Related-capability and workflow references identify the seams each scenario exercises. The lifecycle coverage record retains transitions that still need individual proof.
The pinned service and browser assertions support the registered bindings. Original test references remain beside each scenario so partial evidence and unresolved conformance remain reviewable.
Coverage
Rulecovered
Transitioncovered
Validationgap: FND-ACC-BKS-070
Permissioncovered
Edgegap: FND-ACC-BKS-070
Failurecovered
Boundarycovered
Concurrencygap: FND-ACC-BKS-070
Invariantcovered
Interactioncovered
Test Scenarios
12 scenarios proving CAP-ACC-BKS-009; 9 bound to an existing test.
An application-authorized reader and administrator share the run-owned setup. A third principal lacks the relevant resource grant.
Steps
Read the relevant configuration as the reader, attempt each supported mutation, then repeat with the matching administrator grants. Repeat the reads without their resource grants.
Expected
The permission outcomes match the cited authorization rule, and refused mutations leave every configured value unchanged.
Data
Run-owned records for the stated setup; retain the initial values for comparison.