[pragalli]

Summary

Closes #307

A Tranche 1 reviewer found two misleading docs: the authorization section of TESTING.md reads as if role scenarios are not tested, and formulas in kit-spec.md fail to render on GitHub.

Changes

• Authorization testing is described as two layers: who may call (roles) and whether a signature is required
• Formulas use GitHub's dollar-backtick delimiters, so escaped underscores survive Markdown processing

Acceptance criteria

• The authorization section of TESTING.md separates role checks from signature checks and points to the authorization matrix
• No formula in kit-spec.md shows a syntax error on GitHub
• The formulas say the same thing as before

Test plan

Automated tests

1. npx prettier --check docs/kit-spec.md docs/TESTING.md passes with the repo config.
2. All 29 formulas parse in KaTeX.

Manual verification

1. Open docs/kit-spec.md in this PR's "Files changed" view, rich diff.
2. Expect all 29 formulas rendered, with no '_' allowed only in math mode.

Breaking changes

None.

Checklist

• Self-reviewed my own diff
• Tests added or updated
• Docs updated (if applicable)
• No unrelated changes bundled in

Screenshots

None.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
strata-vault-kit-app	Ready	Preview	Oct 22, 2026 4:09pm UTC