{%{bypass?: true}, cond_expr, complete_expr}, {one_condition_matches, all_policies_match} ->  {    b(cond_expr or one_condition_matches),  # <- 漏洞：仅使用条件检查    b(complete_expr or all_policies_match)  }

{%{bypass?: true}, _cond_expr, complete_expr}, {one_condition_matches, all_policies_match} ->  {    b(complete_expr or one_condition_matches),  # <- 已修复    b(complete_expr or all_policies_match)  }

{%{bypass?: true}, _cond_expr, complete_expr}, {one_condition_matches, true} ->  {    b(complete_expr or one_condition_matches),  # <- 为保持一致性    complete_expr  }

policies do  bypass always() do    authorize_if actor_attribute_equals(:is_admin, true)  end
  policy action_type(:read) do    authorize_if always()  endend

test "bypass policy bug" do  policies = [    %Ash.Policy.Policy{      bypass?: true,      condition: [{Ash.Policy.Check.Static, result: true}],  # 条件 = true      policies: [        %Ash.Policy.Check{          type: :authorize_if,          check: {Ash.Policy.Check.Static, result: false},  # 策略 = false          check_module: Ash.Policy.Check.Static,          check_opts: [result: false]        }      ]    },    %Ash.Policy.Policy{      bypass?: false,      condition: [{Ash.Policy.Check.Static, result: false}],      policies: [        %Ash.Policy.Check{          type: :authorize_if,          check: {Ash.Policy.Check.Static, result: true},          check_module: Ash.Policy.Check.Static,          check_opts: [result: true]        }      ]    }  ]
  expression = Ash.Policy.Policy.expression(policies, %{})    assert expression == false  # 期望：false（拒绝）  # 主分支实际结果：true（错误授权）end