Status. Proposed engineering reference derived from vault revision 1.3. Every scenario is Not executed; no application exists. Generated from the scenario notes; regenerate rather than hand-edit.
Company-isolation scenarios
Scenarios whose gates include A03, A06 or A09 (separate discussions, scoped revocation, scoped privacy), plus DG22, the boundary scenario for opaque IDs. Selection is mechanical (gate or title keyword); read each scenario for its actual oracle. Harness design: Company-Isolation.
| ID | Title | Gates | Step | Decisions |
|---|---|---|---|---|
| T01 | Invitation-only access and single-company membership | A04, A06 | 02 | Q01 |
| T02 | Fixed roles cannot be bypassed through the API | A04, A09 | 02 | Q02 |
| T03 | Company-admin visibility is disclosed and scoped | A03, A04, A09 | 02 | Q02, Q08 |
| T04 | Reassignment moves work without duplicating it | A04, A06, A07 | 02 | Q02, Q07 |
| T06 | Search filtering precedes counts and pagination | A01, A06, A09 | 05 | Q03 |
| T08 | Validation and unsaved drafts remain private | A01, A05, A09 | 04 | — |
| T09 | Ask privately without posting or submitting interest | A02, A03 | 06 | Q02, Q04, Q07 |
| T10 | Third respondent has a separate private conversation | A03, A09 | 06 | Q08 |
| T11 | Messages require current authority and safe input | A03, A06, A09 | 06 | Q02, Q09 |
| T16 | Approval and role revocation races remain authorised | A04, A06 | 03 | Q07 |
| T19 | Accept, decline and withdraw are mutually consistent | A03, A07, A08 | 06 | Q05, Q07, Q08 |
| T24 | Lifecycle edges do not import Comprehensive scope | A07, A09 | 06 | Q04, Q05 |
| T25 | Revocation invalidates open sessions and saved links | A06, A09 | 03 | Q07, Q09 |
| T26 | Role downgrade and assignment removal use live policy | A04, A06 | 02 | Q02, Q07 |
| T27 | Object IDs and errors reveal no private existence | A03, A06, A09 | 03 | Q08 |
| T28 | DG operations do not grant private-message browsing | A06, A09 | 03 | Q08 |
| T29 | Next-action creation and completion are participant scoped | A03, A04, A07 | 06 | Q02, Q10 |
| T30 | Daily view mirrors the underlying authorised records | A04, A07, A09 | 08 | Q10 |
| T32 | History and records survive permitted responsibility changes | A04, A06, A07 | 06 | Q02, Q07, Q09 |
| T34 | Email content is minimal and links reauthorise | A06, A08, A09 | 07 | Q07, Q08 |
| T36 | Failures, recipient changes and callbacks are recoverable | A06, A08, A10 | 07 | Q07, Q08 |
| T37 | Authentication, invitation and session controls hold | A06, A10 | 01 | Q09 |
| T38 | Environment separation and safe failure visibility | A09, A10 | 01 | Q09 |
| DG22 | Opaque IDs do not grant named private oversight | S03, S07 | 03 | Q08, Q16 |
24 scenarios listed.