Deterministic Phase 2 and Phase 3 journeys. Starting one replaces the current fake session state.
privacy-eea-suppressed
Test: Dismiss the landing-page notice, reload, then inspect Privacy Controls.
Expect: The notice stays dismissed, and no identifier or linked analytics data exists.
privacy-opt-out
Test: Export the three linked events, turn off analytics, then export again.
Expect: Rows are exported, then deleted before the identifier; the second export is empty.
privacy-deletion-failure
Test: Try to turn off analytics, read the error, then reload the page.
Expect: The failure is explicit and the identifier and linked row remain unchanged.
privacy-dnt
Test: Visit the landing page and Privacy Controls, then inspect the event viewer.
Expect: No notice, identifier, or analytics event is created while DNT is active.
auth-sign-up-us
Test: Create the account, open the fake inbox, verify the email, then sign in.
Expect: One account and verification email are created; verification enables sign-in.
auth-sign-up-non-us
Test: Complete the sign-up form, then inspect the fake inbox and event viewer.
Expect: The request is refused without creating an account or verification email.
auth-password-reset
Test: Request a reset, use its inbox link once, then expire and open a fresh link.
Expect: GET does not consume links; submitted, reused, and expired states remain distinct.
account-overview-us
Test: Review the verified identity, empty optional name, status, and acquisition copy.
Expect: The account is active, the optional name is empty, and US-only gates may be met.
account-profile-change
Test: Set, change, and remove the optional name; then request and confirm a new email.
Expect: Profile changes persist and the old email remains active until confirmation succeeds.
account-overview-outside-us
Test: Review the active account and its separate residence/acquisition state.
Expect: Existing account controls remain available while new acquisitions stay unavailable.
account-profile-empty-name
Test: Review the empty optional-name control, enter a name, save, and reload.
Expect: The name starts empty and a saved value persists in the isolated fake session.
account-profile-changed-name
Test: Review the prefilled name, remove it, save, and reload.
Expect: The changed name is visible and can be removed without changing account evidence.
account-email-awaiting-confirmation
Test: Request the new address and inspect the unchanged verified address and fake inbox.
Expect: The old address remains authoritative while the fake confirmation is pending.
account-email-success
Test: Request a new address, open its fake inbox link, and revisit the account.
Expect: The fake identity and account converge on the confirmed address.
account-email-expired
Test: Request a new address, then open the deliberately expired fake link.
Expect: The link reports expired and makes no identity change.
account-email-used
Test: Request a new address, then open the deliberately used fake link.
Expect: The link reports used and makes no second mutation.
account-email-conflict
Test: Submit any syntactically valid new address.
Expect: The response is enumeration-safe and the current address remains unchanged.
account-email-retryable
Test: Submit a new address and review the retry guidance.
Expect: No success is claimed and retry remains safe.
account-email-indeterminate
Test: Submit a new address and review the uncertain-result guidance.
Expect: The page does not claim either completion or failure.
account-email-reconciliation-needed
Test: Submit a new address and review the reconciliation result.
Expect: The identity split is explicit and recoverable rather than silently accepted.
account-password-change
Test: Request a link, prove a weak password does not consume it, then change the password.
Expect: The valid change runs once, all fake sessions end, and only the new password works.
account-password-awaiting-link
Test: Request a link and inspect the fake inbox before changing anything.
Expect: A delivered one-time link is visible and no credential or session has changed.
account-password-weak-password
Test: Request a link, open it, then submit a password shorter than twelve characters.
Expect: The weak password is refused without consuming the link.
account-password-invalid-link
Test: Open an arbitrary reset link and try a valid replacement password.
Expect: The link is reported invalid and no password changes.
account-password-expired-link
Test: Request and open the link, then try a valid replacement password.
Expect: The link is reported expired and no password changes.
account-password-used-link
Test: Request and open the link, then try a valid replacement password.
Expect: The link is reported used and no second mutation occurs.
account-password-success
Test: Request and open the link in the fake inbox, submit a valid password, then sign in again.
Expect: All fake sessions end and only the new password signs in.
account-password-provider-outage
Test: Request a password-change link and review the service result.
Expect: Provider unavailability is explicit and no capability is issued.
account-password-mail-outage
Test: Request a password-change link and inspect the failed-delivery result.
Expect: Mail failure is distinct from success and no link is exposed.
account-backend-unavailable
Test: Review the account service boundary.
Expect: The session is not mislabeled as signed out.
account-signed-out
Test: Review the account entry choices.
Expect: Sign-up and sign-in are offered without an outage claim.
account-forbidden
Test: Try to sign in with the documented demo password.
Expect: The account is refused without an outage or signed-in shell.
account-deletion-pending
Test: Review the account status and available Phase 3.1 facts.
Expect: Deletion pending is distinct from active and terminated.
account-terminated
Test: Review the account status boundary.
Expect: Terminated is distinct from signed out and backend unavailable.
licence-active
Test: Review the active licence and device allowance.
Expect: Review the active licence and device allowance.
licence-loading
Test: Review the deterministic loading state.
Expect: Review the deterministic loading state.
licence-empty
Test: Review the honest non-purchasing empty state.
Expect: Review the honest non-purchasing empty state.
licence-ended
Test: Review ended-licence consequences.
Expect: Review ended-licence consequences.
licence-deletion-pending
Test: Review read-only licence facts.
Expect: Review read-only licence facts.
licence-outside-us
Test: Confirm existing operations remain available.
Expect: Confirm existing operations remain available.
licence-outage
Test: Review the unavailable state.
Expect: Review the unavailable state.
licence-error
Test: Review retry guidance.
Expect: Review retry guidance.
devices-active
Test: Rename then remove a device and reload.
Expect: Rename then remove a device and reload.
devices-empty
Test: Review available slots.
Expect: Review available slots.
devices-full
Test: Review full-slot guidance.
Expect: Review full-slot guidance.
devices-loading
Test: Review the deterministic loading state.
Expect: Review the deterministic loading state.
devices-ended
Test: Review activation consequences.
Expect: Review activation consequences.
devices-deletion-pending
Test: Review read-only device facts.
Expect: Review read-only device facts.
devices-outage
Test: Review the unavailable state.
Expect: Review the unavailable state.
devices-stale
Test: Review concurrent-change guidance.
Expect: Review concurrent-change guidance.
devices-retryable
Test: Try a confirmed mutation and review retry guidance.
Expect: Try a confirmed mutation and review retry guidance.
devices-indeterminate
Test: A lost result remains uncertain without changing the seeded device.
Expect: A lost result remains uncertain without changing the seeded device.
native-authorization-indeterminate
Test: Terms, approval, and denial preserve uncertainty without changing the request.
Expect: Terms, approval, and denial preserve uncertainty without changing the request.
native-authorization-outage
Test: An unavailable read does not assert that the request is invalid or unchanged.
Expect: An unavailable read does not assert that the request is invalid or unchanged.
devices-error
Test: Review retry guidance.
Expect: Review retry guidance.
account-email-preferences-loading
Test: Review the deterministic loading state before preferences are available.
Expect: Review the deterministic loading state before preferences are available.
account-email-preferences-eligible-off
Test: Review the independent optional choices before either is selected.
Expect: Review the independent optional choices before either is selected.
account-email-preferences-product-only
Test: Product email is selected and measurement remains independently off.
Expect: Product email is selected and measurement remains independently off.
account-email-preferences-product-plus-measurement
Test: Both optional choices are visibly selected.
Expect: Both optional choices are visibly selected.
account-email-preferences-measurement-withdrawn
Test: Product email remains selected while measurement is off.
Expect: Product email remains selected while measurement is off.
account-email-preferences-unsubscribed
Test: Both optional choices are off after product-email withdrawal.
Expect: Both optional choices are off after product-email withdrawal.
account-email-preferences-outside-us
Test: Existing choices remain visible but optional sending cannot be enabled.
Expect: Existing choices remain visible but optional sending cannot be enabled.
account-email-preferences-deletion-pending
Test: Preference management is unavailable while deletion is pending.
Expect: Preference management is unavailable while deletion is pending.
account-email-preferences-terminated
Test: Preference management is unavailable for a terminated account.
Expect: Preference management is unavailable for a terminated account.
account-email-preferences-revoked-session
Test: The live preference session is distinctly signed out.
Expect: The live preference session is distinctly signed out.
account-email-preferences-outage
Test: An outage does not relabel the session as signed out.
Expect: An outage does not relabel the session as signed out.
account-email-preferences-retryable
Test: A save reports retry guidance without claiming success.
Expect: A save reports retry guidance without claiming success.
account-email-preferences-indeterminate
Test: A lost result remains uncertain without changing the seeded preferences.
Expect: A lost result remains uncertain without changing the seeded preferences.
account-email-preferences-stale
Test: A concurrent change remains distinct from an outage.
Expect: A concurrent change remains distinct from an outage.
account-email-preferences-error
Test: Unexpected failure has clear retry guidance.
Expect: Unexpected failure has clear retry guidance.
unsubscribe-confirmation
Test: The confirmation page does not mutate on GET.
Expect: The confirmation page does not mutate on GET.
unsubscribe-invalid
Test: The safe public result reveals no account facts.
Expect: The safe public result reveals no account facts.
account-residence-cycle
Test: Declare outside-US residence, inspect account and email preferences, then renew US residence and make fresh optional choices.
Expect: Every connected account surface reflects one authoritative account without silently restoring historical optional choices.
account-residence-current-us
Test: Review the current declaration and begin the opposite declaration.
Expect: US acquisition gates may be met; no address, exact country, or proof is requested.
account-residence-current-outside
Test: Review the preserved account and licence capabilities.
Expect: Existing capabilities remain available while new acquisitions are unavailable.
account-residence-confirm-outside
Test: Open the declaration dialog and read the consequences.
Expect: The confirmation states the complete consequence set before password entry.
account-residence-confirm-us
Test: Open the declaration dialog and read the consequences.
Expect: Restored acquisition eligibility is conditional and optional choices do not restart.
account-residence-password-outside
Test: Open the dialog, continue, then enter a password.
Expect: The password stays local to the form and is cleared after submission or dismissal.
account-residence-wrong-password
Test: Enter a password and confirm the declaration.
Expect: The error is retryable and no transition is claimed.
account-residence-rate-limited
Test: Enter a password and confirm the declaration.
Expect: The cooldown is explicit and does not claim a transition.
account-residence-pending
Test: Review the deterministic pending state.
Expect: A second transition is not invited while the first result is unsettled.
account-residence-indeterminate-committed
Test: Submit the declaration, then check the original operation.
Expect: The uncertain result survives until an operation-specific check confirms the committed transition.
account-residence-indeterminate-committed-recovery-session-revoked
Test: Submit the declaration, attempt recovery after session expiry, then check the original operation again.
Expect: The original operation identity survives the revoked recovery session and later confirms the committed transition.
account-residence-indeterminate-no-commit
Test: Submit the declaration, then check the original operation.
Expect: The operation remains honestly uncertain and is not presented as a retry or a success.
account-residence-success
Test: Review the deterministic success state.
Expect: The visible result is separated from the action control.
account-residence-success-refresh-unavailable
Test: Submit the declaration, retain its result through the read outage, then check the original operation.
Expect: The committed operation remains recoverable while the current declaration cannot be refreshed.
account-residence-backend-outage
Test: Review the controlled unavailable state.
Expect: An outage never becomes a false success or persistence claim.
account-residence-provider-outage
Test: Enter a password and confirm the declaration.
Expect: Password verification unavailability is distinct from an incorrect password.
account-residence-notice-pending
Test: Enter a password and confirm the declaration.
Expect: The preview distinguishes notice delivery from the declaration result.
account-residence-notice-pending-refresh-unavailable
Test: Submit the declaration and retain the notice-pending result through the read outage.
Expect: The committed declaration and pending notice remain distinct while the current declaration cannot be refreshed.
account-residence-deletion-pending
Test: Review the account state.
Expect: Residence changes are unavailable while deletion is pending.
account-residence-terminated
Test: Review the account state.
Expect: A terminated account is distinct from a signed-out account.
account-residence-stale
Test: Enter a password and confirm the declaration.
Expect: A concurrent change requires refresh instead of a blind retry.
account-residence-proof-replay
Test: Enter a password and confirm the declaration.
Expect: The consumed confirmation is not reused.
account-residence-session-revoked
Test: Enter a password and confirm the declaration.
Expect: The result directs the person to sign in again.
account-residence-unexpected
Test: Enter a password and confirm the declaration.
Expect: The page does not claim that anything changed.