Credentials and environment
Confirm production realm/base URL, client credential issuance, secret handling and authorized scopes according to onboarding sources.
Security, data, evidence, observability, support, quota and release readiness.
Production credentials are never embedded in this static website.
Credentials → network → contract → failure tests → observability → acceptance
Confirm production realm/base URL, client credential issuance, secret handling and authorized scopes according to onboarding sources.
Confirm DNS/endpoints, firewall/allowlisting, TLS/certificate requirements and inbound/outbound responsibility according to deployment contract.
Pin the API source/version, required headers/fields, raw error handling and backward-compatibility/deprecation notes.
Test invalid credentials, invalid process state, unreadable evidence, source unavailability and recovery paths. Webhook failure tests apply only when an authoritative webhook contract exists.
Define correlation among customer request, subject/process and billcode/transaction references; enable support investigation without excessive secret/PII logging.
Volume/SLA/RTO/RPO/DR/support escalation is signed off from contract/NFR sources. The site does not invent numeric production criteria.