RegRAG: sealed test run