# K1 Access privacy testkit
## Public API
```rust
pub fn verify_access_privacy() -> Result<(), String>;
```
`verify_access_privacy` runs the fixed non-Group Access privacy conformance flow on one fresh temporary public Access/Groups/Peering/Ordering stack. It returns the first setup or conformance failure, and removes the temporary state when it returns.
The fixture covers direct users and models, authority filtering, policy replacement, monotonic discovery, group-backed discovery no-copy semantics, batch checks, reverse lookup, and immutable ProfileId links. Every successful creation uses a distinct non-null profile, and the trusted raw test-only profile lookup must retain the main link across policy replacement. It does not exercise restart, concurrency, malformed input, lifecycle, or group-role behavior.
Performance: Not yet benchmarked; one call performs fixed-size synchronous local I/O and dependency-owned persistence.