Verified 2184 role/route/method cases (962 allowed, 1222 forbidden).