Test Unsafe Requests

Test controlled requests and inspect whether each expected control response is visible.

See the situation

Start with the situation below. Next, we will work through an example together before you try the activity.

Samir · Workflow operator

The case

A control with a perfect record

Test both whether the rule blocks an unsafe request and whether the gate produced observable evidence that it ran.

Rejections logged: Zero
Period: Three months
Interpretation offered in the review: The control is working
Out-of-scope requests in the same period: Many
What was actually true: The boundary was never connected

Your task

Choose the expected block for each unsafe request, then run the tests.

Need a little guidance?

You’re done when: Every dangerous request is stopped by the expected gate and the reason is visible.

Safety controls need negative tests, not just successful happy paths.

Need a reminder? Reopen the worked example

Watch one example first

A controlled request tries to write a protected field. A good negative test verifies both that the write did not occur and that the scope gate recorded a refusal.

Why this follows from the evidence

No side effect alone is ambiguous: the gate may have worked, or the request may never have reached it. Test the control’s execution evidence.

GTM Lab

Saved locally

Workflow Control Plan · 0 of 8 sections started

Saved locally to your browser.

Case evidence

A control with a perfect record

Rejections logged: Zero
Period: Three months
Interpretation offered in the review: The control is working
Out-of-scope requests in the same period: Many
What was actually true: The boundary was never connected

In this control plan, no rejection has been recorded in three months. Decide what that evidence can support and which checks would resolve the uncertainty.

Run controlled negative tests against the local examples

Zero rejections alone is inconclusive. For each request, predict the control that handles it, then run the bounded fixture check and inspect its expected result. These examples are evaluated locally; they do not call an integration.

Test 1 of 4: correct-and-unacceptable

Enrol a qualified, consenting person whose account is inside an active renewal window.

Expected control

Not yet executed: correct-and-unacceptable
Not yet executed: at-volume
Not yet executed: partial-success
Not yet executed: repair-is-the-hazard

Restoring this practice draft…

Optional: compare the original decision choices

The case tool above is the activity that records completion. These choices are an optional review of alternative reasoning.

Work the case · 0 of 2 sections drafted

Check the expected responses

Compare these alternatives one section at a time. Check a choice to see its consequence; the draft summary below keeps the proposed changes together.

Step 1 of 2

A control has logged zero rejections in three months. What does that count establish?

It is inconclusive. Run controlled negative cases and confirm telemetry shows the gate executed and recorded each decision.That it is working, and nothing out of scope has been attempted.That it is unnecessary, since nothing has ever needed it.

This is a proposed draft until the chapter check runs. Selecting a choice alone does not complete the chapter.

3b · Proposed

Safety control plan draft

Safety control plan draft · current draftCompare the original state with the proposed change. This preview does not change live records.

Safety control plan draft · current draft
Item	Before	Proposed	Why
A control has logged zero rejections in three months. What does that count establish?	No saved change in this exercise draft	Not drafted yet	Choose a proposal to see what it would add to the draft.
Which set of tests covers the categories that matter?	No saved change in this exercise draft	Not drafted yet	Choose a proposal to see what it would add to the draft.

A control has logged zero rejections in three months. What does that count establish?: BeforeNo saved change in this exercise draft; ProposedNot drafted yet; WhyChoose a proposal to see what it would add to the draft.
Which set of tests covers the categories that matter?: BeforeNo saved change in this exercise draft; ProposedNot drafted yet; WhyChoose a proposal to see what it would add to the draft.

A choice appears here as a proposal, not as evidence that a live system changed.

Your place saves as you go.

Chapter 7 of 80 complete