Canonical Authorization — Shadow Status

Click "Generate" to fetch the current shadow authorization status.

This is a read-only operation. It queries existing ShadowRBACEvaluation records and computes aggregate metrics. No data is created, modified, or deleted.