---
id: TST-PFM-QRY-447
title: Platform algolia isolation
kind: integration
product_area: platform
module: queries
revision: 1
status: draft
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  rhythm-v2-docs: 99376625d3e7ac26936413cfc31a88fba6562464
repository: services-platform
files:
  - modules/quick-search/tests/provider/algolia-isolation.provider.spec.ts
implements:
  - ATS-PFM-QRY-016-04
environment: deployed-dev
implementation_state: implemented
latest_result: not-run
latest_run_at: null
latest_run_ref: null
conformance: not-verified
estimated_minutes: 5
isolation: The provider index and workspace filters allocated by the isolation suite.
evidence:
  - 'services-platform:modules/quick-search/tests/provider/algolia-isolation.provider.spec.ts'
assertion_bindings:
  - scenario: ATS-PFM-QRY-016-04
    source:
      - >-
        services-platform:modules/quick-search/tests/provider/algolia-isolation.provider.spec.ts#reaches no
        tombstoned document, because the key filters on the live state
      - >-
        services-platform:modules/quick-search/tests/provider/algolia-isolation.provider.spec.ts#shows all
        three, the undiscoverable one included, when it sends no status filter at all
    scope: contributing assertions; the scenario combines multiple files
    provenance: test
fixture_seams: []
---

# Platform algolia isolation

## Verification Boundary

The suite writes and searches its allocated provider index through real provider credentials.

## What This Suite Proves

The assertions check workspace and record-type confinement through issued search credentials, including attempted filter widening.

## What It Does Not Prove

The provider boundary does not establish console search timing, index publication atomicity or successful execution at the pinned revision.

## Real Dependencies and Test Doubles

The configured search provider is real. The suite owns its test index, document fixtures and issued credentials.

## Must Not Be Doubled

Keep secured-key derivation, provider search and filter enforcement real. A local search response cannot establish provider confinement.