Toxic Access Combination Detector

Data Security Posture Management lives or dies on one question: which accounts can both see sensitive data and destroy or move it out? This simulator renders a live 2D account × permission matrix and runs a real set-containment detection pass across it on every edit, flagging every "toxic combination" where an account's full permission set contains a complete predefined rule — read access plus destructive rights, or a create/approve pair that lets one person originate and rubber-stamp their own fraud. Toggle any cell to grant or revoke a permission and watch rows flip red the instant a toxic rule set is completed, and clear the instant it is broken.