The coverage map distinguishes specified examples from missing proof. A covered category means an expected case is specified; executable bindings and their run results remain separate evidence. Each required rule has a proof link or an explicit coverage finding in the structured rule ledger.
Unit details and organization history keep separate versions. Save a unit detail change and then end one of its organization links; inspect both histories.
Finance replacement preserves unit structure. Save financial settings, replace unit contact details and then replace financial settings at their own version.
Coverage
Rulecovered
Transitionnot-applicable
Validationcovered
Permissioncovered
Edgecovered
Failuregap: FND-MBR-STR-059
Boundarycovered
Concurrencycovered
Invariantcovered
Interactioncovered
Test Scenarios
12 scenarios proving CAP-MBR-STR-006; 5 bound to an existing test.
01Unit codes distinguish records and reject malformed valuesvalidationapinegativetest
An isolated workspace contains the records and current versions needed for the case.
Steps
Save a unit detail change and then end one of its organization links; inspect both histories.
Expected
Unit versions describe the detail edit and link versions describe the ending with their respective actors.
Data
Separate fixture records for the accepted and refused operations.
Source
services-membership:modules/structure/services/persistence/organizational-units.ts:getOrganizationalUnit,services-membership:docs/migrations/structure/README.md#Tables and migrations
11Finance replacement preserves unit structureinteractionapiproposed
An isolated workspace contains the records and current versions needed for the case.
Steps
Exercise the capability’s exposed operations with its read-only and management callers, then repeat with application access removed, an unlicensed workspace and an unavailable workspace.
Expected
Each named operation requires its declared authority; admission failures occur before any record or calculated result is exposed.
Data
Separate fixture records for the accepted and refused operations.
Source
services-membership:tests/unit/route-authorization.spec.ts#route authorization: every Membership operation names its permission › requires membership.structure.read of every structure read and membership.structure.manage of every change,services-membership:modules/configuration/aws/api/configuration.routes.ts:configurationModuleRoutes,services-membership:tests/e2e/terms-api.e2e.spec.ts#the terms API, end to end in process › refuses a caller who holds no key in the tenant