- execute the operator CLI against real PostgreSQL credential tables - require complete target revocation and unrelated-admin isolation - force a mid-transaction database failure to prove rollback