Sandbox and contract testing

Minimum matrix

• Valid request with valid scope.
• Missing, expired, or wrong-environment token.
• Cross-business and cross-branch access.
• Invalid payload and unexpected sensitive fields.
• Same idempotency key with the same and a different payload.
• Timeout, retry, and reconciliation.

Consumer contract tests

Use secret-free fixtures and verify schema and meaning rather than JSON field order. Run consumer tests whenever the producer changes.

Activation

Submit evidence with test results, SHA, version, environment, and rollback. Begin with a canary scope that can be disabled without a dangerous reverse migration.