---
title: "Battle test: multiple tenants in a BuildWithHQ SaaS"
section: "Trust & Security"
canonical_url: "https://support.buildwithhq.com/trust/battle-test-2026-08-30.html"
reviewed_at: "2026-09-14"
authority: Official
---

# Battle test: multiple tenants in a BuildWithHQ SaaS

How BuildWithHQ's first-class modules and APIs behaved with multiple tenants, scoped users, and hostile cross-tenant requests.

## In brief

- **Scenario:** Multiple tenants in one SaaS
- **Inventory:** 1,169 named passing tests
- **Result:** Security boundaries held

On August 30, 2026, we tested BuildWithHQ as a multi-tenant SaaS builders platform. Multiple tenant organizations operated inside the same SaaS while using different users, roles, DataRoles, locations, records, conversations, and support queues. The system worked within its designed boundaries: tenants remained separated, and each user could see or change only the information allowed by their server-derived identity and permissions.

## How the environment was used

**September 15 integrity follow-up:** A separate retained 20-organization test database passed 19 business and temporal invariants after the harness verified 24 zero-duration DataRole history boundary diagnostics. Those raw diagnostics remain in the evidence; unknown constraints, reversed periods, and positive-duration overlaps still fail. No business data or history was deleted. This bounded integrity check does not rerun or replace the historical load measurements below. Report unit tests now use isolated synthetic fixtures; missing real benchmark evidence still blocks performance sign-off.

The load scenario contained 1,000 synthetic organizations and 20,000 unique users. Every active user received a DataRole, User Type, and location assignment inside that user’s own organization. Each organization also had a non-deliverable `.example.test` support mailbox, customer contact, conversation, inbound message, reply, outbound-delivery state, and numbered support ticket. We used the platform as those organizations rather than only checking whether database objects existed. The workload included ordinary inbox traffic, ticket-enabled email addresses, message bursts, ticket resolution states, workflow actions, AI paths, integrations, record searches, and attempts to access another tenant’s data.

The SaaS used its normal three-database boundary: SaaS DB, SaaS Vector DB, and SaaS Immutable Logs. Builders, Template Library, and Platform Orchestration remained shared platform services and were not provisioned again for the SaaS.

## Browser and API load path

A real Chrome session signed in through the SaaS hostname, loaded its authorized Home page, opened Universal Inbox, selected Support Tickets, displayed ticket `SUP-000001`, and opened the Technical Support mailbox settings with Ticketing enabled. The cold post-restart sign-in and workspace bootstrap completed in 3.4 seconds in the test environment; opening Inbox took 20 ms, changing to Support Tickets took 249 ms, and loading mailbox ticketing settings took 601 ms. These measurements describe this test machine, not a production performance guarantee.

The authenticated HTTP sweep passed all 56 safe route and secured-record checks. A 200-request Universal Inbox run at concurrency eight returned 200 responses for every request, with a 19.6 ms median and 292 ms p95 response time.

## What was tested

Every current first-class module and API surface in the launch inventory was exercised at its applicable layers, including UI contracts, application services, stored procedures, database behavior, and live integration paths. Coverage included Universal Inbox, Support Tickets, GoClaw, AI retrieval, workflows, contacts, work orders, files, conversations, activity, search, knowledge, collaboration modules, integrations, marketplace behavior, provisioning, and operational workers.

- Valid users attempting to read or change another tenant’s records.
- Users attempting to widen their location, role, DataRole, named-action, or AI-read authority.
- Client-supplied tenant and record identifiers that did not match the authenticated server identity.
- Duplicate messages, ticket-number continuity, mailbox ticketing controls, stale Inbox/GoClaw context, workflow approvals, and replay behavior.
- Clean provisioning, generated API and stored-procedure contracts, seed consistency, rollback, and disposal of the three SaaS databases.

Across the tested first-class features and APIs, tenant separation held and record visibility followed each user’s role, DataRole, location, ownership, and explicit capabilities. AI retrieval respected the same record permissions, governed actions stayed behind their approval controls, and requests carrying another tenant’s identifiers were denied.

## Complete test inventory

The following 1,169 named tests all passed. Open any group to review every individual item.

**API gateway — 49 passed**
1. BuildWithHQ.ApiGateway.Tests.ApiResponseEnvelopeContractTests.AutomaticModelValidationUsesTheSharedErrorEnvelope
2. BuildWithHQ.ApiGateway.Tests.ApiResponseEnvelopeContractTests.EnvelopesRejectMissingCorrelationAndInvalidCodes
3. BuildWithHQ.ApiGateway.Tests.ApiResponseEnvelopeContractTests.ErrorEnvelopePreservesEstablishedFieldsAndStableDomainCode
4. BuildWithHQ.ApiGateway.Tests.ApiResponseEnvelopeContractTests.ProviderDiagnosticsAreNeverSerializedAsPublicErrors
5. BuildWithHQ.ApiGateway.Tests.ApiResponseEnvelopeContractTests.SuccessEnvelopeHasStableVersionDataAndCorrelationFields
6. BuildWithHQ.ApiGateway.Tests.ApiResponseEnvelopeContractTests.UnhandledExceptionsReturnOnlyGenericCorrelatedEnvelope
7. BuildWithHQ.ApiGateway.Tests.DeveloperAiControllerTests.ControllerExposesOnlyVersionedAppScopedAiRoutes
8. BuildWithHQ.ApiGateway.Tests.DeveloperAiControllerTests.PublicBodiesCannotSelectTenantPrincipalDatabaseOrProvider
9. BuildWithHQ.ApiGateway.Tests.DeveloperApiKeyAuthenticationTests.BearerCredentialCreatesOnlyServerResolvedServiceIdentity
10. BuildWithHQ.ApiGateway.Tests.DeveloperApiKeyAuthenticationTests.InvalidOrRevokedCredentialCannotCreateIdentity
11. BuildWithHQ.ApiGateway.Tests.DeveloperApiKeyAuthenticationTests.ScopeAccessorReadsOnlyAuthenticatedPrincipalClaims
12. BuildWithHQ.ApiGateway.Tests.DeveloperConnectorRegistryControllerTests.ControllerExposesOnlyAppScopedReadRoute
13. BuildWithHQ.ApiGateway.Tests.DeveloperConnectorRegistryControllerTests.ResponseCannotExposeTenantSecretsOrPhysicalRouting
14. BuildWithHQ.ApiGateway.Tests.DeveloperConnectorRegistryControllerTests.ResponseMapsTheVersionedRegistryAndStableSideEffectNames
15. BuildWithHQ.ApiGateway.Tests.DeveloperDataConnectorsControllerTests.ControllerExposesAccountScopedConnectorLifecycle
16. BuildWithHQ.ApiGateway.Tests.DeveloperDataConnectorsControllerTests.RequestBodyCannotSelectPrincipalScopePhysicalRoutingOrRawSecret
17. BuildWithHQ.ApiGateway.Tests.DeveloperDatabaseContractsTests.ControllerIsAuthenticatedAppScopedAndReadOnly
18. BuildWithHQ.ApiGateway.Tests.DeveloperDatabaseContractsTests.EmbeddedCatalogReturnsOnlyLogicalTenantFingerprints
19. BuildWithHQ.ApiGateway.Tests.DeveloperDatabaseContractsTests.ServiceRequiresExactServerIdentityAndTenantAccount
20. BuildWithHQ.ApiGateway.Tests.DeveloperInboundEndpointsControllerTests.ControllerExposesVersionedEndpointKeyLifecycle
21. BuildWithHQ.ApiGateway.Tests.DeveloperInboundEndpointsControllerTests.RequestBodyCannotSelectTenantPrincipalOrPhysicalDatabase
22. BuildWithHQ.ApiGateway.Tests.DeveloperInstalledServicesControllerTests.ControllerExposesOnlyLogicalInstalledServiceInvocationRoute
23. BuildWithHQ.ApiGateway.Tests.DeveloperInstalledServicesControllerTests.RequestBodyCannotSelectTenantIdentityOrPhysicalRouting
24. BuildWithHQ.ApiGateway.Tests.DeveloperLogsControllerTests.ControllerExposesOnlyVersionedAppScopedReadRoutes
25. BuildWithHQ.ApiGateway.Tests.DeveloperLogsControllerTests.PublicInputsCannotSelectAccountDatabaseProviderOrCredential
26. BuildWithHQ.ApiGateway.Tests.DeveloperLogsServiceTests.CrossAppIdentityFailsBeforeDatabaseRouting
27. BuildWithHQ.ApiGateway.Tests.DeveloperLogsServiceTests.QueryUsesOnlyServerIdentityAndStoredProcedure
28. BuildWithHQ.ApiGateway.Tests.DeveloperMcpServerTests.InvalidSensitiveCapabilityConfigurationFailsStartup
29. BuildWithHQ.ApiGateway.Tests.DeveloperMcpServerTests.OfficialSdkBuildsAllPublicToolSchemas
30. BuildWithHQ.ApiGateway.Tests.DeveloperMcpServerTests.ReadToolRequiresMcpAndRestScopesForTheSameRouteApp
31. BuildWithHQ.ApiGateway.Tests.DeveloperMcpServerTests.SensitiveToolsAreDefaultDeniedAndRequireServerApproval
32. BuildWithHQ.ApiGateway.Tests.DeveloperMcpServerTests.ToolCatalogExactlyMatchesTheServerPolicy
33. BuildWithHQ.ApiGateway.Tests.DeveloperMcpServerTests.UnauthenticatedAndMalformedRoutesExposeNoTools
34. BuildWithHQ.ApiGateway.Tests.DeveloperOAuthConnectionsControllerTests.ControllerPublishesTheCompleteOAuthLifecycle
35. BuildWithHQ.ApiGateway.Tests.DeveloperOAuthConnectionsControllerTests.RequestDtosCannotSelectIdentityProviderConfigurationTokensOrPhysicalRouting
36. BuildWithHQ.ApiGateway.Tests.DeveloperPaymentConnectorsControllerTests.ControllerExposesAccountScopedPaymentConnectorLifecycle
37. BuildWithHQ.ApiGateway.Tests.DeveloperPaymentConnectorsControllerTests.RequestBodyCannotSelectPrincipalRoutingProviderEndpointOrRawSecret
38. BuildWithHQ.ApiGateway.Tests.DeveloperRecordsControllerTests.PublicRoutesAndBodiesCannotSelectTenantPrincipalOrPhysicalDatabase
39. BuildWithHQ.ApiGateway.Tests.DeveloperRecordsControllerTests.RecordsControllerExposesTheVersionedHeadlessSurface
40. BuildWithHQ.ApiGateway.Tests.DeveloperWebhookDeliveriesControllerTests.ControllerExposesOnlyTenantScopedListAndRetryRoutes
41. BuildWithHQ.ApiGateway.Tests.DeveloperWebhookSubscriptionsControllerTests.ControllerExposesVersionedSubscriptionSurfaceWithoutRoutingSelectors
42. BuildWithHQ.ApiGateway.Tests.GatewayMetadataControllerTests.MetadataAndHealthExposeStableAnonymousRoutes
43. BuildWithHQ.ApiGateway.Tests.GatewayMetadataControllerTests.MetadataUsesMiddlewareCorrelationAndExposesNoTopology
44. BuildWithHQ.ApiGateway.Tests.WebSecurityTests.BearerAndApiKeyRequestsDoNotRequireCsrf
45. BuildWithHQ.ApiGateway.Tests.WebSecurityTests.MissingOrCrossOriginCookieProofIsDeniedBeforeController
46. BuildWithHQ.ApiGateway.Tests.WebSecurityTests.OriginConfigurationIsExactAndProductionFailsClosed
47. BuildWithHQ.ApiGateway.Tests.WebSecurityTests.SecurityHeadersAreAppliedToEveryResponse
48. BuildWithHQ.ApiGateway.Tests.WebSecurityTests.UnsafeCookieRequestRequiresAllowedOriginAndMatchingToken
49. BuildWithHQ.ApiGateway.Tests.WebSecurityTests.WildcardAndInsecureRemoteOriginsAreRejected

**Tenant runtime and first-class modules — 225 passed**
1. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.AuthoritativePublishProcedureRevalidatesBeforeLiveUpdate
2. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.DataBindingsResolveByServerScopeAndUnknownKeysBlockPublish
3. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.PublishedRuntimeSnapshotIsIsolatedFromCurrentDraftHistory
4. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.RawDraftSaveWrappersValidateBeforeAnyPageWrite
5. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.RuntimeBootstrapUsesEffectiveAuthorizedComponentRegistry
6. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.RuntimeMetadataComesFromTheSameAuthorizedEffectivePage
7. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.RuntimeRendererGrammarMatchesAuthoritativePageValidator
8. BuildWithHQ.TenantRuntime.Tests.PagePublicationContractTests.TenantRevisionSaveCannotPublishInvalidPresentationJson
9. BuildWithHQ.TenantRuntime.Tests.TenantActiveWorkplaceLiveDatabaseTests.LiveActiveWorkplaceRejectsGoClawWithoutIndependentAiRead
10. BuildWithHQ.TenantRuntime.Tests.TenantActiveWorkplaceLiveDatabaseTests.LiveActiveWorkplaceSecuresGraphParticipantsPulseInboxAndPlayback
11. BuildWithHQ.TenantRuntime.Tests.TenantActiveWorkplaceServiceTests.ControllerAndMigrationEnforceSecurityAndReadOnlyPlayback
12. BuildWithHQ.TenantRuntime.Tests.TenantActiveWorkplaceServiceTests.CreateAndReadUseServerScopeAndReviewedProcedures
13. BuildWithHQ.TenantRuntime.Tests.TenantActiveWorkplaceServiceTests.ParticipantsActivityAndPlaybackStayInsideContracts
14. BuildWithHQ.TenantRuntime.Tests.TenantAssetsServiceTests.ActiveContentAndTraversalNamesFailBeforeStorageOrDatabase
15. BuildWithHQ.TenantRuntime.Tests.TenantAssetsServiceTests.ControllerAndMigrationEnforceSecuredAccountAssets
16. BuildWithHQ.TenantRuntime.Tests.TenantAssetsServiceTests.FailedRegistrationCompensatesStoredContent
17. BuildWithHQ.TenantRuntime.Tests.TenantAssetsServiceTests.ListUploadContentAndDeleteUseOnlyVerifiedTenantScope
18. BuildWithHQ.TenantRuntime.Tests.TenantCalendarLiveDatabaseTests.LiveGoldenCalendarRejectsCreateWithoutCanCreateAndLeavesNoRecord
19. BuildWithHQ.TenantRuntime.Tests.TenantCalendarLiveDatabaseTests.LiveGoldenCalendarRespectsSecurityPrivacyAndUniversalRecords
20. BuildWithHQ.TenantRuntime.Tests.TenantCalendarServiceTests.ControllerIsAuthenticatedAndAcceptsNoCallerControlledScope
21. BuildWithHQ.TenantRuntime.Tests.TenantCalendarServiceTests.CreateAndUpdateUseTypedDynamicFieldsAndConcurrencyFence
22. BuildWithHQ.TenantRuntime.Tests.TenantCalendarServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
23. BuildWithHQ.TenantRuntime.Tests.TenantCalendarServiceTests.FavoriteUsesUniversalRecordIdentityAndServerScope
24. BuildWithHQ.TenantRuntime.Tests.TenantCalendarServiceTests.InvalidWritesFailBeforeDatabaseWithRequestCorrelation
25. BuildWithHQ.TenantRuntime.Tests.TenantCalendarServiceTests.ListUsesOnlyServerDerivedScopeAndParsesUniversalRecords
26. BuildWithHQ.TenantRuntime.Tests.TenantCalendarServiceTests.MigrationEnforcesSaasRoleLocationPrivacyDynamicAndUniversalRecordContracts
27. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsLiveDatabaseTests.LiveGoldenChatRoomsRejectsPostingWithoutMembershipAndLeavesNoMessage
28. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsLiveDatabaseTests.LiveGoldenChatRoomsRejectsWrongLocalSaasIdentity
29. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsLiveDatabaseTests.LiveGoldenChatRoomsRespectsSaasRoleLocationMembershipAndUniversalRecords
30. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsServiceTests.CollaborationActionsUseRecordTargetsAndServerIdentity
31. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsServiceTests.ControllerAndMigrationKeepAuthorizationOnServer
32. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
33. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsServiceTests.InvalidMessagesAndReactionsFailBeforeDatabase
34. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsServiceTests.ListUsesOnlyServerDerivedScopeAndParsesMembershipState
35. BuildWithHQ.TenantRuntime.Tests.TenantChatRoomsServiceTests.RoomWritesUseDynamicFieldsAndOptimisticConcurrency
36. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsLiveDatabaseTests.LiveGoldenCompanyNewsRejectsCreateWithoutCanCreateAndLeavesNoRecord
37. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsLiveDatabaseTests.LiveGoldenCompanyNewsRespectsSaasRoleLocationPublishingAndUniversalRecords
38. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsServiceTests.ControllerAndMigrationKeepScopeOnTheServerAndUseUniversalFeatures
39. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsServiceTests.CreateAndUpdateUseTypedDynamicFieldsAndConcurrencyFence
40. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
41. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsServiceTests.FavoriteUsesUniversalRecordIdentityAndServerScope
42. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsServiceTests.InvalidWritesFailBeforeDatabaseWithRequestCorrelation
43. BuildWithHQ.TenantRuntime.Tests.TenantCompanyNewsServiceTests.ListUsesOnlyServerDerivedScopeAndParsesUniversalRecords
44. BuildWithHQ.TenantRuntime.Tests.TenantContactsLiveDatabaseTests.LiveGoldenContactsRespectSecurityAndUniversalRecordContracts
45. BuildWithHQ.TenantRuntime.Tests.TenantContactsServiceTests.ControllerIsAuthenticatedAndAcceptsNoCallerControlledScope
46. BuildWithHQ.TenantRuntime.Tests.TenantContactsServiceTests.CreateAndUpdateUseTypedDynamicFieldsAndConcurrencyFence
47. BuildWithHQ.TenantRuntime.Tests.TenantContactsServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
48. BuildWithHQ.TenantRuntime.Tests.TenantContactsServiceTests.FavoriteUsesUniversalRecordIdentityAndServerScope
49. BuildWithHQ.TenantRuntime.Tests.TenantContactsServiceTests.InvalidWritesFailBeforeDatabaseWithRequestCorrelation
50. BuildWithHQ.TenantRuntime.Tests.TenantContactsServiceTests.ListUsesOnlyServerDerivedScopeAndParsesUniversalRecords
51. BuildWithHQ.TenantRuntime.Tests.TenantContactsServiceTests.MigrationEnforcesSaasRoleLocationDynamicAndUniversalRecordContracts
52. BuildWithHQ.TenantRuntime.Tests.TenantConversationsLiveDatabaseTests.LiveGoldenConversationsRejectReadOnlyReply
53. BuildWithHQ.TenantRuntime.Tests.TenantConversationsLiveDatabaseTests.LiveGoldenConversationsRespectSaasLocationRolesAndUniversalRecords
54. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.ControllerIsAuthenticatedAndAcceptsNoCallerScope
55. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.CreateUpdateReplyAndFavoriteUseReviewedContracts
56. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.DetailUsesUniversalRecordAndReadOnlyJsonContract
57. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
58. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.InvalidStatusAndMessageFailBeforeDatabaseWithCorrelation
59. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.ListUsesOnlyServerScopeAndParsesUniversalRecords
60. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.MalformedDatabaseJsonFailsClosedWithCorrelation
61. BuildWithHQ.TenantRuntime.Tests.TenantConversationsServiceTests.MigrationUsesNativePipelineAndSecuresUniversalScopeWithoutMutatingOnRead
62. BuildWithHQ.TenantRuntime.Tests.TenantDataBindingServiceTests.ControllerMapsMissingBindingToSafeCorrelatedResponse
63. BuildWithHQ.TenantRuntime.Tests.TenantDataBindingServiceTests.EndpointIsAuthenticatedReadOnlyAndAcceptsOnlyBindingKey
64. BuildWithHQ.TenantRuntime.Tests.TenantDataBindingServiceTests.ExecutesOnlyResolvedReviewedProcedureWithServerContext
65. BuildWithHQ.TenantRuntime.Tests.TenantDataBindingServiceTests.UnknownBindingAndHostMismatchFailClosed
66. BuildWithHQ.TenantRuntime.Tests.TenantDataBindingServiceTests.UnsafeOrUnscopedOperationFailsBeforeExecution
67. BuildWithHQ.TenantRuntime.Tests.TenantDataBindingServiceTests.UnsupportedConnectorAndOutputShapeFailClosed
68. BuildWithHQ.TenantRuntime.Tests.TenantDataChatServiceTests.ControllerIsAuthorizedTypedAndCannotAcceptDatabaseIdentity
69. BuildWithHQ.TenantRuntime.Tests.TenantDataChatServiceTests.ControllerReturnsSafe503WhenReviewedModelCapacityIsDeferred
70. BuildWithHQ.TenantRuntime.Tests.TenantDataChatServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantDatabaseRouting
71. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsLiveDatabaseTests.LiveGoldenDiscussionBoardsRejectsLockedTopicReplyAndLeavesNoPost
72. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsLiveDatabaseTests.LiveGoldenDiscussionBoardsRejectsWrongLocalSaasIdentity
73. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsLiveDatabaseTests.LiveGoldenDiscussionBoardsRespectsSaasRoleLocationAndUniversalRecords
74. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsServiceTests.BoardWritesUseDynamicFieldsAndOptimisticConcurrency
75. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsServiceTests.ControllerAndMigrationKeepAuthorizationOnServer
76. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
77. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsServiceTests.InvalidBodiesAndConcurrencyFailBeforeDatabase
78. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsServiceTests.ListUsesOnlyServerDerivedScopeAndParsesCounts
79. BuildWithHQ.TenantRuntime.Tests.TenantDiscussionBoardsServiceTests.TopicPostAndFavoriteActionsUseRecordTargets
80. BuildWithHQ.TenantRuntime.Tests.TenantDynamicModulesServiceTests.ControllerAndSqlKeepScopeServerSideAndCustomOnly
81. BuildWithHQ.TenantRuntime.Tests.TenantDynamicModulesServiceTests.CreateSerializesTypedFieldsAndCorrelation
82. BuildWithHQ.TenantRuntime.Tests.TenantDynamicModulesServiceTests.InvalidModuleKeyFailsBeforeDatabase
83. BuildWithHQ.TenantRuntime.Tests.TenantDynamicModulesServiceTests.ListUsesOnlyServerScopeAndConfiguredModuleKey
84. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesLiveDatabaseTests.LiveGoldenFavoritesRejectAnotherUsersFavorite
85. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesLiveDatabaseTests.LiveGoldenFavoritesRejectWrongLocalSaasIdentity
86. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesLiveDatabaseTests.LiveGoldenFavoritesRespectSaasUserRoleLocationAndUniversalRecords
87. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesServiceTests.ControllerAndMigrationKeepFavoriteOwnershipAndAuthorizationBoundaries
88. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
89. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesServiceTests.InvalidFiltersAndTargetsFailBeforeDatabase
90. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesServiceTests.ListUsesOnlyServerScopeAndParsesRecordFavorites
91. BuildWithHQ.TenantRuntime.Tests.TenantFavoritesServiceTests.MutationsUseUniversalRecordTargets
92. BuildWithHQ.TenantRuntime.Tests.TenantFilesLiveDatabaseTests.LiveGoldenFilesRejectCreateWithoutCanCreateAndLeaveNoRecord
93. BuildWithHQ.TenantRuntime.Tests.TenantFilesLiveDatabaseTests.LiveGoldenFilesRespectSecurityStorageAndUniversalRecords
94. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.ControllerIsAuthenticatedAndAcceptsNoCallerScopeOrStorageKey
95. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.DownloadResolvesStorageOnlyAfterSecuredDatabaseContract
96. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
97. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.FailedDatabaseRegistrationCompensatesStoredBytes
98. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.InvalidUploadFailsBeforeStorageOrDatabaseWithCorrelation
99. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.ListUsesOnlyServerDerivedScopeAndParsesUniversalRecords
100. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.LocalStorageRejectsTraversalAndRoundTripsScopedBytes
101. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.MigrationEnforcesSaasRoleLocationDynamicAttachmentsAndUniversalRecords
102. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.MutationsUseUniversalIdentityConcurrencyAndAttachmentContracts
103. BuildWithHQ.TenantRuntime.Tests.TenantFilesServiceTests.UploadStoresBytesThenUsesReviewedMetadataContract
104. BuildWithHQ.TenantRuntime.Tests.TenantFormsServiceTests.AFormNotPresentOnTheAuthorizedPageNeverSubmits
105. BuildWithHQ.TenantRuntime.Tests.TenantFormsServiceTests.ControllerIsAuthenticatedAndAcceptsNoCallerControlledIdentity
106. BuildWithHQ.TenantRuntime.Tests.TenantFormsServiceTests.InvalidOrUnknownValuesFailBeforeDatabaseMutation
107. BuildWithHQ.TenantRuntime.Tests.TenantFormsServiceTests.MigrationRegistersFirstClassFormAndOnlyGrantsTheSubmissionProcedure
108. BuildWithHQ.TenantRuntime.Tests.TenantFormsServiceTests.PublishedFormEventActionsAreValidatedAndForwardedWithoutAuthorityFields
109. BuildWithHQ.TenantRuntime.Tests.TenantFormsServiceTests.SubmissionReloadsAuthorizedPageAndUsesOnlyServerDerivedScope
110. BuildWithHQ.TenantRuntime.Tests.TenantGlobalSearchLiveDatabaseTests.LiveGoldenGlobalSearchRejectsWrongSaas
111. BuildWithHQ.TenantRuntime.Tests.TenantGlobalSearchLiveDatabaseTests.LiveGoldenGlobalSearchSecuresRecordsFieldsAndMetadata
112. BuildWithHQ.TenantRuntime.Tests.TenantGlobalSearchServiceTests.ControllerAndMigrationKeepGlobalSearchAuthorizationBoundaries
113. BuildWithHQ.TenantRuntime.Tests.TenantGlobalSearchServiceTests.FactoryRejectsHostTokenMismatch
114. BuildWithHQ.TenantRuntime.Tests.TenantGlobalSearchServiceTests.FavoriteUsesCanonicalRecordIdentity
115. BuildWithHQ.TenantRuntime.Tests.TenantGlobalSearchServiceTests.InvalidBoundsFailBeforeDatabase
116. BuildWithHQ.TenantRuntime.Tests.TenantGlobalSearchServiceTests.SearchUsesOnlyServerScopeAndParsesMatchedFields
117. BuildWithHQ.TenantRuntime.Tests.TenantGoClawApprovalsControllerTests.EndpointIsAuthenticatedAndHasNoCallerIdentityFields
118. BuildWithHQ.TenantRuntime.Tests.TenantGoClawApprovalsControllerTests.EndpointReturnsTypedBatchesAndDisablesCaching
119. BuildWithHQ.TenantRuntime.Tests.TenantGoClawApprovalsControllerTests.EndpointRoutesReviewerEditsAndRejectsWithoutCallerIdentity
120. BuildWithHQ.TenantRuntime.Tests.TenantGoClawApprovalsControllerTests.FactoryRoutesOnlyTheThreeApprovalContracts
121. BuildWithHQ.TenantRuntime.Tests.TenantGoClawApprovalsControllerTests.HostAndTokenMismatchFailsBeforeTenantDatabaseRouting
122. BuildWithHQ.TenantRuntime.Tests.TenantGoClawAuthorityControllerTests.ConfigureUsesHostScopedFactoryAndTypedPolicyService
123. BuildWithHQ.TenantRuntime.Tests.TenantInboundSmsServiceTests.ControllerIsAnonymousOnlyAtSignedWebhookAndMigrationReturnsNoSecret
124. BuildWithHQ.TenantRuntime.Tests.TenantInboundSmsServiceTests.DatabaseFailuresAreMappedToControllerSafeDependencyError
125. BuildWithHQ.TenantRuntime.Tests.TenantInboundSmsServiceTests.InvalidSignatureNeverInvokesCanonicalIngest
126. BuildWithHQ.TenantRuntime.Tests.TenantInboundSmsServiceTests.MissingSecretReferenceFailsClosedBeforeIngest
127. BuildWithHQ.TenantRuntime.Tests.TenantInboundSmsServiceTests.TwilioProtocolVectorAndConstantTimeInputContractMatch
128. BuildWithHQ.TenantRuntime.Tests.TenantInboundSmsServiceTests.ValidSignedMmsUsesOnlyReviewedContractsAndServerSaasApp
129. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesLiveDatabaseTests.LiveGoldenKnowledgeArticlesRejectCreateWithoutCanCreateAndLeaveNoRecord
130. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesLiveDatabaseTests.LiveGoldenKnowledgeArticlesRespectSaasRoleLocationPublishingAndUniversalRecords
131. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesServiceTests.ControllerAndMigrationKeepScopeOnTheServerAndUseUniversalFeatures
132. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesServiceTests.CreateAndUpdateUseTypedDynamicFieldsAndConcurrencyFence
133. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
134. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesServiceTests.FavoriteUsesUniversalRecordIdentityAndServerScope
135. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesServiceTests.InvalidWritesFailBeforeDatabaseWithRequestCorrelation
136. BuildWithHQ.TenantRuntime.Tests.TenantKnowledgeArticlesServiceTests.ListUsesOnlyServerDerivedScopeAndParsesUniversalRecords
137. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderLiveDatabaseTests.LiveGoldenMailReaderRejectsSharedReadMutationWithoutEditAndLeavesUnread
138. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderLiveDatabaseTests.LiveGoldenMailReaderRejectsWrongLocalSaasIdentity
139. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderLiveDatabaseTests.LiveGoldenMailReaderRespectsSaasRoleLocationOwnershipAndUniversalRecords
140. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderServiceTests.ControllerAndMigrationKeepMailAndAuthorizationBoundaries
141. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
142. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderServiceTests.InvalidFiltersAndTargetsFailBeforeDatabase
143. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderServiceTests.ListUsesOnlyServerScopeAndParsesAccounts
144. BuildWithHQ.TenantRuntime.Tests.TenantMailReaderServiceTests.ReadAndFavoriteMutationsUseRecordTargets
145. BuildWithHQ.TenantRuntime.Tests.TenantNotificationsServiceTests.ControllerAndMigrationKeepScopeServerSideAndSecureSourceRecords
146. BuildWithHQ.TenantRuntime.Tests.TenantNotificationsServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
147. BuildWithHQ.TenantRuntime.Tests.TenantNotificationsServiceTests.InvalidRequestsFailBeforeDatabaseWithRequestCorrelation
148. BuildWithHQ.TenantRuntime.Tests.TenantNotificationsServiceTests.ListUsesOnlyServerDerivedRecipientAndTenantScope
149. BuildWithHQ.TenantRuntime.Tests.TenantNotificationsServiceTests.StateAndSourceFavoriteUseNotificationIdentityInsideServerScope
150. BuildWithHQ.TenantRuntime.Tests.TenantPageAdoptionTests.ControllerAndGrantsExposeNoCallerControlledIdentity
151. BuildWithHQ.TenantRuntime.Tests.TenantPageAdoptionTests.DriftAndAdoptionUseScopedThreeWayEvidenceAndCurrentLease
152. BuildWithHQ.TenantRuntime.Tests.TenantPageAdoptionTests.DriftListUsesVerifiedAccountAndNeverMutatesPrivatePages
153. BuildWithHQ.TenantRuntime.Tests.TenantPageAdoptionTests.StaleEvidenceStopsBeforeLockOrMutation
154. BuildWithHQ.TenantRuntime.Tests.TenantPageAdoptionTests.UndoRequiresOwnerLeaseBeforeReviewedProcedure
155. BuildWithHQ.TenantRuntime.Tests.TenantPageEditLockTests.AcquireAndRenewForceServerDerivedForkLease
156. BuildWithHQ.TenantRuntime.Tests.TenantPageEditLockTests.ConflictingEditorIsDeniedWithoutExposingTheirIdentity
157. BuildWithHQ.TenantRuntime.Tests.TenantPageEditLockTests.ControllerIsAuthenticatedAndAcceptsNoLockScopeOrIdentity
158. BuildWithHQ.TenantRuntime.Tests.TenantPageEditLockTests.MigrationMakesFirstForkLeaseAtomicAndSaveEnforcesIt
159. BuildWithHQ.TenantRuntime.Tests.TenantPageEditLockTests.ReleaseCanOnlyTargetTheCurrentUsersForkLock
160. BuildWithHQ.TenantRuntime.Tests.TenantPageRevisionsServiceTests.ControllerRequiresAuthenticationAndAcceptsNoScopeIdentifiers
161. BuildWithHQ.TenantRuntime.Tests.TenantPageRevisionsServiceTests.HistoryAndSnapshotUseOnlyServerDerivedTenantScope
162. BuildWithHQ.TenantRuntime.Tests.TenantPageRevisionsServiceTests.InvalidHistoricalJsonCannotBecomeTheLiveTenantPage
163. BuildWithHQ.TenantRuntime.Tests.TenantPageRevisionsServiceTests.RestoreAuthorizesSnapshotBeforeMutationAndChecksReturnedScope
164. BuildWithHQ.TenantRuntime.Tests.TenantPageRevisionsServiceTests.RuntimeRoleMigrationGrantsOnlyReviewedRevisionProcedures
165. BuildWithHQ.TenantRuntime.Tests.TenantPageRevisionsServiceTests.SaveKeepsIdentityAndDatabaseRoutingOffTheClientContract
166. BuildWithHQ.TenantRuntime.Tests.TenantPageRevisionsServiceTests.UnknownSnapshotNeverReachesPreviewOrRestoreProcedure
167. BuildWithHQ.TenantRuntime.Tests.TenantPageRouteServiceTests.AnonymousContextAndInvalidSlugCannotReachEitherDatabase
168. BuildWithHQ.TenantRuntime.Tests.TenantPageRouteServiceTests.CanonicalBootstrapAuthorizationAndJsonFailuresCannotEscapeTheRoute
169. BuildWithHQ.TenantRuntime.Tests.TenantPageRouteServiceTests.MissingOrMalformedSlugResultFailsClosed
170. BuildWithHQ.TenantRuntime.Tests.TenantPageRouteServiceTests.ResolvesOnlyPageKeyThenLoadsAuthorizedCanonicalBootstrap
171. BuildWithHQ.TenantRuntime.Tests.TenantPageRouteServiceTests.RouteEndpointIsAuthenticatedReadOnlyAndReturnsSafeErrors
172. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.AnonymousOrBuilderContextCannotReachEitherDatabase
173. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.BootstrapMetadataCannotSubstituteCallerIdentity
174. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.ControllerAuditsAuthorizedBootstrapBeforeReturningIt
175. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.ControllerMapsMissingPageToSafeCorrelatedResponse
176. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.EndpointIsAuthenticatedReadOnlyAndHasNoCallerScopeFields
177. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.HostAndTokenAppMismatchFailsClosedBeforeTenantRouting
178. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.InvalidComponentManifestCannotBecomeClientRuntimeState
179. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.InvalidRuntimePresentationPayloadFailsClosed
180. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.LoadsCanonicalBootstrapWithOnlyServerDerivedTenantScope
181. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.MalformedShellCannotBecomeClientRuntimeState
182. BuildWithHQ.TenantRuntime.Tests.TenantPageServiceTests.TenantJwtGateRejectsWrongPlaneAndAmbiguousIdentity
183. BuildWithHQ.TenantRuntime.Tests.TenantPaymentsServiceTests.ChargeUsesOnlyServerScopeAndReviewedProcedure
184. BuildWithHQ.TenantRuntime.Tests.TenantPaymentsServiceTests.ControllerAndMigrationPreserveTenantProcedureBoundary
185. BuildWithHQ.TenantRuntime.Tests.TenantPaymentsServiceTests.InvalidPolicyAndRawCardShapesFailBeforeDatabaseAccess
186. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityLiveDatabaseTests.LiveGoldenRecordActivityRejectsWrongSaas
187. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityLiveDatabaseTests.LiveGoldenRecordActivityRequiresAiReadPermission
188. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityLiveDatabaseTests.LiveGoldenRecordActivitySecuresTimelineHistoryAndMetadata
189. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityServiceTests.ControllerAndMigrationKeepActivityAuthorizationBoundaries
190. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityServiceTests.FactoryRejectsHostTokenMismatch
191. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityServiceTests.FavoriteUsesCanonicalRecordIdentity
192. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityServiceTests.InvalidBoundsFailBeforeDatabase
193. BuildWithHQ.TenantRuntime.Tests.TenantRecordActivityServiceTests.SearchAndActivityUseOnlyServerScope
194. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphLiveDatabaseTests.LiveGoldenRecordGraphRejectsReadOnlyMutation
195. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphLiveDatabaseTests.LiveGoldenRecordGraphRejectsWrongSaas
196. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphLiveDatabaseTests.LiveGoldenRecordGraphSecuresTraversalMetadataAndMutations
197. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphServiceTests.ControllerAndMigrationKeepGraphAuthorizationBoundaries
198. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphServiceTests.FactoryRejectsHostTokenMismatch
199. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphServiceTests.InvalidBoundsFailBeforeDatabase
200. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphServiceTests.MutationsUseRecordAndRelationTargets
201. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphServiceTests.RelatedKnowledgeUsesIndependentScopeAiFenceAndBounds
202. BuildWithHQ.TenantRuntime.Tests.TenantRecordGraphServiceTests.SearchAndGraphUseOnlyServerScope
203. BuildWithHQ.TenantRuntime.Tests.TenantReservationsServiceTests.ControllerAndMigrationKeepTheProcedureOnlyBoundary
204. BuildWithHQ.TenantRuntime.Tests.TenantReservationsServiceTests.InvalidInputsFailBeforeDatabaseAccess
205. BuildWithHQ.TenantRuntime.Tests.TenantReservationsServiceTests.PurchaseUsesServerIdentityAndIdempotentChargeContract
206. BuildWithHQ.TenantRuntime.Tests.TenantUniversalInboxControllerTests.BadgeEndpointReturnsTypedPayloadAndDisablesCaching
207. BuildWithHQ.TenantRuntime.Tests.TenantUniversalInboxControllerTests.EndpointsAreAuthenticatedAndHaveNoCallerIdentityFields
208. BuildWithHQ.TenantRuntime.Tests.TenantUniversalInboxControllerTests.HostAndTokenMismatchFailsBeforeTenantDatabaseRouting
209. BuildWithHQ.TenantRuntime.Tests.TenantUniversalInboxControllerTests.HumanStateEndpointUsesRouteIdentityAndReturnsNoContent
210. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksLiveDatabaseTests.LiveGoldenWebLinksRejectsCreateWithoutCanCreateAndLeavesNoRecord
211. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksLiveDatabaseTests.LiveGoldenWebLinksRespectsSaasRoleLocationAndUniversalRecords
212. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksServiceTests.ControllerAndMigrationKeepScopeOnServerAndUseUniversalFeatures
213. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksServiceTests.CreateAndUpdateUseSafeUrlsTypedFieldsAndConcurrencyFence
214. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksServiceTests.FactoryRejectsHostTokenMismatchBeforeTenantRouting
215. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksServiceTests.FavoriteUsesUniversalRecordIdentityAndServerScope
216. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksServiceTests.ListUsesOnlyServerDerivedScopeAndParsesUniversalRecords
217. BuildWithHQ.TenantRuntime.Tests.TenantWebLinksServiceTests.UnsafeUrlsFailBeforeDatabaseWithRequestCorrelation
218. BuildWithHQ.TenantRuntime.Tests.TenantWorkOrdersLiveDatabaseTests.LiveGoldenWorkOrdersRespectLifecycleAssignmentAndSecurityContracts
219. BuildWithHQ.TenantRuntime.Tests.TenantWorkOrdersServiceTests.AssignmentPreservesConcurrencyAndServerScope
220. BuildWithHQ.TenantRuntime.Tests.TenantWorkOrdersServiceTests.ControllerAndMigrationEnforceFirstClassSecurityContract
221. BuildWithHQ.TenantRuntime.Tests.TenantWorkOrdersServiceTests.InvalidLifecycleInputsFailBeforeDatabaseAccess
222. BuildWithHQ.TenantRuntime.Tests.TenantWorkOrdersServiceTests.ListUsesOnlyReviewedServerScopedContract
223. BuildWithHQ.TenantRuntime.Tests.TenantWorkflowApprovalsControllerTests.EndpointIsAuthenticatedAndExposesNoCallerIdentityParameters
224. BuildWithHQ.TenantRuntime.Tests.TenantWorkflowApprovalsControllerTests.EndpointRoutesOnlyInboxFenceDecisionAndReason
225. BuildWithHQ.TenantRuntime.Tests.TenantWorkflowApprovalsControllerTests.PermissionFailureMapsToForbiddenWithoutLeakingDetails

**Universal Inbox and Support Tickets — 43 passed**
1. BuildWithHQ.UniversalInbox.Tests.ConversationChannelAdapterTests.InvalidOrUnstableEventFailsBeforeDatabaseExecution
2. BuildWithHQ.UniversalInbox.Tests.ConversationChannelAdapterTests.StableProviderIdentityAndServerTenantScopeReachCanonicalIngest
3. BuildWithHQ.UniversalInbox.Tests.ConversationChannelAdapterTests.TenantUserCannotCrossTrustedWebChatBoundary
4. BuildWithHQ.UniversalInbox.Tests.ExternalEventInboxAdapterTests.NullEventFailsBeforeCallingWriter
5. BuildWithHQ.UniversalInbox.Tests.ExternalEventInboxAdapterTests.PublishMapsStableExternalIdentityAndCanonicalSource
6. BuildWithHQ.UniversalInbox.Tests.ExternalEventInboxAdapterTests.RetryKeepsTheSameDedupeAnchor
7. BuildWithHQ.UniversalInbox.Tests.InboxRoutingPolicyContractTests.DeploymentMigrationContainsValidatorEvaluatorFenceAndAudit
8. BuildWithHQ.UniversalInbox.Tests.InboxRoutingPolicyContractTests.VersionOneSchemasAreClosedBoundedAndMatchSqlPolicyKeys
9. BuildWithHQ.UniversalInbox.Tests.InboxRoutingServiceTests.InvalidTargetAndEventFailBeforeDatabaseExecution
10. BuildWithHQ.UniversalInbox.Tests.InboxRoutingServiceTests.TenantUserCannotInvokeTrustedRoutingBoundary
11. BuildWithHQ.UniversalInbox.Tests.InboxRoutingServiceTests.TrustedServiceUsesServerAccountScopeAndBoundedEvent
12. BuildWithHQ.UniversalInbox.Tests.UniversalInboxLiveDatabaseTests.LiveGoldenGoClawInboxLifecycleIsIsolated
13. BuildWithHQ.UniversalInbox.Tests.UniversalInboxLiveDatabaseTests.LiveGoldenInboxSecurityRoutingAndFreshnessAreIsolated
14. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.BadgeIncludesUnreadApprovalHumanAndGoClawWorkingCounts
15. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.BadgeNormalizesSqlOmittedZeroAggregates
16. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.DeliveryDebugUsesServerScopeAndParsesSafeRetryState
17. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.DetailRejectsIdentityThatDoesNotMatchServerScope
18. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.DetailReturnsSourcePointerWithoutReplacingSourceDocument
19. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.IngestionWithoutStableDedupeAnchorFailsBeforeDatabaseExecution
20. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.InvalidNotificationLimitFailsBeforeDatabaseExecution
21. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.InvalidStatusFailsBeforeDatabaseExecution
22. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.NotificationsUseSecuredScopeAndInboxItemIdentity
23. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.QueueFailsClosedWhenProcedureShapeDrifts
24. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.QueueUsesOnlyServerDerivedScopeAndParsesTypedItems
25. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.ReadAndStatusMutationsUseVerifiedUserIdentity
26. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.TenantUserCannotInvokeTrustedIngestionBoundary
27. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.TicketingSettingsUseVerifiedScopeAndNormalizePrefix
28. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.TrustedIngestionPassesStableDedupeKeyAndServerAppAccount
29. BuildWithHQ.UniversalInbox.Tests.UniversalInboxServiceTests.UnrevalidatedTenantScopeFailsBeforeDatabaseExecution
30. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.BadgeAndNotificationsCountOnlySecuredInboxItems
31. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.CreateOrTouchIsConcurrencySafeAndDatabaseUnique
32. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.CurrentRecordSecurityAggregatesMultipleRoleEntitlements
33. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.CurrentSuggestionBatchPointerUsesTheFullNullableScopeFence
34. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.DeliveryOperationsUseRecordEnvelopeEditPermissionAndLeaseFence
35. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.DirectAndWebChatAdaptersKeepCanonicalDedupeAndParticipantSecurity
36. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.EmptyRoutingAuditJsonMigrationIsTargetGuardedAndIdempotent
37. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.GoClawLifecycleFixtureRequiresHumanDecisionAndPreservesLineage
38. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.HumanInboxOperationsReapplyCurrentRecordSecurity
39. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.InboundEmailAndSmsEnterGoClawOnlyThroughUniversalInbox
40. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.InboxRemainsPointerWhileConversationStaysCanonical
41. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.IntegrationContractsKeepSlaRoutingAndStaleWorkOnThePointer
42. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.RichRoutingIsDeterministicScopedFencedAndAudited
43. BuildWithHQ.UniversalInbox.Tests.UniversalInboxSqlContractTests.RoutingRuleActivationValidatesVersionedJsonBeforeWrite

**AI and secured retrieval — 162 passed**
1. BuildWithHQ.Ai.Tests.AiAnswerEndpointClientTests.HttpFailureOrMalformedEnvelopeFailsWithoutLeakingBody
2. BuildWithHQ.Ai.Tests.AiAnswerEndpointClientTests.SendsDeterministicJsonModeRequestAndParsesOneChoice
3. BuildWithHQ.Ai.Tests.AiApiRuntimeContextTests.RejectsDeniedCrossTenantAndCorrelationMismatchedContracts
4. BuildWithHQ.Ai.Tests.AiApiRuntimeContextTests.ResolvesOnlyTheAuthenticatedRuntimePrincipalAndSearchScope
5. BuildWithHQ.Ai.Tests.AiApiRuntimeContextTests.StatusAndEmptySearchDoNotCallEmbeddingOrRetrievalDependencies
6. BuildWithHQ.Ai.Tests.AiApiSqlContractTests.MigrationAndCurrentExportPreserveTheServerDerivedAiBoundary
7. BuildWithHQ.Ai.Tests.AiArchiveDeleteSynchronizationLiveDatabaseTests.LiveGoldenRetirementArchivesVectorsAndRemovesEvidence
8. BuildWithHQ.Ai.Tests.AiArchiveDeleteSynchronizationSqlContractTests.MigrationArchivesCanonicalVectorsAndRemovesRetrievalEvidence
9. BuildWithHQ.Ai.Tests.AiArchiveDeleteSynchronizationSqlContractTests.WorkerPurgesArtifactsOnlyAfterReviewedDatabaseReceipt
10. BuildWithHQ.Ai.Tests.AiChunkingLiveDatabaseTests.LiveGoldenChunkingIsStableAtomicCitedAndRolledBack
11. BuildWithHQ.Ai.Tests.AiChunkingSqlContractTests.MigrationReusesCanonicalChunksWithVersionAndCitationFences
12. BuildWithHQ.Ai.Tests.AiChunkingSqlContractTests.WorkerUsesReviewedContractsAndDoesNotSendTextToAnEmbeddingClient
13. BuildWithHQ.Ai.Tests.AiEmbedding1024LiveDatabaseTests.LiveGoldenEmbedding1024IsScopedNormalizedVisualAndRestartSafe
14. BuildWithHQ.Ai.Tests.AiEmbedding1024SqlContractTests.MigrationSecuresChunkAndExistingVisual1024Lanes
15. BuildWithHQ.Ai.Tests.AiEmbedding1024SqlContractTests.WorkerUsesReviewedDimensionSpecificContracts
16. BuildWithHQ.Ai.Tests.AiEmbedding1998SqlContractTests.CurrentSchemaAndWorkerUseExact1998Lane
17. BuildWithHQ.Ai.Tests.AiEmbedding1998SqlContractTests.MigrationKeeps1998StorageAndSecuresPreparationAndStore
18. BuildWithHQ.Ai.Tests.AiEmbedding256LiveDatabaseTests.LiveGoldenEmbedding256IsScopedNormalizedAndRestartSafe
19. BuildWithHQ.Ai.Tests.AiEmbedding256SqlContractTests.OrchestrationProfileDoesNotBindUnverifiedWorkers
20. BuildWithHQ.Ai.Tests.AiEmbedding256SqlContractTests.TenantMigrationUsesCanonicalTablesAndStrictVectorFences
21. BuildWithHQ.Ai.Tests.AiEmbedding256SqlContractTests.WorkerAcceptsOnlyScopedNormalized256DJobs
22. BuildWithHQ.Ai.Tests.AiEndpointRoutingLiveDatabaseTests.LiveGoldenEndpointRegistryIsIdempotentHealthyAndCapabilityRouted
23. BuildWithHQ.Ai.Tests.AiEndpointRoutingSqlContractTests.MigrationRegistersAndRoutesOnlyFreshCapabilityModelMatches
24. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.AiReadDenialStopsBeforeContextOrEndpoint
25. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.AuthorizationChangeDuringHarnessResolutionStopsBeforeRouting
26. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.AuthorizationChangeDuringModelCallRejectsAnswer
27. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.EmptyContextReturnsSafeAnswerWithoutCallingModel
28. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.GeneratesGroundedAnswerAndServerBuiltRecordLink
29. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.HallucinatedDuplicateOrMissingCitationsFailClosed
30. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.PublicAnswerApisAcceptNoCallerIdentityContextOrLinks
31. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.SuccessfulAnswerFailsClosedWhenEvidenceAppendFails
32. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.TenantHarnessOverrideChangesProductionPromptAndGenerationProfile
33. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.TenantHarnessOverrideObservablyChangesProductionAnswerStyle
34. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.TwoStageGenerationUsesTwoStageContextPath
35. BuildWithHQ.Ai.Tests.AiGroundedAnswerServiceTests.UnsafeOrUnapprovedEndpointStopsBeforeEvidenceLeavesService
36. BuildWithHQ.Ai.Tests.AiHarnessContextTests.CurrentSqlAndProductionPathRetainSecuredFourLayerPrecedence
37. BuildWithHQ.Ai.Tests.AiHarnessContextTests.GoldenPromptIsByteExactAndEmptyHarnessPreservesBaseline
38. BuildWithHQ.Ai.Tests.AiHarnessContextTests.ResolverDerivesScopeAndConsumesRankedFourLayerContract
39. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.AiReadDenialStopsBeforeRoutingOrEndpointUse
40. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.InvalidEndpointVectorsFailClosed
41. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.NativeVectorUsesExactRoutingProfileAndNormalizesEveryStorageLane
42. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.OpenAiAdapterSendsIndexedTextProfileAndParsesOneStrictVector
43. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.PublicQueryApiAcceptsNoCallerTenantAuthorizationOrEvidenceScope
44. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.RequestedSizeVectorMustAlreadyBeNormalizedAndIsNotRenormalized
45. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.UnsafeOrUncorrelatedRoutingStopsBeforeEndpointUse
46. BuildWithHQ.Ai.Tests.AiLiveQueryEmbeddingServiceTests.WrongModelResponseFailsClosed
47. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.AggregateAiDenialStopsBeforeDataLoadOrPromptConstruction
48. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.BuildsContextFromNormallyAndAiReadableRecords
49. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.CrossTenantSourceResultFailsBeforePromptConstruction
50. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.ForwardedAiSnapshotCannotAuthorizeModelContext
51. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.NormalReadPermissionDoesNotSubstituteForAiReadGrant
52. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.OrdinaryReadableButAiExcludedRecordNeverReachesRenderer
53. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.PublicContextApisAcceptNoCallerTenantScope
54. BuildWithHQ.Ai.Tests.AiModelContextAuthorizationTests.UnrequestedSourceRecordFailsBeforePromptConstruction
55. BuildWithHQ.Ai.Tests.AiMrlNormalizationContractTests.NativeFallbackMatchesSharedCrossRuntimeGoldenForEveryLane
56. BuildWithHQ.Ai.Tests.AiMrlNormalizationContractTests.RequestedSizeNonNormalizedOutputFailsInsteadOfBeingFixed
57. BuildWithHQ.Ai.Tests.AiMrlNormalizationContractTests.RequestedSizeOutputIsValidatedAndPreservedForEveryLane
58. BuildWithHQ.Ai.Tests.AiMultimodalRagEndToEndTests.AiReadDenialStopsEntireComposedPathBeforeVisualOrRouting
59. BuildWithHQ.Ai.Tests.AiMultimodalRagEndToEndTests.AuthorizedChartFlowsThroughRerankContextAnswerAndAuditWithExactCitation
60. BuildWithHQ.Ai.Tests.AiMultimodalRerankerServiceTests.AiReadDenialStopsBeforeRetrievalVisualRoutingOrModel
61. BuildWithHQ.Ai.Tests.AiMultimodalRerankerServiceTests.AuthorizationChangeOrInvalidScoreResponseFailsClosed
62. BuildWithHQ.Ai.Tests.AiMultimodalRerankerServiceTests.AuthorizedMixedEvidencePreservesCitationsAndSupportsConfigured8BProfile
63. BuildWithHQ.Ai.Tests.AiMultimodalRerankerServiceTests.CrossTenantOrMismatchedVisualEvidenceNeverReachesModel
64. BuildWithHQ.Ai.Tests.AiMultimodalRerankerServiceTests.PublicApiAcceptsNoCallerIdentityCandidateOrEvidenceScope
65. BuildWithHQ.Ai.Tests.AiMultimodalRerankerServiceTests.VllmAdapterSendsAuthorizedBytesAsDataUrlWithoutStorageAddress
66. BuildWithHQ.Ai.Tests.AiMultimodalRerankerSqlContractTests.CurrentResolverRequiresCapabilityHealthLaneAndExactModel
67. BuildWithHQ.Ai.Tests.AiMultimodalRerankerSqlContractTests.MigrationRegistersDefaultWithoutBindingAContainerOrWorker
68. BuildWithHQ.Ai.Tests.AiOperationsDashboardServiceTests.AuthorizedOperatorReceivesBoundedOperationalSnapshot
69. BuildWithHQ.Ai.Tests.AiOperationsDashboardServiceTests.InvalidWindowAndMalformedDatabaseShapeFailClosed
70. BuildWithHQ.Ai.Tests.AiOperationsDashboardServiceTests.PublicApiAcceptsNoTenantOrDatabaseIdentity
71. BuildWithHQ.Ai.Tests.AiOperationsDashboardServiceTests.UnauthorizedIdentityStopsBeforeDatabase
72. BuildWithHQ.Ai.Tests.AiOperationsDashboardSqlContractTests.DashboardReadersReturnOnlyAggregatedOperationalState
73. BuildWithHQ.Ai.Tests.AiOperationsJobServiceTests.AuthorizationAndInputValidationStopBeforeDatabase
74. BuildWithHQ.Ai.Tests.AiOperationsJobServiceTests.MalformedDatabaseIdentityFailsClosed
75. BuildWithHQ.Ai.Tests.AiOperationsJobServiceTests.OperatorCanListBoundedRedactedJobs
76. BuildWithHQ.Ai.Tests.AiOperationsJobServiceTests.RetryUsesExactObservedFenceAndServerCorrelation
77. BuildWithHQ.Ai.Tests.AiOperationsJobSqlContractTests.MigrationPreservesFencesRedactionAndLeastPrivilege
78. BuildWithHQ.Ai.Tests.AiQueryEvidenceLiveDatabaseTests.LiveGoldenEvidenceAppendIsCompleteIdempotentHashedAndRolledBack
79. BuildWithHQ.Ai.Tests.AiQueryEvidenceLoggerTests.AppendTargetsLogsPlaneAndSerializesScopeRouteCitationsAndTokens
80. BuildWithHQ.Ai.Tests.AiQueryEvidenceLoggerTests.AuthorizationChangeStopsBeforeLogsPlane
81. BuildWithHQ.Ai.Tests.AiQueryEvidenceLoggerTests.EvidenceConstructionIsNotCallerAccessible
82. BuildWithHQ.Ai.Tests.AiQueryEvidenceLoggerTests.MissingLogIdFailsClosed
83. BuildWithHQ.Ai.Tests.AiQueryEvidenceSqlContractTests.CurrentLogsExportContainsTheCanonicalEvidenceContract
84. BuildWithHQ.Ai.Tests.AiQueryEvidenceSqlContractTests.LoggerUsesOnlyTheGeneratedLogsPlaneProcedureContract
85. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.AiReadDenialStopsBeforeRetrieval
86. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.BuildsDeterministicBoundedEnvelopeWithSecurityAndFullCitation
87. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.ChangedAuthorizationSnapshotStopsAfterRetrieval
88. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.CrossTenantCandidateFailsAtFinalPromptBoundary
89. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.ExcessVisualCitationSetFailsClosed
90. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.HardContextLimitDropsOnlyWholeTrailingEvidenceItems
91. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.LongChunkIsSafelyTruncatedWithoutDroppingCitation
92. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.PublicRagApisAcceptNoCallerIdentityScopeOrRawCandidates
93. BuildWithHQ.Ai.Tests.AiRagContextBuilderTests.TwoStageContextUsesFixedAuthorizedPoolAndPreservesBothScores
94. BuildWithHQ.Ai.Tests.AiRebuildOperationsServiceTests.InvalidSourceShapeStopsBeforeDatabaseCall
95. BuildWithHQ.Ai.Tests.AiRebuildOperationsServiceTests.NonOwnerCannotQueueOrReadRebuilds
96. BuildWithHQ.Ai.Tests.AiRebuildOperationsServiceTests.OwnerQueuesSourceReembedFromTrustedScope
97. BuildWithHQ.Ai.Tests.AiRebuildOperationsServiceTests.PublicApiAcceptsNoCallerAuthorizationOrModelIdentity
98. BuildWithHQ.Ai.Tests.AiRebuildOperationsServiceTests.StatusIsReadOnlyWithinTrustedTenant
99. BuildWithHQ.Ai.Tests.AiRebuildOperationsSqlContractTests.RebuildMigrationUsesCanonicalEvidenceAndDurableHistoricalDedupe
100. BuildWithHQ.Ai.Tests.AiRebuildOperationsSqlContractTests.WorkerUsesReviewedLeaseProceduresWithoutAdHocDml
101. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrieval1998SqlContractTests.CurrentExportAndServiceExposeTheReviewed1998Contract
102. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrieval1998SqlContractTests.Legacy1998ProcedureRemainsNamedBecauseTheLoggedSearchCallsIt
103. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrieval1998SqlContractTests.MigrationUsesOnlyCanonicalStrict1998RetrievalGraph
104. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalLiveDatabaseTests.LiveGolden1998CandidateRetrievalIsFailClosedReadOnlyAndCitationStable
105. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalLiveDatabaseTests.LiveGoldenCandidateRetrievalIsFailClosedReadOnlyAndCitationStable
106. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.AiReadDenialStopsBeforeScopeOrDatabase
107. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.AuthorizedCandidatePreservesStableTextElementAndVisualCitation
108. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.CrossTenantScopeStopsBeforeDatabase
109. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.HighResolutionPathRejectsWrongProfileOrAiDenialBeforeScopeAndDatabase
110. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.HighResolutionPathUsesExact1998ProfileAndPreservesCitation
111. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.MalformedOrDuplicatedCitationEvidenceFailsClosed
112. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.PublicRetrievalApisAcceptNoCallerTenantOrAuthorizationScope
113. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.RetrievalRequiresCanonical1024QueryProfile
114. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.ScopeRejectsEmptyOrAmbiguousAuthorizationSets
115. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalServiceTests.WidenedDatabaseRowsFailClosedBeforeBecomingCandidates
116. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalSqlContractTests.MigrationFiltersBeforeVectorOrderingAndRevalidatesCitationGraph
117. BuildWithHQ.Ai.Tests.AiSecuredCandidateRetrievalSqlContractTests.ServiceCallsOnlyTheReviewedSecuredProcedure
118. BuildWithHQ.Ai.Tests.AiSourceChangeSchedulerLiveDatabaseTests.LiveGoldenChangeSchedulingIsDeterministicScopedAndRolledBack
119. BuildWithHQ.Ai.Tests.AiSourceChangeSchedulerServiceTests.AiReadDenialStopsBeforeScheduling
120. BuildWithHQ.Ai.Tests.AiSourceChangeSchedulerServiceTests.PublicSchedulerApiAcceptsNoCallerTenantOrAuthorizationScope
121. BuildWithHQ.Ai.Tests.AiSourceChangeSchedulerServiceTests.RejectsInvalidBatchSizeBeforeScheduling
122. BuildWithHQ.Ai.Tests.AiSourceChangeSchedulerServiceTests.SchedulesOnlyTheTrustedCurrentTenantAndReturnsCounts
123. BuildWithHQ.Ai.Tests.AiSourceChangeSchedulerSqlContractTests.MigrationUsesExistingCanonicalChainAndHistoricalVersionDedupe
124. BuildWithHQ.Ai.Tests.AiSourceChangeSchedulerSqlContractTests.ProductionWorkerCallsReviewedProceduresWithoutAdHocDml
125. BuildWithHQ.Ai.Tests.AiSourceRegistrationLiveDatabaseTests.LiveGoldenSourceRegistrationIsIdempotentSecuredAndRolledBack
126. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.AggregateAiDenialStopsBeforeSourceLoadAndDatabaseCall
127. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.ChangedAuthoritativeFingerprintProducesChangedHash
128. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.CitationMetadataPreservesProviderPageAndStableSourceIdentity
129. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.CrossTenantOrWidenedSourceStopsBeforeDatabaseRegistration
130. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.PublicRegistrationApisAcceptNoCallerTenantOrAuthorizationScope
131. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.RecordOrAiReadDenialStopsBeforeDatabaseRegistration
132. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.RegistersEveryCanonicalSourceKindThroughExistingProcedure
133. BuildWithHQ.Ai.Tests.AiSourceRegistrationServiceTests.StableRetryKeepsHashSourceAndCitationIdentity
134. BuildWithHQ.Ai.Tests.AiSourceRegistrationSqlContractTests.CurrentAiSchemaKeepsCanonicalMultimodalChainAndVectorDimensions
135. BuildWithHQ.Ai.Tests.AiSourceRegistrationSqlContractTests.MigrationUsesCanonicalBridgeAndSerializedNaturalIdentity
136. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalLiveDatabaseTests.LiveGoldenTwoStageRetrievalSecuresBeforeTopAndPrecisionOrders
137. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalServiceTests.AiReadDenialStopsTwoStageBeforeScopeAndDatabase
138. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalServiceTests.AuthorizedTwoStageRetrievalUsesCurrentScopeAndPreservesBothScores
139. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalServiceTests.KnowledgeAwareRetrievalCarriesExactRevisionAndSecuredPreferences
140. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalServiceTests.PublicTwoStageApiAcceptsNoCallerTenantOrAuthorizationPolicy
141. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalServiceTests.TwoStageDatabaseRowsAreRevalidatedAgainstCurrentScope
142. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalServiceTests.TwoStageRejectsWrongVectorPairOrCandidateBoundsBeforeAuthorization
143. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalSqlContractTests.MigrationSecuresStageOneBeforeTopAndPolicyGatesPrecisionOrdering
144. BuildWithHQ.Ai.Tests.AiTwoStageCandidateRetrievalSqlContractTests.ServiceUsesReviewedTwoStageProcedureWithoutCallerScopeOrAdHocSql
145. BuildWithHQ.Ai.Tests.CrmRecordCandidateSourceTests.CurrentAiDenialStopsBeforeDatabaseCall
146. BuildWithHQ.Ai.Tests.CrmRecordCandidateSourceTests.LoadsSanitizedRecordUsingOnlyCurrentServerScope
147. BuildWithHQ.Ai.Tests.CrmRecordCandidateSourceTests.RejectsCrossTenantDeniedOrMalformedDatabaseContracts
148. BuildWithHQ.Ai.Tests.CrmRecordCandidateSourceTests.RejectsNonRecordOrAliasedPrimaryIdentityBeforeDatabaseCall
149. BuildWithHQ.Ai.Tests.CrmRecordExtractionSqlContractTests.CurrentProcedureSecuresRecordBeforeProjectingFields
150. BuildWithHQ.Ai.Tests.CrmRecordExtractionSqlContractTests.MigrationIsAnIdempotentProcedureOnlyChange
151. BuildWithHQ.Ai.Tests.DataChatLiveDatabaseTests.LiveGoldenDataChatUsesCustomFieldsGlossaryAndRevalidatesStoredRecordIds
152. BuildWithHQ.Ai.Tests.DataChatServiceTests.AiReadDenialStopsBeforeSessionOrPlanner
153. BuildWithHQ.Ai.Tests.DataChatServiceTests.ExistingSessionPassesOnlyLiveRevalidatedRecordIdsToPlanner
154. BuildWithHQ.Ai.Tests.DataChatServiceTests.GlossaryConfirmationValidatesThroughFixedSqlBeforePersistingCurrentContract
155. BuildWithHQ.Ai.Tests.DataChatServiceTests.PlannerRejectsUnknownCustomFieldInsteadOfWideningQuery
156. BuildWithHQ.Ai.Tests.DataChatServiceTests.PublicRequestCannotSupplyTenantOrDatabaseIdentity
157. BuildWithHQ.Ai.Tests.DataChatServiceTests.StructuredSemanticAndBlendedRoutesPersistCurrentEvidence
158. BuildWithHQ.Ai.Tests.DataChatSqlContractTests.CanonicalServiceUsesCurrentChatAndSecuredRagContracts
159. BuildWithHQ.Ai.Tests.DataChatSqlContractTests.MigrationUsesFixedSqlCurrentContractsAndFullSecurityEnvelope
160. BuildWithHQ.Ai.Tests.StoredProcedureDataChatStoreTests.GlossaryConfirmationUsesCurrentContractAndServerDerivedUser
161. BuildWithHQ.Ai.Tests.StoredProcedureDataChatStoreTests.SessionLoadRedactsAnswerAndRemovesRevokedRecordIds
162. BuildWithHQ.Ai.Tests.StoredProcedureDataChatStoreTests.StructuredExecutionUsesOnlyServerScopeAndReviewedPlanJson

**Workflows and governed actions — 34 passed**
1. BuildWithHQ.Workflow.Tests.ActionCancelUndoLiveDatabaseTests.CancelAndUndoAreSecuredFencedIdempotentAndRollbackOnly
2. BuildWithHQ.Workflow.Tests.ActionControlServiceTests.CancellationNormalizesReasonAndRequiresTerminalResult
3. BuildWithHQ.Workflow.Tests.ActionControlServiceTests.CapabilityLineageMismatchFailsClosed
4. BuildWithHQ.Workflow.Tests.ActionControlServiceTests.MissingCurrentAiReadScopeFailsBeforeDatabase
5. BuildWithHQ.Workflow.Tests.ActionControlServiceTests.UndoRequestUsesVerifiedServerIdentityAndStableRequestId
6. BuildWithHQ.Workflow.Tests.ActionControlSqlContractTests.MigrationGatesCapabilitiesAndUsesFencedDurableUndo
7. BuildWithHQ.Workflow.Tests.FormWorkflowBindingLiveDatabaseTests.FormDispatchIsRestartSafeAuthorizedAuditedAndRollbackOnly
8. BuildWithHQ.Workflow.Tests.FormWorkflowBindingServiceTests.MissingPermissionAndDynamicDispatchTextFailBeforeDatabase
9. BuildWithHQ.Workflow.Tests.FormWorkflowBindingServiceTests.UpsertUsesOnlyVerifiedIdentityAndStableBindingTargets
10. BuildWithHQ.Workflow.Tests.FormWorkflowBindingSqlContractTests.MigrationUsesServerBindingsDurableReceiptsAndAtomicWorkflowStart
11. BuildWithHQ.Workflow.Tests.WorkflowApprovalServiceTests.DecisionUsesOnlyInboxFenceAndVerifiedServerIdentity
12. BuildWithHQ.Workflow.Tests.WorkflowApprovalServiceTests.InvalidDecisionAndFenceFailBeforeDatabase
13. BuildWithHQ.Workflow.Tests.WorkflowApprovalServiceTests.MismatchedDecisionResultFailsClosed
14. BuildWithHQ.Workflow.Tests.WorkflowApprovalServiceTests.MissingPermissionAndForwardedIdentityFailBeforeDatabase
15. BuildWithHQ.Workflow.Tests.WorkflowApprovalSqlContractTests.MigrationUsesLeaseFencedParkingAndSecuredVersionedDecisions
16. BuildWithHQ.Workflow.Tests.WorkflowBranchConditionLiveDatabaseTests.BranchResolutionAndCompletionAreAuthorizedFencedAndRollbackOnly
17. BuildWithHQ.Workflow.Tests.WorkflowBranchConditionSqlContractTests.MigrationDerivesDurableBranchTransitionsFromFrozenConfiguration
18. BuildWithHQ.Workflow.Tests.WorkflowDesignerServiceTests.CreateUsesOnlyServerIdentityAndReturnsTypedGraph
19. BuildWithHQ.Workflow.Tests.WorkflowDesignerServiceTests.ForwardedOrUnverifiedSecurityCannotAuthorizeDesigner
20. BuildWithHQ.Workflow.Tests.WorkflowDesignerServiceTests.InvalidDatabaseShapeIsReturnedAsSafeContractFailure
21. BuildWithHQ.Workflow.Tests.WorkflowDesignerServiceTests.InvalidGraphFailsBeforeDatabaseExecution
22. BuildWithHQ.Workflow.Tests.WorkflowDesignerServiceTests.ManagePermissionAloneCannotPublish
23. BuildWithHQ.Workflow.Tests.WorkflowDesignerServiceTests.PublishCarriesRevisionFenceAndCurrentIdentity
24. BuildWithHQ.Workflow.Tests.WorkflowDesignerServiceTests.UserWithoutManagePermissionCannotReadOrMutate
25. BuildWithHQ.Workflow.Tests.WorkflowHumanApprovalLiveDatabaseTests.WorkflowApprovalsAreDurableSecuredAndAudited
26. BuildWithHQ.Workflow.Tests.WorkflowInternalServiceLiveDatabaseTests.CanonicalServiceStepPersistsAndInventedVariantIsRejected
27. BuildWithHQ.Workflow.Tests.WorkflowInternalServiceSqlContractTests.MigrationAddsOnlyTheCanonicalServiceStepToBothDatabaseValidators
28. BuildWithHQ.Workflow.Tests.WorkflowRemoteApiLiveDatabaseTests.ConnectorResolutionIsScopedAuthorizedAuditedAndRollbackOnly
29. BuildWithHQ.Workflow.Tests.WorkflowRemoteApiSqlContractTests.MigrationKeepsRemoteRoutingSecretsAndAuthorizationOnServer
30. BuildWithHQ.Workflow.Tests.WorkflowRunRequestServiceTests.DurableReplayReturnsOriginalRunAndInitialCorrelation
31. BuildWithHQ.Workflow.Tests.WorkflowRunRequestServiceTests.EmptyKeysAndMismatchedDatabaseLineageFailClosed
32. BuildWithHQ.Workflow.Tests.WorkflowRunRequestServiceTests.MissingPermissionOrUnverifiedIdentityFailsBeforeDatabase
33. BuildWithHQ.Workflow.Tests.WorkflowRunRequestServiceTests.StartUsesOpaqueRequestKeyAndOnlyVerifiedServerIdentity
34. BuildWithHQ.Workflow.Tests.WorkflowRunRequestSqlContractTests.MigrationUsesAccountScopedKeysAtomicSnapshotsAndServerAuthorization

**Knowledge Core — 12 passed**
1. BuildWithHQ.KnowledgeCore.Tests.KnowledgeCoreServiceTests.CollectionsAndOwnersUseTypedSecuredContracts
2. BuildWithHQ.KnowledgeCore.Tests.KnowledgeCoreServiceTests.CoreCrudUsesNamedJsonContractsAndOnlyServerScope
3. BuildWithHQ.KnowledgeCore.Tests.KnowledgeCoreServiceTests.InvalidInputFailsBeforeDatabase
4. BuildWithHQ.KnowledgeCore.Tests.KnowledgeCoreServiceTests.LifecycleAndRevisionOperationsCarryConcurrencyFences
5. BuildWithHQ.KnowledgeCore.Tests.KnowledgeCoreServiceTests.QuestionsFeedbackAndGapsUseTypedSecuredContracts
6. BuildWithHQ.KnowledgeCore.Tests.KnowledgeCoreServiceTests.ReviewsAndHealthUseTypedScopedContractsAndConcurrencyFences
7. BuildWithHQ.KnowledgeCore.Tests.KnowledgeCoreServiceTests.SqlContractsEnforceRecordScopeActionKeysAndNoDirectGrants
8. BuildWithHQ.KnowledgeCore.Tests.SupportLearningServiceTests.CreateCandidatePassesOnlySanitizedStructuredFieldsAndServerScope
9. BuildWithHQ.KnowledgeCore.Tests.SupportLearningServiceTests.InvalidOrUnsafeResponseFailsClosed
10. BuildWithHQ.KnowledgeCore.Tests.SupportLearningServiceTests.ListUsesSecuredTypedContract
11. BuildWithHQ.KnowledgeCore.Tests.SupportLearningServiceTests.SanitizerRemovesCredentialsPiiNetworkAndTenantIdentifiers
12. BuildWithHQ.KnowledgeCore.Tests.SupportLearningServiceTests.SqlContractRequiresResolvedSecuredSourceAndCreatesDraftReviewWork

**Integrations and connectors — 74 passed**
1. BuildWithHQ.Integrations.Tests.DeveloperApiCredentialTests.AuthenticatorAcceptsOnlyMatchingActiveStoredCredential
2. BuildWithHQ.Integrations.Tests.DeveloperApiCredentialTests.BuilderLifecycleRejectsNonBuilderBeforeSql
3. BuildWithHQ.Integrations.Tests.DeveloperApiCredentialTests.BuilderLifecycleUsesOnlyServerIdentityAndReturnsSecretOnce
4. BuildWithHQ.Integrations.Tests.DeveloperApiCredentialTests.GeneratedCredentialsAreStrictRandomAndRoundTrip
5. BuildWithHQ.Integrations.Tests.DeveloperApiCredentialTests.ScopeCatalogRejectsUnknownOrEmptyGrants
6. BuildWithHQ.Integrations.Tests.DeveloperApiCredentialTests.VersionedHmacProtectsAndRotatesWithoutPersistingRawSecret
7. BuildWithHQ.Integrations.Tests.DeveloperCapabilityAuthorizationTests.ForwardedSecuritySnapshotCannotAuthorizeEitherTransport
8. BuildWithHQ.Integrations.Tests.DeveloperCapabilityAuthorizationTests.MissingCredentialScopeDeniesBothTransports
9. BuildWithHQ.Integrations.Tests.DeveloperCapabilityAuthorizationTests.NamedPermissionDecisionIsSharedByBothTransports
10. BuildWithHQ.Integrations.Tests.DeveloperCapabilityAuthorizationTests.PublicTargetCannotSelectAccountOrPhysicalDatabase
11. BuildWithHQ.Integrations.Tests.DeveloperCapabilityAuthorizationTests.RestAndMcpAllowWithIdenticalDecisionFromTrustedContext
12. BuildWithHQ.Integrations.Tests.DeveloperCapabilityAuthorizationTests.RestAndMcpDenyCrossAppTargetWithoutRoutableIdentity
13. BuildWithHQ.Integrations.Tests.DeveloperConnectorRegistryTests.CrossAppTargetDeniesBothTransportsBeforeRegistryRead
14. BuildWithHQ.Integrations.Tests.DeveloperConnectorRegistryTests.DefaultRegistryIsVersionedDeterministicAndContainsOnlyPublicFamilies
15. BuildWithHQ.Integrations.Tests.DeveloperConnectorRegistryTests.MissingScopeDeniesBothTransportsBeforeRegistryRead
16. BuildWithHQ.Integrations.Tests.DeveloperConnectorRegistryTests.PublicRegistryContractsCannotSelectTenantOrPhysicalRouting
17. BuildWithHQ.Integrations.Tests.DeveloperConnectorRegistryTests.RegistryRejectsDuplicateTypesAndCapabilities
18. BuildWithHQ.Integrations.Tests.DeveloperConnectorRegistryTests.RestAndMcpReturnTheSameAuthorizedRegistry
19. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorLiveDatabaseTests.ConnectorLifecycleIsScopedTypedAndRollbackOnly
20. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorSqlContractTests.AuthoritativeExportContainsExactSecuredPublicBoundary
21. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorSqlContractTests.LegacyWriterRetirementRequiresNoDependenciesOrGrants
22. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorSqlContractTests.MigrationDerivesScopeAndLimitsPublicConnectorTypes
23. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorSqlContractTests.MigrationGrantsOnlySecuredProceduresToTenantRuntime
24. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorsTests.CrossAppTargetDeniesBothTransportsBeforeDatabaseRouting
25. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorsTests.GraphQlConfigurationIsExactAndMutationOnly
26. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorsTests.PublicContractRejectsInternalTypesRawSecretsAndReadOperations
27. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorsTests.RestAndMcpReturnIdenticalAuthorizationForAllOperations
28. BuildWithHQ.Integrations.Tests.DeveloperDataConnectorsTests.ServiceUsesOnlyServerDerivedPrincipalAndCanonicalConfiguration
29. BuildWithHQ.Integrations.Tests.DeveloperInboundEndpointSqlContractTests.LiveExportUsesAuthorizationEnvelopeAndNeverReturnsStoredVerifier
30. BuildWithHQ.Integrations.Tests.DeveloperInboundEndpointSqlContractTests.RuntimeRoleHasOnlyExplicitProcedureExecutionGrants
31. BuildWithHQ.Integrations.Tests.DeveloperInboundEndpointsTests.CrossAppTargetDeniesBothTransportsBeforeDatabaseRouting
32. BuildWithHQ.Integrations.Tests.DeveloperInboundEndpointsTests.PublicCommandsCannotSelectTenantPrincipalOrPhysicalRouting
33. BuildWithHQ.Integrations.Tests.DeveloperInboundEndpointsTests.RestAndMcpReturnIdenticalAuthorizationForAllOperations
34. BuildWithHQ.Integrations.Tests.DeveloperInboundEndpointsTests.ServiceUsesOnlyServerDerivedPrincipalForProcedureParameters
35. BuildWithHQ.Integrations.Tests.DeveloperInstalledServicesTests.CrossAppTargetDeniesBothTransportsBeforeGatewayDispatch
36. BuildWithHQ.Integrations.Tests.DeveloperInstalledServicesTests.DefaultGatewayFailsClosedWithCorrelatedSafeError
37. BuildWithHQ.Integrations.Tests.DeveloperInstalledServicesTests.InvocationCommandValidatesKeysPayloadAndRecordTargets
38. BuildWithHQ.Integrations.Tests.DeveloperInstalledServicesTests.MissingInvocationScopeDeniesBothTransportsBeforeGatewayDispatch
39. BuildWithHQ.Integrations.Tests.DeveloperInstalledServicesTests.PublicInvocationCommandCannotSelectIdentityOrPhysicalRouting
40. BuildWithHQ.Integrations.Tests.DeveloperInstalledServicesTests.RestAndMcpShareAuthorizationIdentityAndGatewayBoundary
41. BuildWithHQ.Integrations.Tests.DeveloperInstalledServicesTests.UnboundApiClientFailsBeforeGatewayDispatch
42. BuildWithHQ.Integrations.Tests.DeveloperOAuthConnectionsTests.CrossAppTargetDeniesBothTransportsBeforeDatabaseRouting
43. BuildWithHQ.Integrations.Tests.DeveloperOAuthConnectionsTests.PublicCommandsCannotSelectTenantIdentityOrPhysicalRouting
44. BuildWithHQ.Integrations.Tests.DeveloperOAuthConnectionsTests.RestAndMcpReturnIdenticalAuthorizationForEveryOperation
45. BuildWithHQ.Integrations.Tests.DeveloperOAuthConnectionsTests.ServiceRoutesLifecycleThroughSecuredContractsUsingServerIdentity
46. BuildWithHQ.Integrations.Tests.DeveloperOAuthLiveDatabaseTests.OAuthLifecycleIsScopedLeasedOneTimeAndRollbackOnly
47. BuildWithHQ.Integrations.Tests.DeveloperOAuthSqlContractTests.AuthoritativeExportContainsTheSecuredOAuthTablesProceduresAndGrants
48. BuildWithHQ.Integrations.Tests.DeveloperOAuthSqlContractTests.EveryProcedureAuthorizesServerDerivedTenantScopeAndHasNoPhysicalRouteInput
49. BuildWithHQ.Integrations.Tests.DeveloperOAuthSqlContractTests.MigrationStoresOnlyProtectedTokensAndOneTimeHashedAuthorizationState
50. BuildWithHQ.Integrations.Tests.DeveloperOAuthSqlContractTests.RefreshAndRevokeUseBoundedLeasesAndRejectNullableOutcomes
51. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorLiveDatabaseTests.ConnectorLifecycleIsScopedTypedAndRollbackOnly
52. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorSqlContractTests.AuthoritativeExportContainsOnlyTheSecuredPublicBoundaryAndUnusedLegacyName
53. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorSqlContractTests.LegacyWriterRetirementRequiresNoDependenciesReferencesOrGrants
54. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorSqlContractTests.MigrationDerivesAccountAndIntegerAppScopeAfterAuthorization
55. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorSqlContractTests.MigrationUsesOnlyOpaqueReferencesAndGrantsSecuredProcedures
56. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorsTests.CrossAppTargetDeniesBothTransportsBeforeDatabaseRouting
57. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorsTests.PublicContractIsStripeOnlyAndHasNoRawSecretOrEndpointFields
58. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorsTests.RestAndMcpReturnIdenticalAuthorizationForAllOperations
59. BuildWithHQ.Integrations.Tests.DeveloperPaymentConnectorsTests.ServiceUsesOnlyServerDerivedPrincipalAndOpaqueReferences
60. BuildWithHQ.Integrations.Tests.DeveloperRecordsTests.CrossAppTargetDeniesBothTransportsBeforeTenantRouting
61. BuildWithHQ.Integrations.Tests.DeveloperRecordsTests.PublicRecordCommandsCannotSelectTenantOrPhysicalRouting
62. BuildWithHQ.Integrations.Tests.DeveloperRecordsTests.RestAndMcpAuthorizeEveryRecordOperationIdentically
63. BuildWithHQ.Integrations.Tests.DeveloperRecordsTests.RestAndMcpUseSameCoordinatorDecisionAndPayload
64. BuildWithHQ.Integrations.Tests.DeveloperRecordsTests.UnboundCredentialFailsBeforeExecutorCreation
65. BuildWithHQ.Integrations.Tests.DeveloperWebhookDeliverySqlContractTests.MigrationDefinesLeaseAuditRetryAndTenantBoundContracts
66. BuildWithHQ.Integrations.Tests.DeveloperWebhookSubscriptionSqlContractTests.LiveExportHasNormalizedFiltersEnvelopeScopeAndNoSecretInspection
67. BuildWithHQ.Integrations.Tests.DeveloperWebhookSubscriptionTests.CommandsRejectPrivateDestinationsAndPhysicalRoutingSelectors
68. BuildWithHQ.Integrations.Tests.DeveloperWebhookSubscriptionTests.CreateDisplaysRawSecretOnceButRoutesOnlyEncryptedEnvelope
69. BuildWithHQ.Integrations.Tests.DeveloperWebhookSubscriptionTests.DeliveryRestAndMcpAuthorizationOutcomesAreIdentical
70. BuildWithHQ.Integrations.Tests.DeveloperWebhookSubscriptionTests.RestAndMcpReturnIdenticalOutcomesAndCrossAppStopsBeforeService
71. BuildWithHQ.Integrations.Tests.DeveloperWebhookSubscriptionTests.SigningSecretsAreAuthenticatedEncryptedAndTamperEvident
72. BuildWithHQ.Integrations.Tests.OAuthProtocolTests.AesGcmProtectorRoundTripsRotatedKeysAndRejectsTamperingAndDomainConfusion
73. BuildWithHQ.Integrations.Tests.OAuthProtocolTests.StandardClientReturnsOnlySafeProviderErrors
74. BuildWithHQ.Integrations.Tests.OAuthProtocolTests.StandardClientUsesPkceBasicAuthenticationAndProviderOwnedEndpoints

**Marketplace — 50 passed**
1. BuildWithHQ.Marketplace.Tests.MarketplaceCatalogServiceTests.BuyerEntitlementReaderUsesOnlyVerifiedServerIdentity
2. BuildWithHQ.Marketplace.Tests.MarketplaceCatalogServiceTests.HistoricalEntitledVersionRemainsReinstallableWithoutChangingInstalledVersion
3. BuildWithHQ.Marketplace.Tests.MarketplaceCatalogServiceTests.PublicCatalogReturnsExactRecommendedVersionAndNormalizesCurrency
4. BuildWithHQ.Marketplace.Tests.MarketplaceCatalogServiceTests.TenantIdentityCannotReadControlPlaneEntitlements
5. BuildWithHQ.Marketplace.Tests.MarketplaceCatalogServiceTests.VersionCatalogRejectsCrossBuyerResultWithSafeError
6. BuildWithHQ.Marketplace.Tests.MarketplaceCheckoutServiceTests.FreeOrderReturnsGrantedExactVersionWithoutCallingStripe
7. BuildWithHQ.Marketplace.Tests.MarketplaceCheckoutServiceTests.PaidOrderUsesVerifiedBuyerScopeAndRegistersOneIdempotentProviderSession
8. BuildWithHQ.Marketplace.Tests.MarketplaceCheckoutServiceTests.ProviderFailureIsSafeAndLeavesOrderRetryableWithSameKey
9. BuildWithHQ.Marketplace.Tests.MarketplaceCheckoutServiceTests.TenantIdentityCannotCreateControlPlaneOrder
10. BuildWithHQ.Marketplace.Tests.MarketplaceCheckoutSqlContractTests.CheckoutSessionRegistrationIsBuyerScopedAndIdempotent
11. BuildWithHQ.Marketplace.Tests.MarketplaceCheckoutSqlContractTests.OrderItemsSnapshotProviderTermsExactlyOnce
12. BuildWithHQ.Marketplace.Tests.MarketplaceEntitlementAssignmentServiceTests.AssignmentUsesVerifiedBuyerAndReturnsExactGrantedVersionAndJob
13. BuildWithHQ.Marketplace.Tests.MarketplaceEntitlementAssignmentServiceTests.EmptyAssignmentIdentifiersAreRejectedBeforeDatabaseCall
14. BuildWithHQ.Marketplace.Tests.MarketplaceEntitlementAssignmentServiceTests.OutOfScopeAssignmentReceiptFailsClosed
15. BuildWithHQ.Marketplace.Tests.MarketplaceEntitlementAssignmentServiceTests.TenantIdentityCannotAssignControlPlaneEntitlement
16. BuildWithHQ.Marketplace.Tests.MarketplaceEntitlementAssignmentSqlContractTests.CurrentAssignmentContractEnforcesBuyerPermissionOwnershipAndExactVersionQueue
17. BuildWithHQ.Marketplace.Tests.MarketplaceEntitlementAssignmentSqlContractTests.ExactVersionQueueRequiresGrantAndRetainsWithdrawnReinstallability
18. BuildWithHQ.Marketplace.Tests.MarketplaceExactVersionSqlContractTests.BuyerVersionCatalogReturnsImmutableGrantLedgerAndVersionStatus
19. BuildWithHQ.Marketplace.Tests.MarketplaceExactVersionSqlContractTests.HistoricalEntitledVersionIsAnExactInstallCandidate
20. BuildWithHQ.Marketplace.Tests.MarketplaceExactVersionSqlContractTests.InstallJobSnapshotsSelectedVersionAndArtifactFingerprints
21. BuildWithHQ.Marketplace.Tests.MarketplaceExactVersionSqlContractTests.TemplatePayloadBridgeRetainsArchivedExactVersionAccess
22. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestServiceTests.DifferentReturnedVersionFailsClosed
23. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestServiceTests.EmptyVersionIsRejectedBeforeDatabaseCall
24. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestServiceTests.ExactHistoricalVersionRequestUsesVerifiedBuyerAndReturnsDurableJob
25. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestServiceTests.TenantIdentityCannotRequestControlPlaneInstall
26. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestServiceTests.UpgradeApplyCarriesExactCurrentVersionFence
27. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestServiceTests.UpgradePreviewReturnsDriftAndRollbackEvidenceFromVerifiedBuyerScope
28. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestSqlContractTests.InternalQueueIsAtomicIdempotentAndSnapshotsExactComponents
29. BuildWithHQ.Marketplace.Tests.MarketplaceInstallRequestSqlContractTests.PublicRequestDerivesBuyerTargetAndQueuesOnlySelectedEntitledVersion
30. BuildWithHQ.Marketplace.Tests.MarketplaceLicenseLifecycleServiceTests.DisableRequiresReasonBeforeDatabaseCall
31. BuildWithHQ.Marketplace.Tests.MarketplaceLicenseLifecycleServiceTests.RequestDerivesBuyerAndActorAndReturnsExactQueuedAction
32. BuildWithHQ.Marketplace.Tests.MarketplaceLicenseLifecycleServiceTests.StatusLookupIsBuyerScopedAndChecksExactActionIdentity
33. BuildWithHQ.Marketplace.Tests.MarketplaceLicenseLifecycleSqlContractTests.LicenseLifecycleIsFencedIdempotentAndProcedureOnly
34. BuildWithHQ.Marketplace.Tests.MarketplacePayoutServiceTests.InvalidRequestIsRejectedBeforeDatabaseCall
35. BuildWithHQ.Marketplace.Tests.MarketplacePayoutServiceTests.RequestDerivesSellerActorAndCorrelationAndReturnsExactReplayIdentity
36. BuildWithHQ.Marketplace.Tests.MarketplacePayoutServiceTests.SummaryReturnsBalancesHistoryAndReconciliationState
37. BuildWithHQ.Marketplace.Tests.MarketplacePayoutSqlContractTests.PayoutPolicyIsIdempotentReconciledAndProcedureOnly
38. BuildWithHQ.Marketplace.Tests.MarketplaceProductOfferSqlContractTests.SellerCatalogAndAvailabilityStayOwnedProcedureOnlyAndSnapshotSafe
39. BuildWithHQ.Marketplace.Tests.MarketplaceSellerConsoleSqlContractTests.SellerReadsAreProcedureOnlyScopedAndKeepFinancePermissionsSeparate
40. BuildWithHQ.Marketplace.Tests.MarketplaceSellerOnboardingServiceTests.CreateUsesOnlyServerDerivedScopeAndReturnsRedactedStatus
41. BuildWithHQ.Marketplace.Tests.MarketplaceSellerOnboardingServiceTests.ReturnedAccountMismatchFailsClosed
42. BuildWithHQ.Marketplace.Tests.MarketplaceSellerOnboardingServiceTests.TenantIdentityCannotUseSellerControlPlane
43. BuildWithHQ.Marketplace.Tests.MarketplaceSellerOnboardingServiceTests.TermsAcceptanceCarriesExactVersionAndCorrelation
44. BuildWithHQ.Marketplace.Tests.MarketplaceSellerOnboardingServiceTests.UnsafeProfileUrlIsRejectedBeforeDatabaseCall
45. BuildWithHQ.Marketplace.Tests.MarketplaceSellerOnboardingSqlContractTests.SellerOnboardingUsesOpaqueReferencesSafeProjectionAndProcedureOnlyGrants
46. BuildWithHQ.Marketplace.Tests.MarketplaceUpgradeSqlContractTests.PreviewAndApplyRequireEntitlementExactVersionAndStalePreviewFence
47. BuildWithHQ.Marketplace.Tests.StripeMarketplaceCheckoutGatewayTests.OneTimeFallbackCreatesPriceDataWithoutExposingSecret
48. BuildWithHQ.Marketplace.Tests.StripeMarketplaceCheckoutGatewayTests.OptionsRejectNonHttpsRedirectsAndMissingSecrets
49. BuildWithHQ.Marketplace.Tests.StripeMarketplaceCheckoutGatewayTests.ProviderErrorReturnsSafeExceptionWithoutResponseBody
50. BuildWithHQ.Marketplace.Tests.StripeMarketplaceCheckoutGatewayTests.SubscriptionCheckoutUsesServerUrlsSecretHeaderAndImmutableProviderPrice

**Security services — 37 passed**
1. BuildWithHQ.Security.Tests.AuthorizationReplayServiceTests.BuilderAndAnonymousContextsAreDeniedBeforeResolution
2. BuildWithHQ.Security.Tests.AuthorizationReplayServiceTests.CallerSuppliedOwnerSnapshotCannotBypassRevalidation
3. BuildWithHQ.Security.Tests.AuthorizationReplayServiceTests.InvalidTargetAndModeAreRejectedBeforeResolution
4. BuildWithHQ.Security.Tests.AuthorizationReplayServiceTests.MismatchedEnvelopeAndMalformedResultFailClosed
5. BuildWithHQ.Security.Tests.AuthorizationReplayServiceTests.NonOwnerIsDeniedAfterDatabaseEnvelopeResolution
6. BuildWithHQ.Security.Tests.AuthorizationReplayServiceTests.OwnerReplayUsesRevalidatedServerScopeAndParsesEvidence
7. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.AllowsGrantedPermissionWithCanonicalCaseInsensitiveComparison
8. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.AllowsNullRequiredPermissionForRevalidatedTenantOnly
9. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.AuditsAllowedAndDeniedPermissionDecisionsWithoutCallerScope
10. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.DeniesBootstrapClaimsUntilDatabaseAuthorizationIsAttached
11. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.DeniesInvalidRequiredPermissionDeterministically
12. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.DeniesMissingPermissionWithoutAccountOwnerBypass
13. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.DeniesNonTenantIdentityBeforePermissionMatch
14. BuildWithHQ.Security.Tests.CanonicalPermissionKeyEvaluatorTests.PublicEvaluatorAcceptsNoCallerTenantScope
15. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.AnonymousAndInvalidResourceIdsFailBeforeSql
16. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.AuthorizedRevealUsesOnlyServerIdentityAndReturnsRedactedSensitiveValue
17. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.BuilderPlaneIsDeniedBeforeSqlOrKeyResolution
18. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.DisposedSensitiveValueCannotBeRevealedAgain
19. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.MalformedOrUnsupportedEnvelopeFailsWithoutKeyResolution
20. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.MissingKeyInfrastructureFailsClosedAfterAuthorizedSqlGate
21. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.StructuredLoggingRedactsPlaintextAndEnvelopeMetadata
22. BuildWithHQ.Security.Tests.EncryptedDynamicFieldAccessTests.TamperedCiphertextFailsIntegrityWithoutReturningPlaintext
23. BuildWithHQ.Security.Tests.FeatureEntitlementEvaluatorTests.CacheIsTenantScopedAndCachedSnapshotUsesCurrentCorrelation
24. BuildWithHQ.Security.Tests.FeatureEntitlementEvaluatorTests.RequirementsAreTypedAndCacheDurationIsStrictlyBounded
25. BuildWithHQ.Security.Tests.FeatureEntitlementEvaluatorTests.RevocationBlocksWithoutRedeployAfterShortCacheAndImmediateInvalidation
26. BuildWithHQ.Security.Tests.FeatureEntitlementEvaluatorTests.ServiceIdentityCannotCheckAnotherAppsEntitlement
27. BuildWithHQ.Security.Tests.FeatureEntitlementEvaluatorTests.SourceFailureFailsClosedAndIsBrieflyCached
28. BuildWithHQ.Security.Tests.SecretProviderTests.ExternalProductionAdapterPreservesNameAndVersionWithoutLoggingValue
29. BuildWithHQ.Security.Tests.SecretProviderTests.LocalEnvironmentProviderIsPrefixBoundAndCompositeRoutesByProvider
30. BuildWithHQ.Security.Tests.SecretProviderTests.MountedProductionProviderReadsOnlyBeneathConfiguredRoot
31. BuildWithHQ.Security.Tests.SecretProviderTests.SecretValueRedactsJsonStringFormattingAndStructuredLogs
32. BuildWithHQ.Security.Tests.SecretProviderTests.SharedReferenceContainsIdentifiersButCannotCarryResolvedMaterial
33. BuildWithHQ.Security.Tests.TrustedAuthorizationEnvelopeResolverTests.AllowsScopedEnvelopeWithNoActiveLocationsToFailClosedLater
34. BuildWithHQ.Security.Tests.TrustedAuthorizationEnvelopeResolverTests.EnvelopeRejectsLocationsWhenDatabaseSaysUnscoped
35. BuildWithHQ.Security.Tests.TrustedAuthorizationEnvelopeResolverTests.LoadsEnvelopeOnlyFromVerifiedIdentityAndDatabasePayload
36. BuildWithHQ.Security.Tests.TrustedAuthorizationEnvelopeResolverTests.RejectsDatabasePayloadForDifferentTenantIdentity
37. BuildWithHQ.Security.Tests.TrustedAuthorizationEnvelopeResolverTests.RejectsNonTenantContextBeforeDatabaseExecution

**Builder Console UI — 188 passed**
1. AccountExperiencePages.test.tsx — account experience pages keeps required security notifications enabled
2. AccountExperiencePages.test.tsx — account experience pages loads and saves branding with only reviewed fields
3. AccountExperiencePages.test.tsx — account experience pages preserves communication settings when changing locale preferences
4. AccountSettingsPage.test.tsx — account settings page loads and saves profile fields while preserving server-owned scope
5. AccountSettingsPage.test.tsx — account settings page shows safe load, empty, and retry states
6. AccountSettingsPage.test.tsx — account settings page turns an optimistic concurrency failure into an actionable conflict
7. AiOperationsPage.test.tsx — AI operations dashboard refreshes on demand
8. AiOperationsPage.test.tsx — AI operations dashboard renders a safe denial without backend details
9. AiOperationsPage.test.tsx — AI operations dashboard shows worker, endpoint, queue, failure, throughput, and latency signals
10. ApiClientManagementPage.test.tsx — API client management confirms rotation and revocation and never offers lifecycle actions for revoked clients
11. ApiClientManagementPage.test.tsx — API client management creates with only app-targeted name and selected scopes, then displays the credential once
12. ApiClientManagementPage.test.tsx — API client management moves from loading to the empty state without inventing clients
13. ApiClientManagementPage.test.tsx — API client management renders server catalog scopes and schema-backed client state
14. ApiClientManagementPage.test.tsx — API client management uses safe permission errors without exposing backend details
15. AppObservabilityPages.test.tsx — app observability pages renders bounded usage and reloads only supported windows
16. AppObservabilityPages.test.tsx — app observability pages renders only safe log projections and sends bounded filters
17. ApplianceAuthoringPage.test.tsx — ApplianceAuthoringPage blocks install preview for an unpublished version
18. ApplianceAuthoringPage.test.tsx — ApplianceAuthoringPage lists owned packages through the native appliance route
19. ApplianceAuthoringPage.test.tsx — ApplianceAuthoringPage queues validation for the exact selected version
20. ApplianceAuthoringPage.test.tsx — ApplianceAuthoringPage shows exact endpoint permissions and no worker lease material
21. AppsPage.test.tsx — AppsPage polls a provisioning portfolio until its status settles
22. AppsPage.test.tsx — AppsPage renders a loading state while the portfolio request is pending
23. AppsPage.test.tsx — AppsPage renders a safe error with correlation and retries
24. AppsPage.test.tsx — AppsPage renders app data in the success state
25. AppsPage.test.tsx — AppsPage renders the empty state
26. AppsPage.test.tsx — AppsPage requires confirmation and replaces the card with the suspended result
27. AuditViewerPage.test.tsx — builder audit viewer loads older events using only the server continuation cursor
28. AuditViewerPage.test.tsx — builder audit viewer moves from loading to safe account-scoped audit events
29. AuditViewerPage.test.tsx — builder audit viewer renders valid empty and permission-denied states
30. AuditViewerPage.test.tsx — builder audit viewer searches loaded safe fields and applies an exact server action filter
31. BackupManagementPage.test.tsx — backup management moves from loading to empty history
32. BackupManagementPage.test.tsx — backup management requests only the selected server-known destination
33. BackupManagementPage.test.tsx — backup management saves metadata without credentials and renders safe errors
34. BackupManagementPage.test.tsx — backup management shows destinations and completed restore points
35. BillingHistoryPage.test.tsx — billing history allows retry after a safe transient failure
36. BillingHistoryPage.test.tsx — billing history keeps database/provider errors out of permission-denied output
37. BillingHistoryPage.test.tsx — billing history renders subscription, integer-money invoices, payments, refunds, and safe documents
38. BillingHistoryPage.test.tsx — billing history renders valid empty history
39. BillingHistoryPage.test.tsx — billing history requires explicit confirmation and shows a safe cancellation receipt
40. BillingResourcesPage.test.tsx — billing resources connects the server-derived payment customer without profile input
41. BillingResourcesPage.test.tsx — billing resources creates add-on checkout from the server catalog code
42. BillingResourcesPage.test.tsx — billing resources creates checkout from the internal plan target and exposes only the safe continuation link
43. BillingResourcesPage.test.tsx — billing resources renders permission denial without retry or database details
44. BillingResourcesPage.test.tsx — billing resources renders valid no-plan and no-add-on empty states
45. BillingResourcesPage.test.tsx — billing resources shows a safe correlation reference when customer mapping fails
46. BillingResourcesPage.test.tsx — billing resources shows plan, capacity, allocated usage and add-ons
47. CostTelemetryPanel.test.tsx — shows account/app estimates and makes missing rates explicit
48. CostTelemetryPanel.test.tsx — shows an honest empty state when no usage has arrived
49. DomainManagementPage.test.tsx — domain management adds a normalized target without browser identity or provider status
50. DomainManagementPage.test.tsx — domain management renders schema-backed domain and certificate states
51. DomainManagementPage.test.tsx — domain management shows provider DNS proof and refreshes after verification
52. DomainManagementPage.test.tsx — domain management uses row-versioned primary changes and safe forbidden errors
53. FeatureCatalogPage.test.tsx — console feature coverage accounts for every route in the 87-page audited prototype manifest exactly once
54. FeatureCatalogPage.test.tsx — console feature coverage renders the complete cross-console directory with honest readiness totals
55. FeatureCatalogPage.test.tsx — console feature coverage routes the promoted registration contract to the production form
56. HarnessConsolePages.test.tsx — Harness console parity pages shows aggregate exact-version inventory without tenant routing
57. HarnessConsolePages.test.tsx — Harness console parity pages shows bounded per-case results and queues only an exact route version
58. HarnessPackEditorPage.test.tsx — Harness Pack editor creates a normalized account-owned pack without caller scope fields
59. HarnessPackEditorPage.test.tsx — Harness Pack editor submits the selected typed component payload
60. HarnessPackEditorPage.test.tsx — Harness Pack editor surfaces owned components, tests, and exact version state
61. IntegrationManagementPage.test.tsx — integration management edits with row-version concurrency and renders safe provider errors
62. IntegrationManagementPage.test.tsx — integration management moves from loading to the schema-backed empty state
63. IntegrationManagementPage.test.tsx — integration management shows configured state without returning the secret reference
64. IntegrationManagementPage.test.tsx — integration management submits a secret reference identifier without any raw secret field
65. MarketplaceAdministrationPage.test.tsx — marketplace administration creates a seller-owned product without identity fields
66. MarketplaceAdministrationPage.test.tsx — marketplace administration keeps offer price and activation as explicit lifecycle actions
67. MarketplaceAdministrationPage.test.tsx — marketplace administration offers first-time seller profile setup
68. MarketplaceAdministrationPage.test.tsx — marketplace administration renders empty and correlation-safe error states
69. MarketplaceAdministrationPage.test.tsx — marketplace administration renders seller product and publication counts
70. MarketplaceCheckoutPage.test.tsx — Marketplace checkout page finishes a free order at the exact entitlement without a provider redirect
71. MarketplaceCheckoutPage.test.tsx — Marketplace checkout page reviews the exact version and redirects a paid order to the secure provider
72. MarketplaceCheckoutPage.test.tsx — Marketplace checkout page shows safe provider errors and preserves the order idempotency correlation on retry
73. MarketplacePages.test.tsx — Marketplace catalog pages assigns an unassigned exact-version entitlement to an owned SaaS app
74. MarketplacePages.test.tsx — Marketplace catalog pages discovers the current immutable version and applies safe catalog filters
75. MarketplacePages.test.tsx — Marketplace catalog pages keeps installed v1 separate from entitled v2 and exposes withdrawn v1 for reinstall
76. MarketplacePages.test.tsx — Marketplace catalog pages queues an explicitly selected withdrawn version without substituting entitled v2
77. MarketplacePages.test.tsx — Marketplace catalog pages renders a safe correlated entitlement-assignment conflict
78. MarketplacePages.test.tsx — Marketplace catalog pages renders a safe correlated marketplace failure and supports retry
79. MarketplacePages.test.tsx — Marketplace catalog pages shows a safe correlated error when an exact install request conflicts
80. MarketplacePages.test.tsx — Marketplace catalog pages shows product pricing and the exact compatibility component manifest
81. MarketplaceSellerPages.test.tsx — marketplace seller routes promotes all nine audited seller routes to native production pages
82. MarketplaceSellerPages.test.tsx — marketplace seller routes renders dashboard counts from the scoped seller catalog
83. MarketplaceSellerPages.test.tsx — marketplace seller routes renders gross, fee, net, and available values from the revenue contract
84. MarketplaceSellerPages.test.tsx — marketplace seller routes requires explicit confirmation and sends an idempotency key for payout
85. MfaFlow.test.tsx — builder MFA flow associates safe sign-in validation errors with both credential fields
86. MfaFlow.test.tsx — builder MFA flow completes a cookie-bound MFA challenge before opening the console
87. MfaFlow.test.tsx — builder MFA flow enrolls and activates MFA from authenticated settings without identity input
88. OwnershipTransferPage.test.tsx — ownership transfer page does not load team data for a non-owner
89. OwnershipTransferPage.test.tsx — ownership transfer page shows only eligible administrators and signs out after an acknowledged transfer
90. PortfolioPages.test.tsx — AppOpenPage loads the ownership-validated app and shows provisioning state
91. PortfolioPages.test.tsx — AppOpenPage renders the same safe not-found state for unavailable apps
92. PortfolioPages.test.tsx — AppOpenPage renders valid empty states for builder-only apps without domains, quota, or a container
93. PortfolioPages.test.tsx — CreateAppPage explains plan-limit failures without exposing internals
94. PortfolioPages.test.tsx — CreateAppPage preserves the correlation id across a safe retry and opens the created app
95. ProvisioningProgressPage.test.tsx — ProvisioningProgressPage polls durable state until the job is terminal
96. ProvisioningProgressPage.test.tsx — ProvisioningProgressPage renders durable step state and support correlation without provider internals
97. ProvisioningProgressPage.test.tsx — ProvisioningProgressPage shows safe retry failure details and durable failure code
98. PublicAuthPages.test.tsx — public builder authentication pages keeps password reset requests enumeration resistant
99. PublicAuthPages.test.tsx — public builder authentication pages renders a safe invalid verification state without a token
100. PublicAuthPages.test.tsx — public builder authentication pages resolves then accepts an invitation without returning the raw token to the page
101. PublicAuthPages.test.tsx — public builder authentication pages submits registration without database or authorization selectors
102. ResourceAllocationPanel.test.tsx — resource allocation panel keeps dependency details out of load failures
103. ResourceAllocationPanel.test.tsx — resource allocation panel prevents allocations below measured usage and disables fixed workspaces
104. ResourceAllocationPanel.test.tsx — resource allocation panel shows per-app allocations and submits only bounded allocation fields
105. RolePermissionsPage.test.tsx — role permissions page renders the complete built-in role permission matrix and assignment link
106. RolePermissionsPage.test.tsx — role permissions page shows a safe correlated error and supports retry
107. RolePermissionsPage.test.tsx — role permissions page shows an explicit empty state
108. RuntimeControlPage.test.tsx — runtime control moves from loading to technology-neutral status and safe event pointers
109. RuntimeControlPage.test.tsx — runtime control renders a correlated API error without provider details
110. RuntimeControlPage.test.tsx — runtime control renders a valid empty state for a builder-only app
111. RuntimeControlPage.test.tsx — runtime control restarts through the server endpoint and shows the correlation receipt
112. SecurityCenterPage.test.tsx — security center keeps sessions usable when audit permission is denied and hides raw errors
113. SecurityCenterPage.test.tsx — security center revokes a non-current session without signing out
114. SecurityCenterPage.test.tsx — security center shows current sessions and recent permitted audit context
115. SecurityCenterPage.test.tsx — security center signs out locally only after all-session revocation succeeds
116. Shell.test.tsx — AuthenticatedShell closes navigation with Escape and restores focus to its toggle
117. Shell.test.tsx — AuthenticatedShell exposes mobile navigation state and closes it after navigation
118. Shell.test.tsx — AuthenticatedShell focuses operations navigation without adding a new authorization gate
119. Shell.test.tsx — AuthenticatedShell keeps account administration focused in the admin console
120. Shell.test.tsx — AuthenticatedShell keeps the shell behind the sign-in session gate
121. Shell.test.tsx — AuthenticatedShell makes the appliance template marketplace first-class in the developer console
122. Shell.test.tsx — AuthenticatedShell mounts the current app portfolio in authenticated navigation
123. Shell.test.tsx — AuthenticatedShell moves programmatic focus to the main landmark after route navigation
124. Shell.test.tsx — AuthenticatedShell navigates between registered destinations and updates the topbar
125. Shell.test.tsx — AuthenticatedShell promotes ownership transfer to its native protected workflow
126. Shell.test.tsx — AuthenticatedShell recognizes the SaaS creation route in the shell title
127. Shell.test.tsx — AuthenticatedShell renders a safe not-found route and signs out from the shell
128. Shell.test.tsx — RouteErrorBoundary contains render failures and resets when the route changes
129. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration creates a destination with an opaque reference and no secret-value field
130. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration renders a safe owner authorization error
131. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration renders safe configured metadata without a credential reference
132. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration retains the configured credential and submits row-version concurrency on update
133. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration retries only the selected failed run and refreshes server-derived history
134. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration shows run counts, failure evidence, and the current successful checkpoint
135. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration tests the configured destination and shows only the safe receipt
136. SnowflakeConfigurationPage.test.tsx — Snowflake destination configuration updates recurring cadence without client-supplied tenant identity
137. TeamPage.test.tsx — team page invites through the server contract and reloads the snapshot
138. TeamPage.test.tsx — team page renders members, owner protection, roles, and pending invitations
139. TeamPage.test.tsx — team page shows safe load and conflict failures
140. TeamPage.test.tsx — team page updates role, deactivates a member, and revokes invitations with row-version inputs
141. TemplateAdministrationPage.test.tsx — template administration archives only the displayed immutable version
142. TemplateAdministrationPage.test.tsx — template administration creates a minimal language-safe draft
143. TemplateAdministrationPage.test.tsx — template administration renders owned publication state and validates a working copy
144. TemplateAdministrationPage.test.tsx — template administration renders valid empty and correlation-safe error states
145. TemplateAuthoringPage.test.tsx — TemplateAuthoringPage creates a typed draft through the authoring API seam
146. TemplateAuthoringPage.test.tsx — TemplateAuthoringPage renders secured production catalog data and owned version links
147. UsageAlertsPanel.test.tsx — usage alerts panel does not expose dependency details in failures
148. UsageAlertsPanel.test.tsx — usage alerts panel renders a clear state when no threshold is active
149. UsageAlertsPanel.test.tsx — usage alerts panel renders scoped operational notices with current threshold evidence
150. api.test.ts — builder API client assigns an entitlement to an app without caller-controlled buyer identity
151. api.test.ts — builder API client creates a marketplace order with stable correlation and no caller-controlled buyer identity
152. api.test.ts — builder API client creates add-on checkout with only the selected internal catalog code
153. api.test.ts — builder API client creates an app with a stable correlation and no routing input
154. api.test.ts — builder API client creates platform checkout with only the selected internal plan target
155. api.test.ts — builder API client loads and updates app allocation without caller-controlled account scope
156. api.test.ts — builder API client loads apps with the bearer token and no caller-controlled account scope
157. api.test.ts — builder API client loads billing resources without caller-controlled account scope
158. api.test.ts — builder API client loads bounded billing history without provider or account selectors
159. api.test.ts — builder API client loads cost telemetry with only an optional UTC month selector
160. api.test.ts — builder API client loads the sanitized billing catalog without provider or account input
161. api.test.ts — builder API client loads usage alerts without account, database, or threshold selectors
162. api.test.ts — builder API client logs in through the auth service contract
163. api.test.ts — builder API client maps the payment customer with an empty authenticated server-scoped request
164. api.test.ts — builder API client opens and suspends only the target app resource
165. api.test.ts — builder API client reads AI operations with only a bounded lookback query
166. api.test.ts — builder API client reads and updates account profile without caller-controlled identity or database scope
167. api.test.ts — builder API client reads the built-in role permission matrix from the server-scoped endpoint
168. api.test.ts — builder API client reads the target app provisioning contract without caller-controlled scope
169. api.test.ts — builder API client requests an exact entitled version without caller-controlled app or buyer scope
170. api.test.ts — builder API client requests period-end cancellation without account or provider identifiers
171. api.test.ts — builder API client uses account-scoped template administration routes and exact archive versions
172. api.test.ts — builder API client uses app-scoped API-client lifecycle routes without browser-controlled identity or secret hashes
173. api.test.ts — builder API client uses app-scoped backup routes without database or cloud credentials
174. api.test.ts — builder API client uses app-scoped integration routes with references but no secret values or caller identity
175. api.test.ts — builder API client uses app-targeted domain routes without accepting account or provider truth
176. api.test.ts — builder API client uses cookie-bound MFA routes without caller-controlled account scope
177. api.test.ts — builder API client uses exact Harness evaluation and aggregate inventory routes without tenant routing
178. api.test.ts — builder API client uses marketplace administration lifecycle routes without caller-controlled seller scope
179. api.test.ts — builder API client uses only bounded audit filters and an opaque continuation cursor
180. api.test.ts — builder API client uses owner-derived Harness Pack routes and exact version identity
181. api.test.ts — builder API client uses owner-derived appliance authoring routes without database or worker scope
182. api.test.ts — builder API client uses security readers and auth revocation routes without browser-supplied account scope
183. api.test.ts — builder API client uses separated seller catalog, revenue, payout, artifact, and composition routes
184. api.test.ts — builder API client uses stable marketplace read routes without caller-controlled buyer identity
185. api.test.ts — builder API client uses team routes without caller-controlled account, actor, token, or provider scope
186. webSecurity.test.ts — web security request proof adds proof only to unsafe requests
187. webSecurity.test.ts — web security request proof creates and reuses a host-scoped CSRF token
188. webSecurity.test.ts — web security request proof does not overwrite an unrelated authorization header

**Tenant runtime UI — 184 passed**
1. ActiveWorkplaceContract.test.ts — ActiveWorkplace contracts accepts bounded current detail
2. ActiveWorkplaceContract.test.ts — ActiveWorkplace contracts accepts read-only playback with current-permission graph output
3. ActiveWorkplaceContract.test.ts — ActiveWorkplace contracts rejects playback unless the server marks it read only
4. ActiveWorkplaceModule.test.tsx — ActiveWorkplace first-class module pins a currently visible universal record
5. ActiveWorkplaceModule.test.tsx — ActiveWorkplace first-class module removes every mutation control in Graph Playback
6. App.test.tsx — tenant runtime app does not display a malformed page payload
7. App.test.tsx — tenant runtime app navigates using only page keys from the authorized tenant shell
8. App.test.tsx — tenant runtime app resolves a deep-link pathname through the secured slug route
9. App.test.tsx — tenant runtime app shows Design only when login returns the exact authorized builder session
10. App.test.tsx — tenant runtime app signs in and displays the authorized runtime page contract
11. CalendarContract.test.ts — Calendar module contracts fails closed on malformed identities, timestamps, and versions
12. CalendarContract.test.ts — Calendar module contracts parses versioned universal records and normalizes SQL datetime2 values as UTC
13. CalendarModule.test.tsx — Calendar first-class module creates an event without submitting tenant identity fields
14. CalendarModule.test.tsx — Calendar first-class module loads secured events and exposes attendees, relations, activity, fields, and favorites
15. CalendarModule.test.tsx — Calendar first-class module shows a safe empty state for an empty secured result
16. ChatRoomsContract.test.ts — Chat rooms contract parses secured list and detail contracts
17. ChatRoomsContract.test.ts — Chat rooms contract parses typed collaboration mutations
18. ChatRoomsContract.test.ts — Chat rooms contract rejects malformed identities, room types, and nested contracts
19. ChatRoomsModule.test.tsx — Chat rooms first-class module creates a room without caller-controlled tenant scope
20. ChatRoomsModule.test.tsx — Chat rooms first-class module hides authoring controls from readers
21. ChatRoomsModule.test.tsx — Chat rooms first-class module opens a secured room and performs message, reaction, and mute actions
22. CompanyNewsContract.test.ts — Company news module contracts fails closed on malformed identities, timestamps, and versions
23. CompanyNewsContract.test.ts — Company news module contracts parses versioned universal record, publishing, and dynamic-field contracts
24. CompanyNewsModule.test.tsx — Company news first-class module creates an announcement without sending caller-controlled tenant scope
25. CompanyNewsModule.test.tsx — Company news first-class module hides authoring controls and shows a safe empty state for a reader
26. CompanyNewsModule.test.tsx — Company news first-class module loads secured news and exposes publishing, relations, activity, fields, and favorites
27. ContactsContract.test.ts — Contacts module contracts fails closed on malformed identities and versions
28. ContactsContract.test.ts — Contacts module contracts parses versioned universal record contracts
29. ContactsModule.test.tsx — Contacts first-class module composes a team directory from secured employee and contractor contact types
30. ContactsModule.test.tsx — Contacts first-class module creates a contact without submitting tenant identity fields
31. ContactsModule.test.tsx — Contacts first-class module loads secured records and exposes relations, activity, fields, and favorites
32. ContactsModule.test.tsx — Contacts first-class module shows a safe empty state for an empty secured result
33. ConversationsContract.test.ts — Conversations module contracts fails closed on malformed scope data and private storage metadata
34. ConversationsContract.test.ts — Conversations module contracts parses universal detail, messages, relations, favorites, and dynamic fields
35. ConversationsModule.test.tsx — Conversations first-class module creates an internal conversation without browser-supplied tenant identity
36. ConversationsModule.test.tsx — Conversations first-class module loads the secured native thread with universal activity, relations, fields, and favorites
37. ConversationsModule.test.tsx — Conversations first-class module shows a safe empty state
38. ConversationsModule.test.tsx — Conversations first-class module updates conversation state and posts through the reviewed message path
39. DiscussionBoardsContract.test.ts — Discussion boards contract parses secured board and topic graphs
40. DiscussionBoardsContract.test.ts — Discussion boards contract parses typed mutations
41. DiscussionBoardsContract.test.ts — Discussion boards contract rejects malformed identities and nested contracts
42. DiscussionBoardsModule.test.tsx — Discussion boards first-class module creates a board without caller-controlled tenant scope
43. DiscussionBoardsModule.test.tsx — Discussion boards first-class module hides authoring controls from readers
44. DiscussionBoardsModule.test.tsx — Discussion boards first-class module opens a topic, posts a reply, and edits an owned post
45. DynamicModulesContract.test.ts — Dynamic module contracts parses schema-driven records and universal context
46. DynamicModulesContract.test.ts — Dynamic module contracts rejects malformed module keys, identities, and timestamps
47. DynamicModulesModule.test.tsx — Dynamic records first-class module fails closed when the page block has no module key
48. DynamicModulesModule.test.tsx — Dynamic records first-class module uses configured module key and exposes fields, relations, activity, and favorites
49. FavoritesContract.test.ts — Favorites contract parses preference and removal mutations
50. FavoritesContract.test.ts — Favorites contract parses secured list and universal detail data
51. FavoritesContract.test.ts — Favorites contract rejects malformed identities and nested contracts
52. FavoritesModule.test.tsx — Favorites first-class module filters without sending caller identity
53. FavoritesModule.test.tsx — Favorites first-class module opens a secured favorite and updates pin preferences
54. FavoritesModule.test.tsx — Favorites first-class module removes by universal record identity
55. FilesContract.test.ts — Files module contracts fails closed on malformed identity, timestamps, versions, and leaked storage keys
56. FilesContract.test.ts — Files module contracts parses secured universal file details without storage metadata
57. FilesModule.test.tsx — Files first-class module loads secured details with attachments, activity, locks, fields, and favorites
58. FilesModule.test.tsx — Files first-class module shows a safe empty state
59. FilesModule.test.tsx — Files first-class module updates metadata and adds or removes secured attachment links
60. FilesModule.test.tsx — Files first-class module uploads bytes without caller-controlled tenant or storage metadata
61. FormsRuntime.test.tsx — forms runtime parses bounded presentation definitions and validates typed values
62. FormsRuntime.test.tsx — forms runtime renders safe controls and submits only definition-owned values
63. GlobalSearchContract.test.ts — Global search contract accepts an empty-query module bootstrap contract
64. GlobalSearchContract.test.ts — Global search contract parses secured record results and safe matched fields
65. GlobalSearchContract.test.ts — Global search contract rejects malformed identities, states, and nested fields
66. GlobalSearchModule.test.tsx — Global secured search first-class module applies module filters and rejects a one-character query locally
67. GlobalSearchModule.test.tsx — Global secured search first-class module requests the next bounded result page
68. GlobalSearchModule.test.tsx — Global secured search first-class module searches secured records and toggles canonical favorite state
69. KnowledgeArticlesContract.test.ts — Knowledge articles module contracts fails closed on malformed identities, timestamps, and versions
70. KnowledgeArticlesContract.test.ts — Knowledge articles module contracts parses versioned universal article and dynamic-field contracts
71. KnowledgeArticlesModule.test.tsx — Knowledge Core first-class module creates a draft without caller-controlled tenant scope
72. KnowledgeArticlesModule.test.tsx — Knowledge Core first-class module hides authoring controls and shows a safe permission-scoped empty state
73. KnowledgeArticlesModule.test.tsx — Knowledge Core first-class module loads secured lifecycle details, revision evidence, and preserves favorites
74. KnowledgeCoreContract.test.ts — Knowledge Core wire contracts parses bounded question, feedback, and evidence-backed gap contracts
75. KnowledgeCoreContract.test.ts — Knowledge Core wire contracts parses lifecycle lists and server-derived capabilities
76. KnowledgeCoreContract.test.ts — Knowledge Core wire contracts parses permission-aware item details
77. KnowledgeCoreContract.test.ts — Knowledge Core wire contracts parses revisions, owners and collections
78. KnowledgeCoreContract.test.ts — Knowledge Core wire contracts rejects invalid lifecycle and identities
79. MailReaderContract.test.ts — Mail reader contract parses read and favorite mutations
80. MailReaderContract.test.ts — Mail reader contract parses secured account, list, and detail contracts
81. MailReaderContract.test.ts — Mail reader contract rejects malformed identities and nested data
82. MailReaderModule.test.tsx — Mail reader first-class module filters by account and does not send caller identity
83. MailReaderModule.test.tsx — Mail reader first-class module hides read-state mutation for a shared mailbox reader
84. MailReaderModule.test.tsx — Mail reader first-class module opens mail, marks it read, and renders body text without executable HTML
85. NotificationsContract.test.ts — Notifications module contracts fails closed on malformed identities, timestamps, states, and versions
86. NotificationsContract.test.ts — Notifications module contracts parses secured list, source-record detail, and mutation contracts
87. NotificationsModule.test.tsx — Notifications first-class module marks an opened item read and exposes secured source activity and favorites
88. NotificationsModule.test.tsx — Notifications first-class module uses only local search and unread inputs and can dismiss the current notification
89. PageRenderer.test.tsx — server-driven page renderer fails closed on malformed role simulation metadata
90. PageRenderer.test.tsx — server-driven page renderer fails closed when a block type was not authorized by the bootstrap
91. PageRenderer.test.tsx — server-driven page renderer fails closed when the manifest renderer key is not code-registered
92. PageRenderer.test.tsx — server-driven page renderer reconstructs validated flat parent relationships and renders each block once
93. PageRenderer.test.tsx — server-driven page renderer rejects invalid IDs, duplicate IDs, orphaned parents, and parent cycles
94. PageRenderer.test.tsx — server-driven page renderer renders authorized text as escaped React content with safe visual enums
95. PageRenderer.test.tsx — server-driven page renderer simulates presentation visibility without changing the canonical page
96. PageRenderer.test.tsx — server-driven page renderer uses bundled renderer keys and safe manifest defaults while ignoring moduleRef
97. PuckPageDesignerAdapter.test.ts — Puck page-designer adapter builds the Puck palette from the effective runtime component registry without changing canonical JSON
98. PuckPageDesignerAdapter.test.ts — Puck page-designer adapter fails closed before save when canonical or editor JSON is invalid
99. PuckPageDesignerAdapter.test.ts — Puck page-designer adapter keeps normal runtime rendering independent of either editor vendor
100. PuckPageDesignerAdapter.test.ts — Puck page-designer adapter keeps the Chai candidate as a bounded reference pass-through, not a production adapter
101. PuckPageDesignerAdapter.test.ts — Puck page-designer adapter persists controlled edits while retaining bindings, actions, responsive rules, and security metadata
102. PuckPageDesignerAdapter.test.ts — Puck page-designer adapter renders the round-tripped proof through the normal server-driven runtime
103. PuckPageDesignerAdapter.test.ts — Puck page-designer adapter selects one pinned launch editor and losslessly round-trips the canonical proof
104. RecordActivityContract.test.ts — Record activity contract parses secured search and sanitized activity data
105. RecordActivityContract.test.ts — Record activity contract rejects malformed identities and nested collections
106. RecordActivityContract.test.ts — Record activity contract requires bounded contract types and object details
107. RecordActivityModule.test.tsx — Record activity first-class module applies event and UTC date filters without caller identity
108. RecordActivityModule.test.tsx — Record activity first-class module opens the secured timeline and toggles its favorite
109. RecordActivityModule.test.tsx — Record activity first-class module requests the next bounded timeline page
110. RecordGraphContract.test.ts — Record graph contract parses add and remove results
111. RecordGraphContract.test.ts — Record graph contract parses independently secured related and contextual knowledge
112. RecordGraphContract.test.ts — Record graph contract parses secured search and graph responses
113. RecordGraphContract.test.ts — Record graph contract rejects malformed identities and nested collections
114. RecordGraphModule.test.tsx — Record graph first-class module adds an editable relation using canonical record and relation keys
115. RecordGraphModule.test.tsx — Record graph first-class module does not expose deletion when either endpoint is read-only
116. RecordGraphModule.test.tsx — Record graph first-class module opens a bounded secured graph and toggles its favorite
117. RelatedKnowledgePanel.test.tsx — Related Knowledge panel renders only the secured related response
118. ReservationsModule.test.tsx — ReservationsModule loads secured reservations and opens payment-aware detail
119. ReservationsModule.test.tsx — ReservationsModule shows protected payment references without raw card fields
120. RoleSimulation.test.tsx — developer/admin role simulation previews presentation roles but loads data with the unchanged real-user API
121. RuntimeAssetManager.test.tsx — RuntimeAssetManager keeps shared assets read-only for non-managers
122. RuntimeAssetManager.test.tsx — RuntimeAssetManager lists authorized assets without exposing tenant or storage routing
123. RuntimeAssetManager.test.tsx — RuntimeAssetManager uploads and removes tenant-owned assets only when the server grants management
124. RuntimeDocumentMetadata.test.tsx — runtime document metadata emits public title, description, robots, and same-origin canonical metadata
125. RuntimeDocumentMetadata.test.tsx — runtime document metadata keeps private pages out of indexes and suppresses canonical/description output
126. RuntimeDocumentMetadata.test.tsx — runtime document metadata replaces route metadata and rejects off-origin canonical targets
127. SaasDesignStudio.test.tsx — in-SaaS Design studio makes duplication explicit and opens Puck before the Monaco advanced view
128. SaasDesignStudio.test.tsx — in-SaaS Design studio protects unsaved menu changes before leaving Design mode
129. SaasDesignStudio.test.tsx — in-SaaS Design studio reuses the exact shared PageKey when Add existing is saved to another User Type menu
130. TenantAssetsContract.test.ts — tenant asset contract accepts bounded secured runtime URLs
131. TenantAssetsContract.test.ts — tenant asset contract rejects active and duplicate asset identities
132. WebLinksContract.test.ts — Web links module contracts parses versioned universal records, capabilities, and dynamic fields
133. WebLinksContract.test.ts — Web links module contracts rejects unsafe URLs, malformed identities, timestamps, and versions
134. WebLinksModule.test.tsx — Web links first-class module creates a link without caller-controlled tenant scope
135. WebLinksModule.test.tsx — Web links first-class module hides authoring controls from readers
136. WebLinksModule.test.tsx — Web links first-class module loads secured detail with a hardened external link and universal features
137. WorkOrdersContract.test.ts — Work Orders contracts fails closed on malformed identities, statuses, and versions
138. WorkOrdersContract.test.ts — Work Orders contracts parses lifecycle, assignment, and universal-record identities
139. WorkOrdersModule.test.tsx — Work Orders first-class module creates without caller-controlled tenant scope
140. WorkOrdersModule.test.tsx — Work Orders first-class module loads secured lifecycle detail and changes status with concurrency
141. api.test.ts — tenant runtime API loads a binding by key without caller-controlled identity or operation
142. api.test.ts — tenant runtime API loads a configured slug without sending caller-controlled tenant scope
143. api.test.ts — tenant runtime API loads only a page-key target and rejects malformed presentation JSON
144. api.test.ts — tenant runtime API logs in without caller-controlled SaaS scope
145. api.test.ts — tenant runtime API rejects a component manifest that names an unsafe renderer
146. api.test.ts — tenant runtime API rejects malformed and mismatched binding contracts
147. api.test.ts — tenant runtime API submits form values through the authenticated page route without caller scope
148. api.test.ts — tenant runtime API uses authenticated Calendar routes without caller-controlled scope
149. api.test.ts — tenant runtime API uses authenticated Contacts routes without caller-controlled scope
150. api.test.ts — tenant runtime API uses authenticated Files routes while keeping storage and tenant scope server-owned
151. designApi.test.ts — in-SaaS Design API makes duplication explicit and fails closed without a Design session
152. designApi.test.ts — in-SaaS Design API uses the short-lived builder bearer session without browser-owned database scope
153. pageAdoption.test.ts — tenant page adoption loads three-way evidence and explicitly applies or undoes without client scope
154. pageAdoption.test.ts — tenant page adoption rejects an unsafe page before requesting adoption evidence
155. pageAdoption.test.ts — tenant page adoption rejects non-drift and malformed presentation evidence
156. pageEditLock.test.ts — tenant page edit lock acquires, renews, and releases only the server-scoped page lease
157. pageEditLock.test.ts — tenant page edit lock rejects an unsafe page target before lock acquisition
158. pageEditLock.test.ts — tenant page edit lock renews halfway through a valid lease and rejects incomplete leases
159. pageEditLock.test.ts — tenant page edit lock represents a conflicting editor without exposing their identity
160. pagePublicationLifecycle.test.ts — page publication lifecycle advances exactly one runtime version and consumes the published draft
161. pagePublicationLifecycle.test.ts — page publication lifecycle keeps the runtime version unchanged while a draft is saved
162. pagePublicationLifecycle.test.ts — page publication lifecycle marks a draft based on an old runtime version as stale
163. pagePublicationLifecycle.test.ts — page publication lifecycle rejects a publish acknowledgement for a different snapshot
164. pagePublicationLifecycle.test.ts — page publication lifecycle rejects skipped or replayed runtime versions
165. pageRevisions.test.ts — tenant page revisions preserves server validation failures as a non-published save report
166. pageRevisions.test.ts — tenant page revisions rejects malformed historical presentation JSON before an editor can load it
167. pageRevisions.test.ts — tenant page revisions rejects unsafe page and revision identifiers before a request
168. pageRevisions.test.ts — tenant page revisions uses authenticated page targets without caller-controlled tenant scope
169. pageValidation.test.ts — canonical page document validation accepts one valid vendor-neutral document for save, publish, and runtime
170. pageValidation.test.ts — canonical page document validation allows warning-bearing drafts but never allows them to publish
171. pageValidation.test.ts — canonical page document validation blocks parent cycles and documents deeper than the runtime bound
172. pageValidation.test.ts — canonical page document validation never publishes an invalid first-class form definition
173. pageValidation.test.ts — canonical page document validation rejects malformed envelopes and invalid block identities
174. pageValidation.test.ts — canonical page document validation rejects the same malformed nested structures that runtime rejects
175. pageValidation.test.ts — canonical page document validation reports removed merge anchors against the prior document
176. puckCssSecurity.test.ts — Puck CSS production security removes the external font import while preserving editor styles
177. puckCssSecurity.test.ts — Puck CSS production security targets only the pinned Puck distribution stylesheet
178. router.test.ts — runtime browser routing maps encoded pathnames and language targets without accepting traversal
179. router.test.ts — runtime browser routing uses a validated page-key history fallback for shell navigation
180. useRuntimeDataBinding.test.tsx — runtime data binding hook does not call the gateway for an unbound block
181. useRuntimeDataBinding.test.tsx — runtime data binding hook loads an approved key and exposes only the returned data
182. webSecurity.test.ts — web security request proof adds proof only to unsafe requests
183. webSecurity.test.ts — web security request proof creates and reuses a host-scoped CSRF token
184. webSecurity.test.ts — web security request proof does not overwrite an unrelated authorization header

**Universal Inbox UI — 46 passed**
1. ContextualItemDetail.test.tsx — ContextualItemDetail maps AiActionApproval to its approval renderer
2. ContextualItemDetail.test.tsx — ContextualItemDetail maps AiInsight to its ai-alert renderer
3. ContextualItemDetail.test.tsx — ContextualItemDetail maps Conversation to its message renderer
4. ContextualItemDetail.test.tsx — ContextualItemDetail maps CustomWebhook to its generic renderer
5. ContextualItemDetail.test.tsx — ContextualItemDetail maps PageFormSubmission to its form renderer
6. ContextualItemDetail.test.tsx — ContextualItemDetail maps PaymentEvent to its payment renderer
7. ContextualItemDetail.test.tsx — ContextualItemDetail renders only the secured projection and directs users to the canonical source
8. DeliveryDebugPanel.test.tsx — DeliveryDebugPanel shows safe failure fields and retries only authorized rows
9. GoClawApprovalQueue.test.tsx — GoClawApprovalQueue fails closed and clears review content when loading fails
10. GoClawApprovalQueue.test.tsx — GoClawApprovalQueue makes a stale ActivityVersion fence prominent
11. GoClawApprovalQueue.test.tsx — GoClawApprovalQueue shows summary, secured context, draft, actions, risk, confidence, and lineage
12. GoClawApprovalQueue.test.tsx — GoClawApprovalQueue submits only changed action input with reviewer notes and refreshes
13. InboxHumanStateControls.test.tsx — InboxHumanStateControls offers reopen for terminal work
14. InboxHumanStateControls.test.tsx — InboxHumanStateControls uses only InboxItem identity for read, assignment, priority, waiting, snooze, resolve and close
15. UniversalInbox.test.tsx — UniversalInbox maps views to secured queue filters instead of client-side identity filters
16. UniversalInbox.test.tsx — UniversalInbox removes queue content and shows a safe error when secured loading fails
17. UniversalInbox.test.tsx — UniversalInbox renders views, InboxItem queue, and generic source detail as three panes
18. UniversalInboxBell.test.tsx — UniversalInboxBell opens the Universal Inbox by InboxItemId, never ConversationId
19. UniversalInboxBell.test.tsx — UniversalInboxBell refreshes the secured badge when inbox activity announces a change
20. UniversalInboxBell.test.tsx — UniversalInboxBell surfaces approval, human-review, and GoClaw-working states
21. WorkflowApprovalControls.test.tsx — WorkflowApprovalControls approves using only Inbox identity and the current activity fence
22. WorkflowApprovalControls.test.tsx — WorkflowApprovalControls does not render decisions for non-workflow approval items
23. WorkflowApprovalControls.test.tsx — WorkflowApprovalControls shows a safe failure and remains available for retry
24. approvalClient.test.ts — approval queue HTTP client posts reviewer edits without accepting identity fields
25. approvalClient.test.ts — approval queue HTTP client rejects cross-origin configuration and unbounded row requests
26. approvalClient.test.ts — approval queue HTTP client uses fixed same-origin disposition routes
27. approvalClient.test.ts — approval queue HTTP client uses only the secured same-origin GET and sends no caller identity
28. approvalContracts.test.ts — approval queue contracts parses canonical batches, draft JSON, actions, and activity lineage
29. approvalContracts.test.ts — approval queue contracts rejects duplicate batch and suggestion lineage
30. approvalContracts.test.ts — approval queue contracts rejects inconsistent stale fences before rendering
31. client.test.ts — Universal Inbox HTTP client loads badge and notifications through fixed same-origin paths
32. client.test.ts — Universal Inbox HTTP client rejects cross-origin API configuration
33. client.test.ts — Universal Inbox HTTP client sends a version-fenced workflow decision without tenant identity
34. client.test.ts — Universal Inbox HTTP client sends one bounded human-state mutation without tenant identity
35. client.test.ts — Universal Inbox HTTP client uses only same-origin secured item endpoints and never sends tenant identity query parameters
36. client.test.ts — Universal Inbox HTTP client verifies detail identity against the requested InboxItem
37. contracts.test.ts — Universal Inbox contracts derives a breached SLA presentation from the secured due time
38. contracts.test.ts — Universal Inbox contracts fails closed when detail identity differs from the selected item
39. contracts.test.ts — Universal Inbox contracts normalizes a service detail envelope while retaining source identity
40. contracts.test.ts — Universal Inbox contracts normalizes omitted zero badge aggregates and preserves attention counts
41. contracts.test.ts — Universal Inbox contracts parses a stable support-ticket reference
42. contracts.test.ts — Universal Inbox contracts parses notification InboxItem identities and rejects duplicates
43. contracts.test.ts — Universal Inbox contracts parses owner-managed email ticketing settings and validates mutation identity
44. contracts.test.ts — Universal Inbox contracts parses typed InboxItem queue rows
45. contracts.test.ts — Universal Inbox contracts rejects duplicate InboxItem pointers
46. contracts.test.ts — Universal Inbox contracts rejects invalid status values before rendering

**End-to-end launch proofs — 65 passed**
1. tests.e2e.test_ai_rag_proof.AiRagProofContractTests.test_every_database_contract_exists_in_current_exports
2. tests.e2e.test_ai_rag_proof.AiRagProofContractTests.test_implementations_and_evidence_are_present
3. tests.e2e.test_ai_rag_proof.AiRagProofContractTests.test_journey_order_is_fixed
4. tests.e2e.test_ai_rag_proof.AiRagProofContractTests.test_qwen_profile_preserves_canonical_graph_and_dimensions
5. tests.e2e.test_ai_rag_proof.AiRagProofContractTests.test_repeatability_rollback_and_physical_boundary_are_explicit
6. tests.e2e.test_ai_rag_proof.AiRagProofContractTests.test_security_order_is_explicit
7. tests.e2e.test_appliance_proof.ApplianceProofContractTests.test_all_implementations_evidence_runner_and_runbook_exist
8. tests.e2e.test_appliance_proof.ApplianceProofContractTests.test_catalog_is_available_but_not_a_startup_dependency
9. tests.e2e.test_appliance_proof.ApplianceProofContractTests.test_field_service_closes_over_local_runtime
10. tests.e2e.test_appliance_proof.ApplianceProofContractTests.test_five_operational_planes_are_local_and_template_library_is_central
11. tests.e2e.test_appliance_proof.ApplianceProofContractTests.test_journey_order_is_fixed
12. tests.e2e.test_appliance_proof.ApplianceProofContractTests.test_runtime_claim_is_firecracker_systemd_and_honest
13. tests.e2e.test_appliance_proof.ApplianceProofContractTests.test_sovereignty_and_outage_preserve_local_runtime
14. tests.e2e.test_communications_proof.CommunicationsProofContractTests.test_authorization_fences_and_external_secrets_are_explicit
15. tests.e2e.test_communications_proof.CommunicationsProofContractTests.test_deterministic_provider_fixture_uses_stable_external_secret_contract
16. tests.e2e.test_communications_proof.CommunicationsProofContractTests.test_every_database_contract_exists_in_current_exports
17. tests.e2e.test_communications_proof.CommunicationsProofContractTests.test_implementations_and_evidence_are_present
18. tests.e2e.test_communications_proof.CommunicationsProofContractTests.test_journey_order_is_fixed
19. tests.e2e.test_communications_proof.CommunicationsProofContractTests.test_repeatability_and_rollback_are_explicit
20. tests.e2e.test_custom_data_proof.CustomDataProofContractTests.test_authoring_and_runtime_authority_are_separated
21. tests.e2e.test_custom_data_proof.CustomDataProofContractTests.test_complete_journey_order_is_fixed
22. tests.e2e.test_custom_data_proof.CustomDataProofContractTests.test_every_database_contract_exists_in_current_exports
23. tests.e2e.test_custom_data_proof.CustomDataProofContractTests.test_implementations_and_evidence_are_present
24. tests.e2e.test_custom_data_proof.CustomDataProofContractTests.test_repeatability_and_cross_database_rollback_are_explicit
25. tests.e2e.test_goclaw_approval_proof.GoClawApprovalProofContractTests.test_every_database_contract_exists_in_current_exports
26. tests.e2e.test_goclaw_approval_proof.GoClawApprovalProofContractTests.test_implementations_and_evidence_are_present
27. tests.e2e.test_goclaw_approval_proof.GoClawApprovalProofContractTests.test_journey_order_is_fixed
28. tests.e2e.test_goclaw_approval_proof.GoClawApprovalProofContractTests.test_physical_environment_claims_are_excluded
29. tests.e2e.test_goclaw_approval_proof.GoClawApprovalProofContractTests.test_repeatability_and_rollback_are_explicit
30. tests.e2e.test_goclaw_approval_proof.GoClawApprovalProofContractTests.test_server_scope_and_fences_are_explicit
31. tests.e2e.test_installable_service_proof.InstallableServiceProofContractTests.test_authorization_and_exact_artifact_fences_are_explicit
32. tests.e2e.test_installable_service_proof.InstallableServiceProofContractTests.test_every_database_contract_exists_in_current_exports
33. tests.e2e.test_installable_service_proof.InstallableServiceProofContractTests.test_firecracker_boundary_is_honest_and_docker_free_in_production
34. tests.e2e.test_installable_service_proof.InstallableServiceProofContractTests.test_implementations_and_evidence_are_present
35. tests.e2e.test_installable_service_proof.InstallableServiceProofContractTests.test_journey_order_is_fixed
36. tests.e2e.test_installable_service_proof.InstallableServiceProofContractTests.test_proof_does_not_hide_separate_worker_host_work
37. tests.e2e.test_installable_service_proof.InstallableServiceProofContractTests.test_repeatability_rollback_and_targets_are_explicit
38. tests.e2e.test_marketplace_snapshot_proof.MarketplaceSnapshotProofContractTests.test_authorization_and_exact_version_fences_are_explicit
39. tests.e2e.test_marketplace_snapshot_proof.MarketplaceSnapshotProofContractTests.test_every_database_contract_exists_in_current_exports
40. tests.e2e.test_marketplace_snapshot_proof.MarketplaceSnapshotProofContractTests.test_implementations_and_evidence_are_present
41. tests.e2e.test_marketplace_snapshot_proof.MarketplaceSnapshotProofContractTests.test_journey_order_is_fixed
42. tests.e2e.test_marketplace_snapshot_proof.MarketplaceSnapshotProofContractTests.test_real_payment_is_not_claimed
43. tests.e2e.test_marketplace_snapshot_proof.MarketplaceSnapshotProofContractTests.test_repeatability_and_rollback_are_explicit
44. tests.e2e.test_new_saas_proof.NewSaasProofContractTests.test_complete_journey_order_is_fixed
45. tests.e2e.test_new_saas_proof.NewSaasProofContractTests.test_every_database_contract_exists_in_current_exports
46. tests.e2e.test_new_saas_proof.NewSaasProofContractTests.test_implementations_and_evidence_are_present
47. tests.e2e.test_new_saas_proof.NewSaasProofContractTests.test_repeatability_and_rollback_are_explicit
48. tests.e2e.test_snowflake_proof.SnowflakeProofContractTests.test_every_database_contract_exists_in_current_exports
49. tests.e2e.test_snowflake_proof.SnowflakeProofContractTests.test_field_service_fixture_covers_all_manifest_datasets_and_failure_safety
50. tests.e2e.test_snowflake_proof.SnowflakeProofContractTests.test_implementations_evidence_runner_and_runbook_exist
51. tests.e2e.test_snowflake_proof.SnowflakeProofContractTests.test_journey_order_is_fixed
52. tests.e2e.test_snowflake_proof.SnowflakeProofContractTests.test_provider_and_runtime_claims_are_honest
53. tests.e2e.test_snowflake_proof.SnowflakeProofContractTests.test_rollback_and_target_contract_are_explicit
54. tests.e2e.test_snowflake_proof.SnowflakeProofContractTests.test_server_scope_and_role_isolation_are_explicit
55. tests.e2e.test_support_dogfood_proof.SupportDogfoodProofTests.test_static_proof_is_exact_version_and_customer_safe
56. tests.e2e.test_visual_build_proof.VisualBuildProofContractTests.test_canonical_fixture_carries_module_binding_and_role_metadata
57. tests.e2e.test_visual_build_proof.VisualBuildProofContractTests.test_complete_journey_order_is_fixed
58. tests.e2e.test_visual_build_proof.VisualBuildProofContractTests.test_every_database_contract_exists_in_current_exports
59. tests.e2e.test_visual_build_proof.VisualBuildProofContractTests.test_implementations_and_evidence_are_present
60. tests.e2e.test_visual_build_proof.VisualBuildProofContractTests.test_repeatability_authorization_and_rollback_are_explicit
61. tests.e2e.test_workflow_proof.WorkflowProofContractTests.test_authorization_and_approval_fences_are_explicit
62. tests.e2e.test_workflow_proof.WorkflowProofContractTests.test_every_database_contract_exists_in_current_exports
63. tests.e2e.test_workflow_proof.WorkflowProofContractTests.test_implementations_and_evidence_are_present
64. tests.e2e.test_workflow_proof.WorkflowProofContractTests.test_journey_order_is_fixed
65. tests.e2e.test_workflow_proof.WorkflowProofContractTests.test_repeatability_and_rollback_are_explicit

---

Capability review: 2026-09-14. [View the canonical guide](https://support.buildwithhq.com/trust/battle-test-2026-08-30.html).