test(cli): the parent-write-reach fixture's position names its set (#24757)

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J8LYP8UCJURxbFWZqnywyD

Author: claude

packages/cli/test/verify-parent-write-reach.test.ts

@@ -71,7 +71,9 @@ const PERMISSIONS = [
   },
 ];
 
-const POSITIONS = [{ name: 'vpw_manager', label: 'Manager' }];
+// [ADR-0131 D3/D4; #24757] The position names its set: a set that only shares
+// a position's name is granted by nothing.
+const POSITIONS = [{ name: 'vpw_manager', label: 'Manager', permissionSets: ['vpw_manager'] }];
 
 /** The same app, plus a hook that refuses every edit of a contract with the platform's own code. */
 const CONTROL_SOURCE = `{