ASSURANCE · UAT

Passing a happy path is not certification.

Every rail proves duplicates, timeout recovery, finality, reconciliation, security and operator controls before even a tiny real-money allowlist is considered.

TWO-GATE RELEASE

Sandbox/test profile only

Production enablement: OFF

GATE 1

AutoTaxi API Ready

Canonical contracts, mocks, clients and controls are ready for bilateral provider onboarding.

OpenAPI/AsyncAPI and contract tests pass
Deterministic failure simulators pass
Ledger/idempotency/reconciliation invariants pass
Production rejects every mock adapter
All real-money flags remain off

GATE 2A → 2B · PER RAIL

Provider Real-Money Ready

The exact provider wire profile passes TEST MONEY UAT first, then one authorized Production canary is closed and reconciled.

2A: signed APIs, statuses, security and bilateral UAT
2A: every failure/recovery and TEST MONEY reconciliation passes
2B: separate Production identity, funding and control review
2B start: one exact low-value canary is authorized
2B close-out: callback, ledger and settlement reconcile to zero

MANDATORY SCENARIOS

Provider certification test matrix

Test controls drive the real adapter, inbox, worker, outbox and ledger path. They never mutate financial state directly.

MMQR

Create success and provider rejection
Timeout after provider acceptance
Missing callback recovered by inquiry
Duplicate, delayed and out-of-order events
Amount, currency or merchant mismatch
Expiry, late payment and reversal

Payout

Account match, mismatch and closed account
Payout accepted with response timeout
Pending, success and final failure
Unknown recovered without resubmission
Duplicate callback, return and reversal
Insufficient liquidity and provider outage

Gift Card partner

Product and denomination enforcement
Insufficient partner float
Reservation expiry
Duplicate reserve and confirm
Same JWE on authorized retry
Refund-required and settlement dispute

FINAL EVIDENCE

One immutable evidence pack per certified artifact.

Provider and AutoTaxi signoff
Artifact/configuration digest
Security and credential evidence
Scenario-by-scenario results
Settlement and reconciliation controls
Approved limits, allowlist and expiry
Rollback and rail-disable rehearsal
Support contacts and escalation SLA

UAT certification checklistMarkdown · owners, evidence and signoff UAT test matrixCSV · import into the joint execution tracker