kiosk-test-support is the framework-agnostic test surface a Kiosk provider uses on their OWN application. It carries two things. The CONFORMANCE CHECKS assert the four properties the protocol makes normative of an origin: that its routes resolve, that a verb executes, that a query answers the shape it declared, and that data access is scoped to the authenticated principal. They ship with a Minitest adapter and an RSpec adapter, both loaded by explicit require, so the same fault reads identically in either framework. The JOURNEY DSL carries the identity-scoped call helpers (`as_agent_of`, `as_user`, `as_agent`, `as_anonymous`, `query`, `run_query`, `run_action`, `pay_action`, `kiosk_seed`), the pluggable executor contract, a NullExecutor for self-tests, and the structured error classes (`RLSDenied`, `QuotaExceeded`, `ExecutorNotConfigured`). It is wired into RSpec by `kiosk-rls-rspec` and into Minitest by `kiosk-rls-minitest`. The ASSISTANT drives an origin over HTTP as an assistant does: it registers, pays proof-of-work tolls, queries, runs, pays with signed mandates and listens on the event stream. `Kyc` stands in for the operator's KYC provider, and `StripeMock` fronts a local stripe-mock. No Postgres, no Rails, no test-framework dependency. `InProcessExecutor` and `Conformance::InProcessOrigin` run against the host's kiosk-server and are required explicitly; this gem does not depend on kiosk-server.