01must proveConfirmed | Record writes require an active object; records of draft or archived objects remain readable by identity with their links, reject writes and cannot be reached through another object path. | lifecycle | service | test |
02must proveConfirmed | Property validation uses live definitions and typed conversion, names invalid or unavailable properties without disclosing rejected values and uses the object label in its refusal. | validation | service | test |
03must proveConfirmed | API-required properties need a value at creation and reject attempts to clear them. | validation | service | test |
04must proveConfirmed | Visibility validation rejects non-null submitted changes to hidden properties while retaining untouched stored values; conditional requirement checks resulting visible values, and unknown evaluations neither require nor hide. | validation | service, console | observed |
05must proveConfirmed | Creation fills omitted, empty or null properties from compatible defaults using literals, workspace dates or caller contact, while supplied values override defaults. | calculation | service | test |
06must proveConfirmed | References must resolve to a record of their target type in the workspace, with custom-object targets requiring unarchived records of the specified object. | validation | service | test |
07must proveConfirmed | Unique-property reservations reject duplicate values without saving, name the holder, normalize text case and surrounding whitespace and release a reservation when its value changes. | validation | service, database, console | test |
08must proveConfirmed | Display properties reject internal line breaks by property name, trim boundary line breaks and leave unrelated properties unaffected. | validation | service | test |
09must proveConfirmed | Each save derives the name from the primary display value or prefixed record number plus populated secondary values, limits it to five hundred characters and assigns numbers from the object sequence. | calculation | service | test |
10must proveConfirmed | Patches affect named properties and use null to clear them, while replacements clear omitted live properties and accept a complete record representation. | policy | api, service | test |
11must proveConfirmed | Updates require the read version and respect update locks; archived records reject editing and publication but remain deletable when the object is active and deletion safeguards allow it. | validation | service, console | test |
12must proveConfirmed | Caller-supplied external identifiers are unique within the object and reject conflicting creation or patch requests. | validation | service, database | test |
13must proveConfirmed | New image and file values pass through managed asset preparation before saving, with unavailable or unsavable sources reported at the property without exposing the address. | validation | service | test |
14must proveConfirmed | Record lists default to unarchived entries ordered by name, offer bounded pages and publication, archive and prefix filters, while reads include grouped links and write view audits and mutations audit actions without values. | policy | service | test |
15must proveConfirmed | Decimal, currency and percent storage also records an exact precision-scaled integer, leaving that shadow empty when the value exceeds the supported safe integer range. | calculation | service | test |