Pure checks for Anthropic Credentials

Verification Boundary

The suite checks deterministic module behavior and declared configuration using local inputs.

What This Suite Proves

Absent credentials have a configuration result. Warm deployed credentials refresh through the secret. Combined bindings require every named suite; a component assertion alone does not establish the full experiment.

What It Does Not Prove

These checks do not establish database transactions, deployed permissions, provider availability or a complete user journey.

Real Dependencies and Test Doubles

The credential parser, cache and refusal mapping are real. Literal environments, a recording secret reader and a controlled clock replace external configuration and AWS.

Must Not Be Doubled

Retain the function, configuration or boundary guard under test and its assertions; replacing them removes the evidence.