The coverage map distinguishes specified examples from missing proof. A covered category means an expected case is specified; executable bindings and their run results remain separate evidence. Each required rule has a proof link or an explicit coverage finding in the structured rule ledger.
Package counts specialize retained program choices. Set program chapter maximum to two and a package maximum to one; read effective requirements, then clear package requirements.
Coverage
Rulegap: FND-MBR-STR-063
Transitionnot-applicable
Validationcovered
Permissioncovered
Edgegap: FND-MBR-STR-063
Failuregap: FND-MBR-STR-063
Boundarygap: FND-MBR-STR-063
Concurrencycovered
Invariantgap: FND-MBR-STR-063
Interactioncovered
Test Scenarios
6 scenarios proving CAP-MBR-STR-010; 1 bound to an existing test.
01Program requirements replace at the read versionconcurrencyapinegativeproposed
An isolated workspace contains the records and current versions needed for the case.
Steps
Exercise the capability’s exposed operations with its read-only and management callers, then repeat with application access removed, an unlicensed workspace and an unavailable workspace.
Expected
Each named operation requires its declared authority; admission failures occur before any record or calculated result is exposed.
Data
Separate fixture records for the accepted and refused operations.
Source
services-membership:tests/unit/route-authorization.spec.ts#route authorization: every Membership operation names its permission › requires membership.structure.read of every structure read and membership.structure.manage of every change,services-membership:modules/configuration/aws/api/configuration.routes.ts:configurationModuleRoutes,services-membership:tests/e2e/terms-api.e2e.spec.ts#the terms API, end to end in process › refuses a caller who holds no key in the tenant