The coverage map distinguishes specified examples from missing proof. A covered category means an expected case is specified; executable bindings and their run results remain separate evidence. Each required rule has a proof link or an explicit coverage finding in the structured rule ledger.
Merge retains writable organization context. Merge a source with an organization link, read the follow-up result and add another link to the merged source.
Provisioning preserves customer relationship purposes. Provision, add a customer relationship purpose and provision again.
Coverage
Rulecovered
Transitioncovered
Validationcovered
Permissioncovered
Edgecovered
Failuregap: FND-MBR-STR-060
Boundarygap: FND-MBR-STR-060
Concurrencygap: FND-MBR-STR-060
Invariantcovered
Interactioncovered
Test Scenarios
10 scenarios proving CAP-MBR-STR-007; 7 bound to an existing test.
services-membership:modules/structure/tests/integration/services/persistence/organizational-units.integration.spec.ts#organizational units in the database › merge › moves the children under the survivor, marks the unit merged and lists what it left,services-membership:modules/structure/services/persistence/organizational-unit-organizations.ts:linkOrganization,services-membership:tests/acceptance/structure/MBR-ACC-0018.acceptance.ts#the link and the settings replace both answer 200
An isolated workspace contains the records and current versions needed for the case.
Steps
Provision, add a customer relationship purpose and provision again.
Expected
The standard purposes remain present once and the customer purpose retains its values.
Data
Separate fixture records for the accepted and refused operations.
Source
services-membership:tests/e2e/structure-api.e2e.spec.ts#the structure API, end to end in process › creates a relationship type with an id derived from its name,services-membership:modules/structure/tests/integration/services/lifecycle/structure-participant.integration.spec.ts#the structure participant in the database › seeds the four relationship types at provisioning
10Workspace authority gates this capabilitypermissionapinegativeproposed
An isolated workspace contains the records and current versions needed for the case.
Steps
Exercise the capability’s exposed operations with its read-only and management callers, then repeat with application access removed, an unlicensed workspace and an unavailable workspace.
Expected
Each named operation requires its declared authority; admission failures occur before any record or calculated result is exposed.
Data
Separate fixture records for the accepted and refused operations.
Source
services-membership:tests/unit/route-authorization.spec.ts#route authorization: every Membership operation names its permission › requires membership.structure.read of every structure read and membership.structure.manage of every change,services-membership:modules/configuration/aws/api/configuration.routes.ts:configurationModuleRoutes,services-membership:tests/e2e/terms-api.e2e.spec.ts#the terms API, end to end in process › refuses a caller who holds no key in the tenant