Try the leak test
Put an authority-only key into an evidence topic in your sandbox, and watch check_consistency
block the public and downstream packs.
The authority-only keys hold placeholders, not real figures. In a real source they would hold facts that only the AI Office may receive, such as training compute.