PolicyOverviewServiceTest and SourceOverviewServiceTest stub the authority and reach team scoping only through the guards' visibleFrom(), which now calls requireCurrentUserTeamId() — re-point their stubs to match. (Full :proprietary and :saas suites green.)