- TestNew_EmptyToken: verify empty token returns error from telego - TestIsAllowed_EmptyList: verify open access when no restrictions set - TestIsAllowed_RestrictedList: verify allowlist filtering - TestCheckRateLimit: verify cooldown enforcement and per-user isolation