The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.
| # | Surface | Action | Capability | Expected | Provenance |
|---|---|---|---|---|---|
| 1 | /console/{tenantId}/crm/contacts/{contactId} | Opens the workspace selector while viewing a contact. | CAP-PFM-CSH-011 | The selector shows the current workspace and reachable alternatives. | observed react-console:components/console/tenant-switcher.tsx:TenantSwitcher |
| 2 | /console/{otherTenantId}/crm/contacts | Selects the sandbox. | CAP-PFM-CSH-011 | The destination becomes the sandbox contacts list; an immediate confirmation appears before access is established. | observed |
| 3 | getMySecurityContext | Waits for the sandbox access answer. | CAP-PFM-CSH-010 | The sandbox working page appears only after its context is established. | documented react-console:docs/url-architecture.md#6. Tenant from the URL |
| 4 | /console/{otherTenantId}/crm/contacts | Inspects the sandbox navigation. | CAP-PFM-CSH-014 | The menu reflects the sandbox application answer and the person’s authority there. | observed react-console:lib/security-context/provider.tsx:openTenantId; lib/security-context/entitlements.ts:entitlementsFromSecurityContext |
| 5 | / | Starts a later customer session at Rhythm’s starting address. | CAP-PFM-CSH-004 | The sandbox home is selected because the successful entry was remembered. | observed react-console:lib/security-context/provider.tsx:openTenantId; lib/auth/session.ts:rememberTenantFor |
| Path | From step | Condition | Path taken | Outcome | Provenance |
|---|---|---|---|---|---|
| alternate | 2 | The current destination is a planned screen. | The equivalent planned destination is requested in the sandbox. | The workspace changes while the planned destination is retained. | observed react-console:lib/routes/match.ts:switchTenantPath |
| failure | 3 | The selected sandbox has been removed from service. | Entry explains its unavailability and offers another working context. | The sandbox working page does not open. | observed react-console:components/console/tenant-id-gate.tsx:TenantIdGate, deniedReturnTenant |
| failure | 3 | The person has lost access to the sandbox. | Entry explains the refusal and offers the still-established workspace. | The person can return to production. | observed react-console:components/console/tenant-id-gate.tsx:TenantIdGate, deniedReturnTenant |
| Id | Statement | Provenance |
|---|---|---|
01 | Switching from a record requests the corresponding list in the destination workspace. | test react-console:e2e/mock/url-architecture.mock.spec.ts#switching tenant opens the same list under the other tenant's id, record ids dropped |
02 | A refused switch uses the established workspace as its return context. | observed react-console:components/console/tenant-id-gate.tsx:deniedReturnTenant |
03 | A successful customer workspace entry becomes the remembered starting context. | observed react-console:lib/security-context/provider.tsx:openTenantId; lib/auth/session.ts:rememberTenantFor |
End-to-end policy: required: The existing mock browser test proves the record-to-list switch. Browser coverage is still needed for cache clearing, fresh authority and refused-transition recovery across the whole journey.