assertion failure. It checks the built-in-profile authorization shape but does not implement or test profile storage or resolution.
The fixture uses corrected strict Groups wire v2 through the public Groups facade. It creates only current-format state and has no migration or compatibility path. It performs local temporary filesystem and SQLite I/O plus dependency-owned entropy and synchronous callbacks. It starts no thread and performs no network, provider, HTTP, retry, timeout, polling, deployment, or background work.