Replays captures under testdata/sshtest_results. 200 path requires parse and SetPolicy to succeed; non-200 requires an error whose body substring-matches the captured SaaS message.