01must proveConfirmed | Rule, version, usage and decision reads require eligibility read authority, rejecting callers without it, without a role or outside the authorized customer. | permission | api | test |
02must proveConfirmed | Portal callers cannot enter the rule administration routes. | permission | api | test |
03must proveConfirmed | The explorer returns only workspace rules in key order and supports status, ownership, reuse, subject kind, used condition and literal case-insensitive name or key filters. | policy | service | test |
04must proveConfirmed | Searches exceeding 200 characters and unsupported filter choices fail with the offending parameter named. | validation | api | test |
05must proveConfirmed | Rule pages resume after the preceding page’s last key, return 50 entries by default and allow no more than 200. | policy | api, service | test |
06Confirmed | A rule overview returns its latest publication, current draft and dependency counts. | policy | service | test |
07must proveConfirmed | Usage organizes bindings by purpose, presents their consumer and version choices, flags outdated pins and lists live referencing rules with their own usage. | calculation | service | test |
08must proveConfirmed | Reference counts include current drafts, published versions of live or deprecated rules and versions pinned by active uses, consistently across discovery, detail, usage and archive refusals. | calculation | service | test |
09must proveConfirmed | A rule outside the current workspace is reported as absent. | invariant | service, database | test |
10Confirmed | The console configuration list reveals archived rules through Show Inactive and product-specific rules through Show Private Rules, identifying the owning product. | policy | console | observed |
11Confirmed | The product should make eligibility rules available to reporting; the proposed dataset is absent and the explorer currently reads the rule store directly. | policy | service | documented |