Skip to main content

← Governance

Control tests

A control that has only ever been shown to permit is a control nobody has tested. Each test below performs the action the control is meant to forbid, in a transaction that is rolled back, and asks whether the control refused it — and whether the refusal came from that control rather than from something else that happened to stop it first.

48 of 50 controls have been shown to refuse what they guard. Last run 0.4 days ago.

Refused · 48

account_holdings · trg_holdings_invariant

record a holding against a batch that does not exist

attestations · trg_attestations_append_only

amend a signed attestation

audit_log_entries · prevent_audit_update

edit an audit log entry

audit_log_entries · prevent_audit_delete

delete an audit log entry

buffer_pool_entries · trg_buffer_units_not_editable

edit the allocated volume recorded on a buffer pool entry

buffer_pool_movements · trg_buffer_movement_no_update

amend a movement already written to the buffer ledger

buffer_pool_movements · trg_buffer_movement_no_delete

delete a movement from the buffer ledger

buffer_pool_movements · trg_buffer_balance_guard

release more buffer units than the entry holds

coi_declarations · trg_coi_screening_recorded

clear a conflict-of-interest declaration with no screener and no date

corresponding_adjustments · trigger_validate_ca_transition

downgrade a confirmed corresponding adjustment back to not-applied

credit_batches · trg_open_buffer_entry_for_batch

withhold a buffer from a batch of nothing

credit_batches · trg_transition_guard

jump a batch from PENDING straight to ISSUED

credit_batches · trg_initial_status

create a credit batch already ISSUED

credit_units · trg_transition_guard

move an active unit back into the buffer

credit_units · credit_units_reject_abolished_instrument

issue a unit typed to the abolished hybrid instrument

credit_units · trg_initial_status

mint a credit unit already RETIRED

documents · trg_document_checksum_immutable

change the checksum of a document already filed

documents · trg_document_checksum

file a document with no SHA-256 recorded

grievance_records · trg_grievance_lifecycle

resolve a grievance with no written resolution

human_decisions · trg_human_decisions_immutable

edit a recorded human decision

human_decisions · trg_override_rationale

override an AI recommendation with no rationale

issuance_requests · trg_transition_guard

skip a request past verification straight to a calculated buffer

issuance_requests · trg_initial_status

create an issuance request already at GOVERNANCE_APPROVAL

issuance_requests · trg_issuance_preconditions

confirm verification with no verification record named

issuance_requests · trg_governance_decision_recorded

issue credits with no governance decision on the record

issuance_requests · trg_host_country_engagement

approve an issuance whose LoA is marked not required for a use case that is not CONTRIBUTION

issuance_requests · trg_issuance_invariants

move the vintage of a request that has already passed its verification gate

issuance_requests · trg_methodology_in_force

approve an issuance under a methodology that is not in force

issuance_requests · trg_validation_opinion_gate

confirm verification for a project that holds no completed validation

issuance_requests · trg_verification_activity_class

confirm a verification that never stated its activity class

methodologies · methodologies_reject_abolished_instrument

register a methodology typed to the abolished hybrid instrument

projects · trg_transition_guard

jump a project from SUBMITTED straight to REGISTERED

projects · trg_safeguards_screening_recorded

leave safeguards screening with no assessment recorded

projects · trg_initial_status

create a project already past DRAFT

retirements · trg_enforce_claim_language

retire units against a carbon-neutrality claim

retirements · trg_retirement_debit

retire units that no account holds

retirements · trg_transition_guard

confirm a retirement without locking the credits first

retirements · trg_initial_status

record a retirement already CONFIRMED

review_findings · trg_finding_deferral_rules

defer a major non-conformity

stakeholder_consultations · trg_require_closing_protocol

close a consultation whose notice period has run but which published no closing protocol

stakeholder_consultations · trg_consultation_minimum_period

close a Tier 3 consultation the day it opened

unit_transfers · trg_transfer_immutability

amend a completed transfer in the journal

validation_records · trg_typed_opinion

record a validation opinion with no opinion type

verification_records · trg_buffer_rate_attributable

set a buffer rate that says nothing about where it came from

verification_records · trg_typed_opinion

record a verification opinion with no opinion type

vvb_accreditations · trg_accreditation_expiry

accredit a body with no expiry date

vvb_accreditations · trg_initial_status

create an accreditation already fully accredited

vvb_accreditations · trg_transition_guard

jump an applicant straight to fully accredited

No test written · 2

buffer_pool_entries · trg_open_buffer_ledger

projects · trg_sync_project_methodology_code

Refused by something else is not a pass. A test stopped by a different control, or by a table constraint, leaves the named control unproven — and treating it as a pass is how a shadowed test becomes a green tick. Test is broken means a fixture failed, not that a control failed: a test that cannot set up its own data looks exactly like a control that works, which is the most flattering bug this harness could have.