#permission-isolation

Deno test runner permission isolation for credential-free integration tests

The goal is to run Deno integration tests without exposing production credentials while still allowing controlled network access to test doubles. Deno test runner applies CLI permission flags per invocation. Deno.env.get accesses the real process environment when env permission is granted, and the API is global with no built-in per-test override. The runtime