Watch real enforcement: FHIR requests go from 200 OK → 403 FORBIDDEN when governance policy changes
Send a GET request for Patient/1. With a valid receipt and current epoch, the call succeeds.
Simulate a governance change by incrementing the epoch. All prior receipts are instantly invalid.
Re-run the same request. The rail blocks it with 403 and returns a FHIR OperationOutcome.