Checks one account's appliance permissions: creating and viewing its own appliance, saving details, completing maintenance, editing the schedule and protected Undo — all through the backend functions — and that a direct record write and another owner's fixture are refused.

Run this while signed in as the non-admin account. An administrator is allowed by design to write a record directly and to reach another owner's record, so in an admin run those items are reported NOT JUDGED.

Everything it touches is a disposable fixture named PERM-CHECK fixture … — one owned by this account, one owned by another party — created for the run and removed at the end. No legitimate appliance is read or changed.