Complete AL review knowledge readiness

Fill telemetry and Query coverage, strengthen thin review domains, correct audited content defects, and add deterministic cheap-model evaluation and reference-integrity safeguards.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9825b012-e653-496a-9310-c1f4b6f8ac27

microsoft/knowledge/testing/permission-tests-must-lower-the-execution-context.good.al

@@ -0,0 +1,43 @@
+permissionset 50480 "LIMITED USER"
+{
+    Assignable = false;
+    Permissions =
+        tabledata Customer = R,
+        codeunit "Protected Setup Action Test" = X;
+}
+
+codeunit 50481 "Protected Setup Action Test"
+{
+    trigger OnRun()
+    var
+        Customer: Record Customer;
+    begin
+        Customer.Init();
+        Customer."No." := 'NO-INSERT';
+        Customer.Insert();
+    end;
+}
+
+codeunit 50482 "Permission Test Good"
+{
+    Subtype = Test;
+    TestPermissions = Restrictive;
+
+    [Test]
+    procedure LimitedUserCannotRunSetup()
+    var
+        PermissionsMock: Codeunit "Permissions Mock";
+        SetupAction: Codeunit "Protected Setup Action Test";
+    begin
+        PermissionsMock.Start();
+        PermissionsMock.SetExactPermissionSet('LIMITED USER');
+
+        asserterror SetupAction.Run();
+        Assert.ExpectedError('permission');
+
+        PermissionsMock.Stop();
+    end;
+
+    var
+        Assert: Codeunit "Library Assert";
+}