Status. Proposed design only. Nothing in this vault is DG client approval. No application, service or test has been executed; every scenario is Not executed. Fees and dates are open.
T34 · Email content is minimal and links reauthorise
| Field | Value |
|---|---|
| Status | Not executed |
| Type | Balanced software |
| Layer / kind | Worker · API · security |
| Priority | P0 |
| Gates | A06, A08, A09 |
| Build step | Step-07-Outbox-Worker-Email |
| Decisions | Q07, Q08 |
Given
Allowed immediate alert exists; opportunity and conversation contain unique confidential terms and body canaries.
When
Render/send through a provider stub; open link under entitled, logged-out and removed users.
Then / oracle
Subject, preview, body and URL contain no private message body or confidential terms. A link is not an access grant. Authentication and live record policy gate detail; logged-out return URL does not leak data.
Evidence required
Full provider payload snapshot and URL scan; access checks; no tracking/log leakage of private content.
Decision dependency (verbatim)
Q07/Q08: safe email template and allowed public labels; no record-access secret in the link.
Source: TDD rev 1.3 (PDF); machine-readable in 10-Sources/tdd-bundle/. Back to Scenario-Index · Traceability-Matrix · integration dependencies in Dependency-and-Regression-Table.