Negative tests
Use only the cases declared in the private grant manifest. Prove that no job or business row is created. Never probe random IDs or another organization's data.
| Case | Accepted outcome |
|---|---|
| ungranted destination | 403 AUTHORIZATION_DENIED or anti-enumeration 404 RESOURCE_NOT_FOUND |
| subset: supported-but-ungranted capability | 403 AUTHORIZATION_DENIED |
| complete catalog: supported-but-ungranted | NOT_APPLICABLE with exact-set proof; no request |
| complete catalog: unsupported input | 422 ACTIVITY_CAPABILITY_UNAVAILABLE |
| malformed/invalid value | documented validation error, not authorization proof |
| expired token | resource 401 followed by one refresh |
| controlled rate limit | 429 followed by bounded wait/retry |
If a negative probe receives 202 Accepted, mark it FAIL even if the job fails later—the expected
authorization or validation boundary did not stop it at the correct point. Keep only sanitized status,
stable error code, and correlation ID in shared evidence.