Technical
Integration owner confirms build, configuration and tests.
Confirm permissions, trust configuration, recovery, support and test evidence before production.
Run these criteria in the assigned environment. This is an acceptance checklist, not a passed backend test report.
| ID | Group | Criterion | Required evidence |
|---|---|---|---|
| C01 | Identity and authorization | Tenant isolation, scopes and object permissions; 401/403 failures. | Permission matrix and denied-access cases. |
| C02 | Deposit | Digests, custody, source revision and idempotency. | Acknowledgements and per-item reconciliation. |
| C03 | Trust and evidence | CA/TSA, tokens, status data and all three verification outcomes. | Versioned test vectors and reports. |
| C04 | Events | Duplicates, ordering, signature checks and replay. | Inbox/outbox and reconciliation results. |
| C05 | Operations | TSA/storage faults, deadline alerts and support escalation. | Runbook, duty roles and drills. |
| C06 | Recovery and transfer | Keys, data, evidence, renewal schedules and recipient receipts. | Recovery and package-verification reports. |
| C07 | Performance and commercial scope | Measure representative load, metering units and third-party costs. | Environment measurements and approved schedules. |
Integration owner confirms build, configuration and tests.
Operator confirms monitoring, recovery and support.
Service owner confirms scope, policies and commercial terms.