The CLI plain format output does not include the literal text "Dry Run" (that string only appears in the Rich panel title). Assert against "risk_level" which is present in the dry-run impact output instead.