```ruby
require 'test/unit'
require 'authorize/graph/fixtures'

module Authorize
  module TestHelper
    # Assert that a given role explicitly has a given permission mode over a given resource
    # Example: assert_authorized(current_user, :read, :list, widget)
    # If a trustee is provided instead of a role, then the primary role of the trustee is used.
    def assert_authorized(*args)
      tor = args.shift
      role = tor.is_a?(Authorize::Role) ? tor : tor.role
      assert_block("Role #{role} is not authorized") {role.may?(*args)}
    end

    def assert_unauthorized(*args)
      tor = args.shift
      role = tor.is_a?(Authorize::Role) ? tor : tor.role
      assert_block("Role #{role} is authorized") {role.may_not?(*args)}
    end
  end
end```

Expand test helpers with role inclusion assertions
user
```ruby
require 'test/unit'
require 'authorize/graph/fixtures'

module Authorize
  module TestHelper
    # Assert that a given role explicitly has a given permission mode over a given resource
    # Example: assert_authorized(current_user, :read, :list, widget)
    # If a trustee is provided instead of a role, then the primary role of the trustee is used.
    def assert_authorized(*args)
      tor = args.shift
      role = tor.is_a?(Authorize::Role) ? tor : tor.role
      assert_block("Role #{role} is not authorized") {role.may?(*args)}
    end

    def assert_unauthorized(*args)
      tor = args.shift
      role = tor.is_a?(Authorize::Role) ? tor : tor.role
      assert_block("Role #{role} is authorized") {role.may_not?(*args)}
    end

    def assert_has_role(tor, subrole)
      role = tor.is_a?(Authorize::Role) ? tor : tor.role
      assert_block("Role #{role} does not include #{subrole}") {role.roles.include?(subrole))}
    end

    def assert_does_not_have_role(tor, subrole)
      role = tor.is_a?(Authorize::Role) ? tor : tor.role
      assert_block("Role #{role} includes #{subrole}") {!role.roles.include?(subrole))}
    end
  end
end```
assistant