What proves that an empty API response is correct?

A debugging question about 200 OK responses, empty arrays, filters, permissions, and pagination.

A 200 OK with `data: []` can mean no records, no permission, wrong filters, or a cursor past the last page. What field do you look for first to decide whether the empty response is correct: total count, permission hint, query echo, or a known-good comparison request?