['users', 'students', 'parents'], 'role and privilege boundaries' => ['roles', 'permissions', 'admin'], 'consent and communication compliance' => ['notification', 'message', 'email', 'whatsapp'], 'export auditability' => ['export', 'download', 'print', 'report'], 'safety and medical minimization' => ['emergency', 'guardian', 'incident', 'attendance'], 'finance dispute integrity' => ['payment', 'refund', 'transaction', 'finance'], 'class capacity and schedule safety' => ['classes', 'schedule', 'calendar', 'assign'], 'webhook ordering' => ['webhook', 'callback', 'provider'], 'file quarantine safety' => ['upload', 'import', 'document', 'media'], ]; foreach ($families as $label => $needles) { $this->assertNotEmpty( $this->apiRoutesContainingAny($needles), 'Batch 18 invariant family missing or renamed without updating risk register: '.$label ); } } }