Test coverage for: - Tool group expansion - Profile policies - Allow/deny filtering - Provider-specific rules - Subagent restrictions - Combined policy layers Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>