01must proveProposed | Staff can read workspace-specific exceptions newest first, filter by state, kind, subject kind and order, count them by kind and state and inspect individual records. no proof recorded yet | permission | api, database | test |
02must proveProposed | Each subject has one open exception per kind; recurrence updates its occurrence count and details, and resolution permits a new exception later. origin: D-P5-08 (build decision, not a product ruling): services-commerce:docs/migrations/operations/README.md#D-P5-08 no proof recorded yet | invariant | service, database | test |
03must proveProposed | Acknowledgement records staff awareness and resolution records closure, both with reasons, intervention history and audit invocation; resolution also requires its result and prevents either action on the resolved exception. no proof recorded yet | lifecycle | api, service | test |
04must proveProposed | The operations queue rejects portal callers, read-only interventions and interventions lacking reasons. no proof recorded yet | permission | api | observed |
05Proposed | Operations tiles combine open and acknowledged counts for each console kind and show an empty-attention state when no findings remain open. | policy | console | test |
06must proveProposed | Exception kind determines the Operations action menu, missing permissions mark actions unavailable, and the service adapter separately checks whether each subject action has a route. origin: DEF-COM-0820 (acceptance defect) no proof recorded yet | permission | console | observed |
07must proveProposed | Resolve collects evidence and sends it as both reason and resolution, while other Operations interventions collect a reason. no proof recorded yet | validation | console | test |
08must proveProposed | Unsupported tender retry, mirror reconciliation, label void, return receipt and reservation-release actions report that they are unavailable and send no request. no proof recorded yet | policy | console | test |
09Proposed | Opening Operations requires its view permission mapped to exception-read authority, and the screen offers no bulk intervention. | permission | console | observed |
10Proposed | Operations loads at most 1,000 findings and filters and sorts that browser-held collection because the service supplies neither total count nor search or sort. | policy | console | observed |
11Proposed | The operations HTTP function exposes its public health check without a security context. | policy | api | test |