theorem optimize_no_escalation (p : Policy) (req : Request) :
evaluate p req = .deny → evaluate (optimize p) req ≠ .permit := p:Policyreq:Request⊢ evaluate p req = Decision.deny → evaluate (optimize p) req ≠ Decision.permit
All goals completed! 🐙