---
id: TST-PFM-QRY-409
title: Platform api interception
kind: unit
product_area: platform
module: queries
revision: 1
status: draft
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  rhythm-v2-docs: 99376625d3e7ac26936413cfc31a88fba6562464
repository: services-platform
files:
  - modules/queries/tests/unit/services/rendering/api-interception.spec.ts
implements:
  - ATS-PFM-QRY-013-05
  - ATS-PFM-QRY-013-10
environment: mock
implementation_state: implemented
latest_result: not-run
latest_run_at: null
latest_run_ref: null
conformance: not-verified
estimated_minutes: 1
isolation: A fresh test context and file-owned response fixtures.
evidence:
  - 'services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts'
assertion_bindings:
  - scenario: ATS-PFM-QRY-013-05
    source:
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#continues the
        console’s own GET
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#aborts a
        write to the console’s origin
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#aborts
        another origin, a macroservice’s or a third party’s
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#aborts a
        route of Platform off the allowlist, a write among them
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#aborts an
        allowlisted route in another tenant
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#aborts
        another report
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#logs a
        refusal with the method, origin, path and reason, never the query string
    scope: assertions cited by the scenario
    provenance: test
  - scenario: ATS-PFM-QRY-013-10
    source:
      - >-
        services-platform:modules/queries/tests/unit/services/rendering/api-interception.spec.ts#records a
        WebSocket the page opened as refused
    scope: contributing assertions; the scenario combines multiple files
    provenance: test
fixture_seams: []
---

# Platform api interception

## Verification Boundary

The file calls its named functions directly with controlled inputs and collaborator fixtures.

## What This Suite Proves

The assertions check api interception at the function boundary. Bound specification examples inherit this boundary and do not become API or deployed workflow proofs.

## What It Does Not Prove

The file does not establish public-route authorization, real infrastructure behavior or a passing result at the pinned revision.

## Real Dependencies and Test Doubles

Direct function calls and file-owned collaborators define this unit boundary. The fixture seam references identify substitutions or configurable dependencies present in the source.

## Must Not Be Doubled

Keep the function whose output or effect is asserted real. Substituting that function would remove the behavior this suite exists to verify.