- 8 xfail tests covering auth guards, aggregate stats, and sensitive field scan - Tests will become real assertions once overview.py is implemented in Task 2