Skip to content

CAP-PFM-INT-012Exercise a provider capability on a test account

Markdown

CAP-PFM-INT-012

Exercise a provider capability on a test account

Markdown
  • DocumentDraft
  • Product intentProposed
  • ImplementationObserved

KindCapabilityProduct areaPlatformModuleIntegration access, customer extensions and shared workflow configurationRevision1

Read atservices-platform ad3f6a65react-console baf6dae3

The Formal Contract

The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.

Outcomes
Provider-reported live or unknown accounts cannot receive Library test calls.Test operations identify their initiating person and retain real gateway history.
Surfaces
consoleapi
Intent sources
services-platform:docs/milestones/INTG-M2-calls-through-the-gateway.md#M2-D1services-platform:docs/milestones/INTG-M2-calls-through-the-gateway.md#M2-D1aservices-platform:docs/milestones/INTG-M2-calls-through-the-gateway.md#M2-D1bservices-platform:docs/milestones/INTG-M2-calls-through-the-gateway.md#M2-D1c

Controls

22 controls apply, from the corpus control catalogue.

TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-IAM-001 TC-IAM-002 TC-IAM-004 TC-IAM-005 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-PI-001 TC-PI-002 TC-PI-005 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-VEN-001 TC-VEN-002 TC-VEN-003

Permissions

KeyChecked atScope
platform.integrations.manageapitenant
platform.integrations.manageconsoletenant

Business Rules

7 rules, 7 to be proved before approval. A rule's product intent is derived from its origin: 0 confirmed by a product decision, the rest inheriting this capability's proposed.

IdRuleKindEnforced atProvenance
01must prove
Proposed
Library test invocation requires a provider-reported test account; live and unreported account environments are refused before execution recording.
policyapi, servicetest
services-platform:modules/integrations/tests/e2e/connection-try.e2e.spec.js#is refused 409 connection_not_test when the provider reported a live account, and no execution is recorded
02must prove
Proposed
Existing integration-manage authority permits a person to try a call, with no additional permission and no records for unauthorized attempts.
permissionapi, consoletest
services-platform:modules/integrations/tests/e2e/connection-try.e2e.spec.js#is refused 403 and no execution or audit row is recorded
03must prove
Proposed
The selected connection must be active or degraded and verified for the capability, with suspended and unsupported cases refused distinctly.
validationservicetest
services-platform:modules/integrations/tests/e2e/connection-try.e2e.spec.js#is refused 409 connection_unavailable when it is suspended
04must prove
Proposed
The Library invokes through the gateway directly on the selected connection without a binding, as its test application for the person and with a new idempotency key each time.
policyservicetest
services-platform:modules/integrations/tests/e2e/connection-try.e2e.spec.js#records an execution of that connection by the calling application library_try on behalf of the person, with no binding
05must prove
Proposed
Test-call history identifies the person, capability and resulting execution.
invariantservicetest
services-platform:modules/integrations/tests/e2e/connection-try.e2e.spec.js#writes a connection.test_call audit row naming the capability, the execution and the person
06must prove
Proposed
Account checks replace a prior environment with the provider’s valid test or live report; missing or other values leave environment unknown without failing verification.
calculationservicetest
07must prove
Proposed
Try a call is shown on connection detail only to integration managers for usable provider-reported test accounts.
no proof recorded yet
policyconsoleobserved

Scenarios

IdGivenWhenThenProvenance
01The provider describes its connected account as test.An administrator authorizes twelve dollars through Try a call.Activity retains the test execution with the initiating person.test

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.