# Acceptance & Evidence Managed documentation for Acceptance & Evidence. # API Acceptance Test # API Acceptance Test | Field | Value | | --- | --- | | Distribution | WCT English — OpenC5ISR | | Product | OpenC5ISR | | Release | 0.15.1 | | Deployment | `openc5isr-en.wallacecorptech.com` | | Source | `/srv/wct/releases/OpenC5ISR-v0.15.0` | | Evidence | Static API inventory plus acceptance standard | | Source fingerprint | `63d2b1097707e25d666401cdc6362e395968600a40a08690210cd8c0b75fbf50` | | Status | Generated baseline — human review required | > **Verification boundary:** This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment. ## Scope Test the 11 REST/HTTP and 8 WebSocket candidates identified by the static scan, then publish only verified interfaces as authoritative. ## Per-endpoint test matrix | Test | Expected | | --- | --- | | Authorized valid request | Documented success status and schema. | | Unauthenticated request | Rejected without data leakage. | | Authenticated but unauthorized | 403/policy rejection and audit event. | | Malformed/invalid data | Deterministic validation error; no crash/partial mutation. | | Duplicate/retry | Idempotent result or explicitly documented duplicate behavior. | | Rate/size/timeout boundary | Controlled rejection/backpressure and observable metric/log. | | Dependency failure | Safe error, no secret/stack leakage, recovery after dependency returns. | | Audit/correlation | Actor, action, target, outcome and correlation ID present. | ## Evidence record ```text Endpoint and release: Authentication role: Request (secrets removed): Expected status/schema: Actual status/schema: Latency/size: Audit/correlation ID: Pass/fail and defect/task: Tester/date: ``` --- ## Maintainer Notes Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs. # Release Acceptance Test # Release Acceptance Test | Field | Value | | --- | --- | | Distribution | WCT English — OpenC5ISR | | Product | OpenC5ISR | | Release | 0.15.1 | | Deployment | `openc5isr-en.wallacecorptech.com` | | Source | `/srv/wct/releases/OpenC5ISR-v0.15.0` | | Evidence | Release evidence and acceptance standard | | Source fingerprint | `63d2b1097707e25d666401cdc6362e395968600a40a08690210cd8c0b75fbf50` | | Status | Generated baseline — human review required | > **Verification boundary:** This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment. ## Release gate - [ ] Artifact/version/checksum/source recorded. - [ ] Configuration diff and secret rotation requirements reviewed. - [ ] Database/ontology/data migrations tested with backup and rollback. - [ ] Service, local health, public TLS/proxy and WebSocket checks pass. - [ ] Primary workflows for enabled components pass with correct authorization. - [ ] Performance/latency/resource behavior acceptable for demo/operational load. - [ ] Logs/audit show no critical regression or credential leakage. - [ ] Backup/restore and rollback path remain available. - [ ] Known issues, owners and workarounds documented. - [ ] Release approved by named technical/operational reviewer. ## Static coverage indicators | Area | Count | | --- | --- | | Files inventoried | 1383 | | Detected components | 23 | | REST candidates | 11 | | WebSocket candidates | 8 | | Service candidates | 10 | | Nginx candidates | 1 | ## Decision record ```text Decision: APPROVE / APPROVE WITH LIMITATIONS / REJECT / ROLL BACK Release: Environment: Tests executed: Open defects/limitations: Operational risk: Rollback state: Approver/date: ``` --- ## Maintainer Notes Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs.