--- id: ATS-PFM-ELG-014 scope: CAP-PFM-ELG-014 product_area: platform module: eligibility revision: 3 status: proposed approved_by: null approved_at: null source_sha: services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1 react-console: baf6dae382d6f41dce976c7f848667ccc37e076f scenarios: - id: ATS-PFM-ELG-014-01 title: Apply delegation authority level: api proves: - BR-CAP-PFM-ELG-014-01 preconditions: 'Owners, other holders, managers and readers exist.' steps: Attempt own and foreign assignment cover. expected: 'Delegate-own covers self, management covers others and reader-only requests fail.' negative: true data_needs: No fixtures beyond the described setup. bound_to: - >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets a holder with delegate-own delegate their own assignment - TST-PFM-ELG-492 - >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#refuses delegate-own on somebody else’s assignment, 403 - >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets a manager delegate somebody else’s assignment - >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#refuses a reader with neither key, 403 provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets a holder with delegate-own delegate their own assignment category: permission action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets a holder with delegate-own delegate their own assignment assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets a holder with delegate-own delegate their own assignment binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-02 title: Validate cover duration level: unit proves: - BR-CAP-PFM-ELG-014-02 preconditions: One assignment lasts at least 90 days and another ends within a month. steps: >- Try 59 minutes, one hour, 90 and 91 days, an overlong assignment-relative period and a past end. expected: >- One hour and 90 days satisfy duration bounds when the assignment permits; other cases name the failed bound. negative: true data_needs: No fixtures beyond the described setup. bound_to: - >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#refuses a window shorter than one hour - TST-PFM-ELG-510 - >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#accepts a window of exactly 90 days - >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#refuses a window longer than 90 days - >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#refuses a window that outlives its assignment - >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#refuses an end in the past provenance: test source: >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#refuses a window shorter than one hour category: boundary limitations: - FND-PFM-ELG-037 - FND-PFM-ELG-048 action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#refuses a window shorter than one hour assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/unit/rules.spec.js#refuses a window shorter than one hour binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-03 title: Require a valid colleague and holding level: api proves: - BR-CAP-PFM-ELG-014-03 preconditions: Default and ended assignments and an outside-customer user exist. steps: Attempt cover for each and self-cover. expected: 'All fail, with default cover directing the caller to a direct holding.' negative: true data_needs: No fixtures beyond the described setup. bound_to: - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses a role default, pointing to a direct assignment of the same scope - TST-PFM-ELG-498 - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses the delegator as their own delegate - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses a delegate of another customer - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses a delegation of an ended assignment provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses a role default, pointing to a direct assignment of the same scope category: validation action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses a role default, pointing to a direct assignment of the same scope assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses a role default, pointing to a direct assignment of the same scope binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-04 title: Cover all eligible direct holdings level: api proves: - BR-CAP-PFM-ELG-014-04 preconditions: A person has three direct assignments. steps: Delegate them together to one colleague. expected: Three cover rows and one notice counting them result. negative: false data_needs: No fixtures beyond the described setup. bound_to: - >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#delegates every assignment of the caller in one call - TST-PFM-ELG-492 - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#delegates every active assignment of the caller in one call, one row each - TST-PFM-ELG-498 - >- services-platform:modules/responsibilities/tests/integration/services/notices/responsibility-notices.integration.spec.js#tells the delegate once for “delegate all mine”, counting every assignment, and confirms once - TST-PFM-ELG-494 provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#delegates every assignment of the caller in one call category: transition limitations: - FND-PFM-ELG-037 action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#delegates every assignment of the caller in one call assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#delegates every assignment of the caller in one call binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-05 title: Limit early-ending actors level: api proves: - BR-CAP-PFM-ELG-014-05 preconditions: A cover arrangement is active. steps: 'Try ending as a third person, delegate and manager.' expected: The unrelated person cannot change it; authorized participants can end it. negative: true data_needs: No fixtures beyond the described setup. bound_to: - >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets the delegate end a delegation - TST-PFM-ELG-492 - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#lets the delegate end a delegation early - TST-PFM-ELG-498 - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#refuses a third person ending a delegation, and leaves it active provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets the delegate end a delegation category: permission action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets the delegate end a delegation assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/e2e/responsibilities.e2e.spec.js#lets the delegate end a delegation binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-06 title: Show and remove the cover banner level: browser proves: - BR-CAP-PFM-ELG-014-06 - AS-JNY-PFM-ELG-005-01 preconditions: Pat has a holding that receives attention. steps: 'Delegate to Sam, inspect Sam’s Home and end the arrangement.' expected: Home shows Pat’s named cover and items only while the arrangement applies. negative: false data_needs: No fixtures beyond the described setup. bound_to: - >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002 - TST-PFM-ELG-377 - >- services-platform:modules/attention/tests/integration/services/persistence/items.queries.integration.spec.js#reaches a delegate through the delegation, naming whom they cover for - TST-PFM-ELG-393 provenance: test source: >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002 category: interaction action_evidence: provenance: test source: >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002 assertion_evidence: provenance: test source: >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002 binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-07 title: Confirm handover to the holder level: api proves: - BR-CAP-PFM-ELG-014-07 preconditions: A manager arranges someone else’s cover. steps: Submit the handover. expected: >- The delegate receives the holder, count and end, and the original holder receives confirmation rather than the acting manager. negative: false data_needs: No fixtures beyond the described setup. bound_to: - >- services-platform:modules/responsibilities/tests/integration/services/notices/responsibility-notices.integration.spec.js#tells the delegate once and confirms to the person who delegated, even though they are the one acting - TST-PFM-ELG-494 - >- services-platform:modules/responsibilities/tests/integration/services/notices/responsibility-notices.integration.spec.js#confirms to the holder, not the manager, when a manager delegates someone else’s assignment - >- services-platform:modules/responsibilities/tests/e2e/responsibilities-notifications.e2e.spec.js#tells the delegate who handed them how many responsibilities, and confirms to the delegator who acted - TST-PFM-ELG-491 provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/notices/responsibility-notices.integration.spec.js#tells the delegate once and confirms to the person who delegated, even though they are the one acting category: rule action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/notices/responsibility-notices.integration.spec.js#tells the delegate once and confirms to the person who delegated, even though they are the one acting assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/notices/responsibility-notices.integration.spec.js#tells the delegate once and confirms to the person who delegated, even though they are the one acting binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-08 title: Report cover whose delegate became inactive level: api proves: - BR-CAP-PFM-ELG-014-08 preconditions: An active delegation exists before its recipient becomes inactive. steps: Run responsibility reconciliation. expected: The report identifies the inactive delegate while the delegation remains active. negative: false data_needs: Existing evidence fixtures provide the described setup. bound_to: - >- services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(d) reports a delegation to a user who is no longer active, and leaves it active - TST-PFM-ELG-502 provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(d) reports a delegation to a user who is no longer active, and leaves it active category: edge action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(d) reports a delegation to a user who is no longer active, and leaves it active assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(d) reports a delegation to a user who is no longer active, and leaves it active binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - id: ATS-PFM-ELG-014-09 title: End a holding with its cover category: interaction level: api proves: - BR-CAP-PFM-ELG-013-08 - BR-CAP-PFM-ELG-014-06 exercises: - CAP-PFM-ELG-014 - CAP-PFM-ELG-013 preconditions: A direct holding has active cover and an authorized manager has its current version. steps: End the holding and read both the cover arrangement and effective holdings. expected: >- Both ending changes commit together and neither person remains effective through the ended holding. negative: false data_needs: Run-owned records and a controlled clock where timing changes the result. bound_to: [] provenance: proposed source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/assignments.integration.spec.js#ends the assignment’s open delegations in the same transaction; react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002 action_evidence: provenance: proposed source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/assignments.integration.spec.js#ends the assignment’s open delegations in the same transaction; react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002 assertion_evidence: provenance: proposed source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/assignments.integration.spec.js#ends the assignment’s open delegations in the same transaction; react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002 binding_scope: This sequence is proposed and has no executable proof binding. - id: ATS-PFM-ELG-014-10 title: Report inactive cover without silently ending it category: interaction level: api proves: - BR-CAP-PFM-ELG-014-08 - BR-CAP-PFM-ELG-015-04 exercises: - CAP-PFM-ELG-014 - CAP-PFM-ELG-015 preconditions: A cover arrangement exists before the delegate becomes inactive. steps: >- Run nightly reconciliation, inspect its report and the cover row, then read effective attention. expected: >- The report names the inactive colleague while the arrangement is retained; ineffective coverage supplies no attention match. negative: false data_needs: Run-owned records and a controlled clock where timing changes the result. bound_to: [] provenance: proposed source: >- services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(d) reports a delegation to a user who is no longer active, and leaves it active; services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(a) writes one active role-default assignment of the declared role at the tenant action_evidence: provenance: proposed source: >- services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(d) reports a delegation to a user who is no longer active, and leaves it active; services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(a) writes one active role-default assignment of the declared role at the tenant assertion_evidence: provenance: proposed source: >- services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(d) reports a delegation to a user who is no longer active, and leaves it active; services-platform:modules/responsibilities/tests/integration/services/reconcile/reconcile-tenant.integration.spec.js#(a) writes one active role-default assignment of the declared role at the tenant binding_scope: This sequence is proposed and has no executable proof binding. - id: ATS-PFM-ELG-014-11 title: Transfer attention through temporary cover category: interaction level: browser proves: - BR-CAP-PFM-ELG-014-06 - BR-CAP-PFM-ELG-017-02 exercises: - CAP-PFM-ELG-014 - CAP-PFM-ELG-017 preconditions: One person holds an area and a colleague holds nothing. steps: 'Arrange cover, read the colleague’s attention and Home banner, end cover and repeat the reads.' expected: >- The colleague receives the item with the covering reason and named end while cover applies, then loses both. negative: false data_needs: Run-owned records and a controlled clock where timing changes the result. bound_to: - >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts - TST-PFM-ELG-377 provenance: test source: >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002; services-platform:modules/attention/tests/integration/services/persistence/items.queries.integration.spec.js#reaches a role audience’s holders, and not a user without the role action_evidence: provenance: test source: >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002; services-platform:modules/attention/tests/integration/services/persistence/items.queries.integration.spec.js#reaches a role audience’s holders, and not a user without the role assertion_evidence: provenance: test source: >- react-console:acceptance/platform-attention/playwright/journeys/responsibilities/RA-ACC-0002.spec.ts#RA-ACC-0002; services-platform:modules/attention/tests/integration/services/persistence/items.queries.integration.spec.js#reaches a role audience’s holders, and not a user without the role binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 - title: Audit accepted handover with its arrangement category: invariant level: api proves: - BR-CAP-PFM-ELG-013-14 preconditions: A person has an eligible holding and a different active colleague. steps: Create one cover arrangement and inspect its audit entry. expected: The audit identifies the created arrangement and supplied handover fields. negative: false data_needs: 'Run-owned fixtures, separate caller contexts and a controlled clock where required.' bound_to: - >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js - TST-PFM-ELG-498 provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#audits the delegation as a responsibility_delegation id: ATS-PFM-ELG-014-12 exercises: - CAP-PFM-ELG-013 - CAP-PFM-ELG-014 action_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#audits the delegation as a responsibility_delegation assertion_evidence: provenance: test source: >- services-platform:modules/responsibilities/tests/integration/services/persistence/delegations.integration.spec.js#audits the delegation as a responsibility_delegation binding_scope: >- The cited tests contribute their reachable assertions; the binding does not establish execution or every step of this scenario. binding_limitations: - FND-PFM-ELG-074 evidence: - >- services-platform: docs/responsibilities.md; docs/milestones/PLAT-M15-home-attention-and-responsibilities.md and plans/PLAT-M15-plan.md; docs/proposals/responsibilities-and-attention/16-decisions.md; aws/platform.service.ts (RESPONSIBILITIES_PERMISSIONS); modules/responsibilities/aws/api/responsibilities.routes.ts (delegations), rules.ts (delegation windows), services/persistence/delegations.ts, services/notices/responsibility-notices.ts, db/responsibility-delegations.table.ts; rule-level source and test references - >- react-console: components/responsibilities/my-responsibilities.tsx, covering-banner.tsx, responsibility-dialogs.tsx, app/(console)/console/[tenantId]/page.tsx (the banner on Home); acceptance/platform-attention/journeys/responsibilities/RA-ACC-0002 and the matching browser specification. related_coverage: - capability: CAP-PFM-ELG-013 scenario: ATS-PFM-ELG-014-09 - capability: CAP-PFM-ELG-015 scenario: ATS-PFM-ELG-014-10 - capability: CAP-PFM-ELG-017 scenario: ATS-PFM-ELG-014-11 coverage: rule: covered transition: 'gap: FND-PFM-ELG-066' validation: covered permission: 'gap: FND-PFM-ELG-066' edge: covered failure: 'gap: FND-PFM-ELG-066' boundary: covered concurrency: 'gap: FND-PFM-ELG-066' invariant: 'gap: FND-PFM-ELG-066' interaction: covered invariant_gaps: - invariant: INV-DOM-PFM-ELG-004-07 finding: FND-PFM-ELG-066 source: 'services-platform:modules/responsibilities/rules.ts:checkDelegationWindow' - invariant: INV-DOM-PFM-ELG-004-08 finding: FND-PFM-ELG-066 source: >- services-platform:modules/responsibilities/services/persistence/assignments.ts:refreshUnassignedFor - invariant: INV-DOM-PFM-ELG-004-09 finding: FND-PFM-ELG-066 source: >- services-platform:db/migrations/20261019011302_responsibilities.sql:platform.sync_derived_responsibilities transition_coverage: - model: STATE-PFM-ELG-006 from: active to: ended trigger: endResponsibilityDelegation source: 'services-platform:modules/responsibilities/services/persistence/delegations.ts:endDelegation' scenario: ATS-PFM-ELG-014-05 - model: STATE-PFM-ELG-006 from: active to: ended trigger: Manual ending of its underlying direct or template holding source: >- services-platform:modules/responsibilities/services/persistence/delegations.ts:endOpenDelegationsOf scenario: ATS-PFM-ELG-013-08 - model: STATE-PFM-ELG-006 from: active to: expired trigger: Current instant reaches cover end finding: FND-PFM-ELG-066 source: 'services-platform:modules/responsibilities/rules.ts:windowIncludes' permission_coverage: - key: platform.responsibilities.delegate-own finding: FND-PFM-ELG-066 reason: A capability-level authority scenario does not prove every operation protected by this key. - key: platform.responsibilities.manage finding: FND-PFM-ELG-066 reason: A capability-level authority scenario does not prove every operation protected by this key. - key: platform.responsibilities.read finding: FND-PFM-ELG-066 reason: A capability-level authority scenario does not prove every operation protected by this key. coverage_notes: meaning: >- Covered means a detailed scenario exists; it does not mean the scenario ran or every executable assertion conforms. gaps: >- Cover duration tests do not establish holding-start containment. Cover of derived or template holdings, expiry without a sweep, notice failures and competing cover endings need explicit cases. --- # Arrange temporary responsibility cover: Capability Test Specification ## Coverage The scenarios check observable outcomes against the cited contracts. The coverage map retains partial proof and unresolved design boundaries as findings. | Required Rule | Scenarios | |---|---| | `BR-CAP-PFM-ELG-014-01` | `ATS-PFM-ELG-014-01` | | `BR-CAP-PFM-ELG-014-02` | `ATS-PFM-ELG-014-02` | | `BR-CAP-PFM-ELG-014-03` | `ATS-PFM-ELG-014-03` | | `BR-CAP-PFM-ELG-014-04` | `ATS-PFM-ELG-014-04` | | `BR-CAP-PFM-ELG-014-05` | `ATS-PFM-ELG-014-05` | | `BR-CAP-PFM-ELG-014-06` | `ATS-PFM-ELG-014-06`, `ATS-PFM-ELG-014-09`, `ATS-PFM-ELG-014-11` | | `BR-CAP-PFM-ELG-014-07` | `ATS-PFM-ELG-014-07` | | `BR-CAP-PFM-ELG-014-08` | `ATS-PFM-ELG-014-08`, `ATS-PFM-ELG-014-10` | ## Interactions With Related Capabilities End a holding with its cover. End the holding and read both the cover arrangement and effective holdings. Report inactive cover without silently ending it. Run nightly reconciliation, inspect its report and the cover row, then read effective attention. Transfer attention through temporary cover. Arrange cover, read the colleague’s attention and Home banner, end cover and repeat the reads.