ahmido
bfb52b84d6
Automated PR for spec 427 Exchange Teams verified source contract enablement. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #494
113 lines
4.4 KiB
Markdown
113 lines
4.4 KiB
Markdown
# Requirements Checklist: Spec 427 - Exchange / Teams Verified Source Contract Enablement
|
|
|
|
**Purpose**: Validate specification completeness and quality before implementation
|
|
**Created**: 2026-07-03
|
|
**Feature**: `specs/427-exchange-teams-verified-source-contract-enablement/spec.md`
|
|
|
|
## Scope
|
|
|
|
- [x] Only selected Exchange/Teams source contracts are in scope.
|
|
- [x] No evidence capture is in scope.
|
|
- [x] No content-backed promotion is in scope.
|
|
- [x] No compare/render promotion is in scope.
|
|
- [x] No certification is in scope.
|
|
- [x] No restore/apply flow is in scope.
|
|
- [x] No customer claim is in scope.
|
|
- [x] No new UI surface is in scope.
|
|
|
|
## Target Types
|
|
|
|
- [x] `exchange.transportRule` maps to repo canonical `transportRule`.
|
|
- [x] `exchange.acceptedDomain` maps to repo canonical `acceptedDomain`.
|
|
- [x] `teams.appPermissionPolicy` maps to repo canonical `appPermissionPolicy`.
|
|
- [x] `teams.meetingPolicy` maps to repo canonical `meetingPolicy`.
|
|
- [x] Repo-canonical names are documented in the spec.
|
|
|
|
## Contract Verification
|
|
|
|
- [x] Source class metadata is required for verified contracts.
|
|
- [x] Draft source class labels are mapped to repo-canonical source classes such as `graph_v1_fallback`.
|
|
- [x] Contract name/version metadata is required for verified contracts.
|
|
- [x] Permission model metadata is required for verified contracts.
|
|
- [x] Response shape metadata is required for verified contracts.
|
|
- [x] Pagination/collection semantics are required for verified contracts.
|
|
- [x] Identity handoff metadata is required for verified contracts.
|
|
- [x] Redaction rules are required for verified contracts.
|
|
- [x] Final state is explicit for verified and blocked contracts.
|
|
|
|
## Fail-Safe
|
|
|
|
- [x] Missing source blocks.
|
|
- [x] Unclear permissions block.
|
|
- [x] Beta-only source blocks certification/customer/restore claims.
|
|
- [x] Unsafe response shape blocks.
|
|
- [x] Missing repo adapter blocks.
|
|
- [x] Unsafe identity blocks.
|
|
- [x] Unsafe redaction blocks.
|
|
- [x] Blocked contracts create no provider call, resource row, or evidence row.
|
|
|
|
## No Promotion
|
|
|
|
- [x] No raw evidence created.
|
|
- [x] No normalized evidence created.
|
|
- [x] No content-backed level.
|
|
- [x] No comparable level.
|
|
- [x] No renderable level.
|
|
- [x] No certified level.
|
|
- [x] No customer claim.
|
|
- [x] No restore-ready state.
|
|
|
|
## Architecture
|
|
|
|
- [x] Uses Coverage v2 source contract infrastructure.
|
|
- [x] No direct HTTP bypass.
|
|
- [x] No endpoint guessing.
|
|
- [x] No new provider subsystem.
|
|
- [x] No `tenant_id`.
|
|
- [x] No Exchange mini-platform.
|
|
- [x] No Teams mini-platform.
|
|
- [x] Completed specs are read-only context and are not rewritten.
|
|
|
|
## Product Surface
|
|
|
|
- [x] No rendered UI changed by default.
|
|
- [x] Product Surface Contract result is `N/A - no rendered UI surface changed`.
|
|
- [x] Browser proof is `N/A - no rendered UI surface changed`.
|
|
- [x] Human Product Sanity is `N/A - no product surface changed`.
|
|
- [x] Product Surface exceptions are `none`.
|
|
|
|
## Tests
|
|
|
|
- [x] Unit tests are planned for resolver/contract states/permissions/response/identity/redaction.
|
|
- [x] Feature tests are planned for all four target types.
|
|
- [x] No-promotion tests are planned.
|
|
- [x] Spec 426 regression is planned.
|
|
- [x] Spec 417/420 regression is planned.
|
|
- [x] No real provider calls are allowed.
|
|
- [x] Test lane impact is documented.
|
|
|
|
## Candidate Selection Gate
|
|
|
|
- [x] Candidate exists as a direct user-provided draft.
|
|
- [x] The active auto-prep queue was checked and is not used as the source.
|
|
- [x] The candidate is not already covered by an existing active or completed Spec 427 package.
|
|
- [x] Related completed specs are dependency context only.
|
|
- [x] The candidate aligns with the current Coverage v2 / Exchange/Teams sequence.
|
|
- [x] The scope is the smallest viable implementation slice.
|
|
|
|
## Spec Readiness Gate
|
|
|
|
- [x] `spec.md` exists.
|
|
- [x] `plan.md` exists.
|
|
- [x] `tasks.md` exists.
|
|
- [x] Problem, value, requirements, non-goals, acceptance criteria, assumptions, and risks are documented.
|
|
- [x] RBAC, workspace/managed-environment/provider scope, auditability/observability, evidence/result truth, and UX no-impact posture are addressed.
|
|
- [x] No open question blocks safe implementation.
|
|
- [x] Scope is bounded for a later implementation loop.
|
|
|
|
## Final Candidate Gate
|
|
|
|
Result: `PASS`
|
|
|
|
Rationale: The package is a direct, manually supplied candidate and is scoped to precise source-contract verification only. It preserves fail-safe behavior, forbids evidence/readiness/customer promotion, and includes explicit implementation stop conditions.
|