RoleCall: Catch Permission Holes Before Merge
RoleCall catches access-control bugs in pull requests before merge: it calls every API endpoint as every role on main and the PR, proves each hole with real HTTP evidence, and IBM Bob finds the exact line and writes the fix plus a test.