test_id,priority,area,hypothetical_scenario,test_role,start_state,entitlement_state,action,expected_result,evidence_to_capture,owner,status,notes,tested_at
ACC-01,Critical,Private space visibility,Synthetic hypothetical: a visitor has not joined and has no paid entitlement,Visitor,Not joined,Not entitled,Open the saved direct URL for the paid Cohort Room in a private browsing session,"Private posts and member details are not displayed; the visitor sees only the intentional sign-in, join, payment or not-found route","Timestamped URL, visible message and redacted screenshot",Community operations,Not run,Use a made-up space and no personal data,
ACC-02,Critical,Joined versus entitled,Synthetic hypothetical: Jamie Test joined the free community but did not buy Cohort A,Member,Joined,Not entitled,"Sign in as Jamie Test, inspect navigation, search and open the direct Cohort A URL","Jamie cannot read, post in or receive activity from Cohort A; any offer shown is clearly separate from access","Navigation result, search result, direct-URL result and notification inbox",Platform owner,Not run,Tests that membership is not mistaken for paid entitlement,
ACC-03,Critical,Correct entitlement,Synthetic hypothetical: Alex Test is entitled to paid Cohort A only,Member,Joined,Entitled to Cohort A,"Sign in, open Cohort A from navigation and create a harmless test reply",Cohort A is visible and usable; Cohort B remains unavailable,Redacted screen recording or screenshots and test-post URL,Programme administrator,Not run,Delete the synthetic post after evidence is captured,
ACC-04,Critical,Cross-tier isolation,Synthetic hypothetical: Morgan Test is entitled to Cohort B but not Cohort A,Member,Joined,Entitled to Cohort B only,"Search for Cohort A, inspect the home feed and try its saved direct URL","No Cohort A post body, event details, attendee list or member-only file is exposed","Search, feed and direct-URL evidence",Platform owner,Not run,A hidden navigation item alone is not a pass,
ACC-05,High,Manual exception,Synthetic hypothetical: Sam Test is a guest tutor manually granted access to one private workshop space,Guest tutor,Joined,Manual space entitlement,"Open the workshop, then try adjacent staff and paid-member spaces",The workshop is available; unrelated spaces and administration controls remain unavailable,Permission record and successful and blocked URL results,Community operations,Not run,Use only if the candidate platform supports a suitably bounded role or grant,
ACC-06,Critical,Immediate cancellation,Synthetic hypothetical: Taylor Test has an active paid entitlement that an administrator cancels immediately,Member,Joined,Cancelled immediately,"Cancel using the vendor's documented route, sign out, sign in again and retry navigation, search, direct URL and a previously received deep link","Paid space, event and file access end at the defined immediate-cancellation point; public or free access follows the written policy","Cancellation timestamp, entitlement record and post-cancellation results",Billing operations,Not run,Do not take a real payment; use an authorised trial or vendor-supported test state,
ACC-07,Critical,End-of-term cancellation,Synthetic hypothetical: Casey Test is cancelled at period end with a recorded entitlement-end timestamp,Member,Joined,Cancelled at period end,Check access before the entitlement-end timestamp and again after it using a vendor-supported test or shortened test period,"Access remains only until the documented entitlement end, then paid spaces, events and deep links are blocked without removing unrelated free access","Cancellation setting, entitlement timestamp and before/after results",Billing operations,Not run,"If the timing cannot be safely reproduced, record Unknown rather than Pass",
ACC-08,Critical,Removed entitlement propagation,"Synthetic hypothetical: Robin Test loses the product, event or plan that grants a private space",Member,Joined,Not entitled after grant removal,"Remove the granting item using the documented admin route, then sign out and in before retrying the space URL",The derived private-space permission is removed at the documented time and no stale session exposes content,"Before/after grant record, timestamps and direct-URL results",Platform owner,Not run,Distinguish removing a grant from deleting a member,
EVT-01,Critical,Private event access,Synthetic hypothetical: Drew Test is joined but not entitled to the paid clinic event,Member,Joined,Not entitled,"Inspect event lists, calendar links, reminder emails and the saved event URL","Restricted joining details, attendee information and replay are not exposed; any public teaser contains only approved information","Event list, direct URL, calendar file and notification evidence",Events owner,Not run,Check the live link and replay separately,
EVT-02,High,Event entitlement,Synthetic hypothetical: Lee Test has the intended clinic entitlement,Member,Joined,Entitled to clinic,"Open the event, add it to a calendar and follow the joining route at the scheduled test time","Correct time zone, joining route and entitled replay visibility match the event policy","Event page, calendar entry, joining result and replay result",Events owner,Not run,Use a harmless test event,
VIS-01,High,Visibility versus join,Synthetic hypothetical: Pat Test may see a paid cohort offer but has not joined it,Member,Joined,Not entitled,"View the home feed, plans or shop and select the visible offer","The approved offer summary may be visible, but member-only content and participation remain blocked until entitlement is granted",Offer view and blocked content checks,Product owner,Not run,Document whether discoverability is intentional,
PAY-01,Critical,Pay versus access,Synthetic hypothetical: Quinn Test receives an entitlement through an authorised no-charge test route,Member,Joined,Entitled via test grant,"Grant the exact plan, product or event used in the proposed design without entering payment details",Only the mapped spaces and events become available; the test does not claim checkout or payment processing was verified,Grant record and resulting access map,Platform owner,Not run,Payment handling is outside this no-payment trial row,
ROLE-01,Critical,Member role,Synthetic hypothetical: Jamie Test is an ordinary member,Member,Joined,Entitled,"Try permitted posting and then attempt to edit another member's post, view reports and open admin settings","Normal participation works; moderation queues, other people's content controls and administration settings remain unavailable",Allowed action and each denied action,Community operations,Not run,Use harmless test content,
ROLE-02,Critical,Staff least privilege,Synthetic hypothetical: Avery Test should moderate discussions but should not control billing or platform-wide settings,Staff or moderator,Staff active,Staff entitlement,"Review the exact role definition, handle a synthetic report and attempt billing, export and account-setting actions",Required moderation actions work and unrelated sensitive actions are denied; otherwise record the role as too broad,Role configuration and allowed/denied action evidence,Platform owner,Not run,Do not assume a role name proves least privilege,
NOT-01,High,Default notifications,Synthetic hypothetical: Jordan Test joins with the proposed default notification schedule,Member,Newly joined,Entitled,Create one test post in an accessible space and one in an inaccessible space; wait for the documented delivery window,Jordan receives only the expected accessible-space notification at the proposed frequency,"Notification settings, timestamps, redacted inbox and in-app results",Communications owner,Not run,Allow for the documented schedule before deciding,
NOT-02,High,Member notification control,Synthetic hypothetical: Jordan Test changes the default to a quieter personal preference,Member,Joined,Entitled,"Change the preference, create another harmless accessible-space post and observe the next documented window",The personal preference is saved and overrides the default as documented,Before/after setting and delivery result,Communications owner,Not run,Test both email and in-app behaviour if both matter,
MOD-01,Critical,Report intake,Synthetic hypothetical: Jamie Test reports a harmless post labelled MODERATION TEST,Member,Joined,Entitled,Use the member report control and record where the report arrives,The designated team receives enough context through the documented channels without exposing the report to ordinary members,"Member confirmation, redacted admin email or queue item and timestamps",Safeguarding lead,Not run,Never use genuinely harmful material,
MOD-02,Critical,Escalation and coverage,Synthetic hypothetical: the primary moderator is unavailable when a MODERATION TEST report arrives,Staff,Staff active,Staff entitlement,"Follow the written rota and escalation route from intake through acknowledgement, decision and closure","A named backup owner can access the report, act within policy and record the outcome inside the target response time","Rota entry, timestamps, decision log and closure record",Safeguarding lead,Not run,Platform tooling does not replace an escalation policy,
PRIV-01,Critical,Member privacy boundary,Synthetic hypothetical: Riley Test has the most restrictive available profile visibility,Member,Joined,Entitled,"Check the profile and member directory as a visitor, non-entitled member, entitled peer and staff user",Only fields and audiences approved in the privacy design are visible; private contact details do not appear,Role-by-role field inventory and redacted screenshots,Privacy owner,Not run,"This is a product-behaviour check, not a GDPR compliance certification",
PRIV-02,High,Departure record,Synthetic hypothetical: Cameron Test leaves or is removed under the written retention procedure,Member,Leaving,Entitlement removed,"Use the documented departure route and inspect profile, posts, messages, exports and staff records afterwards","Each artefact is retained, anonymised, deleted or restricted exactly as the written policy requires; unknowns are recorded","Before/after inventory, timestamps and policy reference",Privacy owner,Not run,Obtain qualified advice for legal retention and erasure decisions,
OPS-01,High,Permission change audit,Synthetic hypothetical: an administrator changes Cohort A from private to open and immediately reverses it,Administrator,Staff active,Staff entitlement,"Make the reversible change in a disposable test space, inspect effects, restore it and look for an audit record","The change is visibly confirmed, exposure is detected by the test accounts, rollback works and any available audit evidence identifies the change","Configuration screenshots, role checks, rollback result and audit entry or recorded absence",Platform owner,Not run,Do not run against a live member space,