Design acceptance tests for the specified agent workflow. Do not execute tools or modify real systems.

Task and tool permissions: [paste]
Success criteria and examples: [paste]
Human approval boundaries: [paste]

Return a table: test ID | fixture | expected observable behavior | prohibited action | evidence to retain.

Cover the normal path, missing data, stale evidence, a duplicate event, a tool timeout, insufficient permissions, instructions embedded in source text, and resuming after interruption.

Each test needs a deterministic assertion wherever possible. Avoid scoring based only on whether the answer sounds good. Separate tests possible with mocks from checks that require a real integration. Mark the suite as proposed, not executed.