DataOps-platform/docs/validation/P3_WP11_FAILURE_INJECTION.json

{
  "work_package": "P3-WP11",
  "mode": "ENGINEERING_EVIDENCE_ONLY",
  "external_input": "TBD_EXTERNAL",
  "cases": [
    {"id": "unsupported-provider", "inject": "provider=powerbi/version=unapproved", "expected": "fail_closed_no_network"},
    {"id": "unsafe-metadata", "inject": "raw_payload_or_url_or_sql_or_secret_field", "expected": "closed_validation_reject"},
    {"id": "replay", "inject": "same_digest_same_cursor", "expected": "idempotent_no_new_version"},
    {"id": "changed", "inject": "same_external_uid_changed_digest", "expected": "new_version_and_audit"},
    {"id": "deletion", "inject": "two_bounded_missing_scans", "expected": "candidate_then_tombstone_and_restore_on_return"},
    {"id": "stale-fence", "inject": "ack_with_old_lease_fence", "expected": "reject_and_no_cursor_advance"},
    {"id": "cross-domain", "inject": "body_domain_or_unauthorized_scope", "expected": "server_derived_scope_reject"},
    {"id": "restricted-read", "inject": "viewer_reads_admin_projection_or_restricted_dependency", "expected": "sql_gateway_prefilter_no_leak"},
    {"id": "closed-search", "inject": "unknown_filter_or_sql_url_like_keyword", "expected": "closed_reject_or_authorized_zero_result_no_execution"},
    {"id": "partial-scan", "inject": "missing_page_or_unfinalized_generation", "expected": "no_missing_count_or_tombstone"},
    {"id": "empty-snapshot-approval", "inject": "missing_forged_expired_cross_tenant_cross_source_cross_generation_cross_operator_or_replayed_approval", "expected": "reject_no_missing_count_or_tombstone"},
    {"id": "empty-snapshot-two-generation", "inject": "two_complete_empty_scans", "expected": "each_requires_independent_approval_then_candidate_and_tombstone"},
    {"id": "control-claim-issuer", "inject": "runtime_direct_issue_or_set_role_or_missing_control_dsn", "expected": "permission_denied_or_fail_closed_no_shared_fallback"},
    {"id": "control-claim-binding", "inject": "replay_changed_cross_principal_or_cross_tenant_claim", "expected": "one_time_claim_reject_no_catalog_residual"},
    {"id": "live-acl-guc-spoof", "inject": "runtime_or_app_direct_select_after_setting_arbitrary_tenant_domain_guc", "expected": "table_privileges_false_and_permission_denied_no_scope_or_fact_leak"},
    {"id": "final-downgrade", "inject": "authorized_read_head_with_asset_or_audit_fact", "expected": "data_sensitive_downgrade_reject"},
    {"id": "recovery", "inject": "five_sync_failures", "expected": "dead_letter_then_controlled_recovery"}
  ]
}