Searching protocol for "side-effect-verification"
Test authenticated API routes
Verify command side effects, not just exit codes.