The coverage map distinguishes specified examples from missing proof. A covered category means an expected case is specified; executable bindings and their run results remain separate evidence. Each required rule has a proof link or an explicit coverage finding in the structured rule ledger.
Rejected action reasons preserve standing inputs. Attempt termination with a suspension-only reason and with an inactive termination reason, then evaluate the original period.
Coverage
Rulecovered
Transitiongap: FND-MBR-STR-070
Validationcovered
Permissioncovered
Edgegap: FND-MBR-STR-070
Failuregap: FND-MBR-STR-070
Boundarygap: FND-MBR-STR-070
Concurrencygap: FND-MBR-STR-070
Invariantgap: FND-MBR-STR-070
Interactioncovered
Test Scenarios
6 scenarios proving CAP-MBR-STR-017; 0 bound to an existing test.
01Reasons reject an unsupported action categoryvalidationapinegativeproposed
An isolated workspace contains the records and current versions needed for the case.
Steps
Attempt termination with a suspension-only reason and with an inactive termination reason, then evaluate the original period.
Expected
Both actions fail and the unchanged effective term continues to produce its original standing.
Data
Separate fixture records for the accepted and refused operations.
Source
services-membership:modules/terms/tests/unit/status.spec.ts#holding status: the effective states of §1 › never lets a pending term cover a date,services-membership:modules/configuration/services/persistence/membership-status-reasons.ts:requireStatusReason
06Workspace authority gates this capabilitypermissionapinegativeproposed
An isolated workspace contains the records and current versions needed for the case.
Steps
Exercise the capability’s exposed operations with its read-only and management callers, then repeat with application access removed, an unlicensed workspace and an unavailable workspace.
Expected
Each named operation requires its declared authority; admission failures occur before any record or calculated result is exposed.
Data
Separate fixture records for the accepted and refused operations.
Source
services-membership:tests/unit/route-authorization.spec.ts#route authorization: every Membership operation names its permission › requires membership.structure.read of every structure read and membership.structure.manage of every change,services-membership:modules/configuration/aws/api/configuration.routes.ts:configurationModuleRoutes,services-membership:tests/e2e/terms-api.e2e.spec.ts#the terms API, end to end in process › refuses a caller who holds no key in the tenant