DataOps-platform/docs/validation/P3_WP10_FAILURE_INJECTION.json

{
  "work_package": "P3-WP10",
  "engineering_status": "ENGINEERING_BASELINE_COMPLETE_MULTI_TENANCY_ACTIVATION_BLOCKED",
  "cases": [
    {"id": "WP10-FI-01", "failure": "client tenant spoof / unknown domain route / unapproved mode", "expected": "server-derived scope denial", "scope": "local_contract"},
    {"id": "WP10-FI-02", "failure": "background or admin operation without matching scope", "expected": "tenant_scope_required or tenant_scope_denied", "scope": "local_contract"},
    {"id": "WP10-FI-03", "failure": "runtime direct DML after role-init", "expected": "PostgreSQL permission denied", "scope": "real_postgresql"},
    {"id": "WP10-FI-04", "failure": "two tenant quota reservations for one unit", "expected": "one lease fence winner; no cross-tenant borrowing", "scope": "real_postgresql"},
    {"id": "WP10-FI-05", "failure": "frozen tenant task or stale lifecycle fence", "expected": "tenant_not_active or tenant_fence_conflict", "scope": "real_postgresql"},
    {"id": "WP10-FI-06", "failure": "object/graph/cache/index escape, URL/path traversal, Unicode homograph", "expected": "tenant_resource_invalid", "scope": "local_contract"},
    {"id": "WP10-FI-08", "failure": "shared runtime sets tenant GUC or submits a cross-tenant legacy payload", "expected": "PostgreSQL permission denied; legacy gateway remains revoked", "scope": "real_postgresql"},
    {"id": "WP10-FI-09", "failure": "worker asks for a durable outbox item while tenant is frozen or without server worker identity", "expected": "tenant_worker_scope_denied or tenant_worker_identity_required", "scope": "real_postgresql"},
    {"id": "WP10-FI-10", "failure": "downgrade from secured head with tenant/control/outbox data", "expected": "tenant security downgrade refused while tenant data exists; version unchanged", "scope": "real_postgresql"},
    {"id": "WP10-FI-07", "failure": "real provider, backup restore, external graph/object/cache/index isolation", "expected": "not enabled; remains TBD_EXTERNAL", "scope": "TBD_EXTERNAL"}
  ],
  "external_gates": ["multi_tenancy", "delivery_mode", "tenant_count", "isolation_level", "capacity_delivery_profile", "backup_restore_profile", "external_service_isolation", "enterprise_uat"]
}