Summary
The access-control contract has 835 lines of hand-written tests but permission logic is complex enough to warrant property-based testing. proptest is already a dev dependency.
Properties to Test
- Soundness: a provider without explicit grant never has access
- Completeness: after a grant, the provider always has access until revocation
- Revocation: after revoke, access is always denied regardless of prior grants
- Expiry: after consent expiry timestamp, access is always denied
- Scope isolation: a grant for scope A never gives access to scope B
Acceptance Criteria
Summary
The access-control contract has 835 lines of hand-written tests but permission logic is complex enough to warrant property-based testing. proptest is already a dev dependency.
Properties to Test
Acceptance Criteria