Steps
- Define an allowlisted input schema and authenticated caller.
- State the authorization rule and the minimum read-only output.
- Specify errors for invalid, unauthorized, missing, and unavailable requests.
- Test each outcome with synthetic data, then attempt a harmless write and confirm it is rejected.
Verify and recover
The write attempt is denied, the underlying state is unchanged, and each error is distinguishable. Disable the registration if any test permits an unintended action.