MOBILE-ID · TRUSTED LTANS
Integration test plan
Success, duplicate, data-loss, TSA, webhook and handover tests with expected outcomes.
Integration acceptance suite
This is a backend acceptance plan for a provisioned environment. Package-local checks verify schemas, simulation logic and sample-package integrity only.
| ID | Scenario | Input | Expected result |
|---|---|---|---|
| T01 | Valid deposit | Synthetic bytes, test policy | 202 with job ID; ready only after evidence completes |
| T02 | Duplicate request | Same key and payload | Return prior result without a second object or charge |
| T03 | Idempotency conflict | Same key, changed payload | 409; retain prior result |
| T04 | Digest mismatch | Change one source byte | Reject or quarantine at the relevant stage; no false success |
| T05 | Original data unavailable | Hash-tree renewal without reread | BLOCKED_DATA_ACCESS; restore before retry |
| T06 | TSA outage | Unreachable TSA | Bounded wait/retry; only an approved alternate TSA |
| T07 | OCSP UNKNOWN | Unresolved status | Policy-governed INDETERMINATE, never relabel as GOOD |
| T08 | Duplicate/reordered events | Replay eventId | Deduplicate and reconcile per-aggregate order |
| T09 | Legal hold | Expired object with active hold | Block disposition |
| T10 | Renewal | Complete data and approval | Create new version, retain history and reverify |
| T11 | Handover | Incomplete or unacknowledged package | Retain source responsibility until agreed acknowledgement |
| T12 | Tenant isolation | Different-tenant token | Deny without content disclosure |
Execution record
- Record environment, API build, CA/TSA configuration, schemas and policies.
- Each case records time, test data, actual result and acceptance owner.
- Do not mark backend cases passed from mocks or code inspection.
Gateway, IAM and adapter acceptance cases
| Test | Expected result |
|---|---|
| Standard profile | Authorized token calls API without client certificate when the profile does not require it. |
| Enhanced profile | Missing/invalid certificate is denied at the configured boundary; no downgrade. |
| Tenant boundary | Correct scope but wrong tenant cannot read/export. |
| Core mapping | Reconcile client/profile/status/error against the correct Core version. |
| Byte channel | Upload/reference/download match digest; expiry/key loss yields explicit limits. |