Skip to content
arch-lab
Live
Demo
Syntax
Validate
MCP
Account recovery reviews
A supervisor review queue, decomposed into the cases that prove it.
Open in the playground
Account recovery reviews
Test suite
Test condition
Test case
Preconditions
Expected result
L-01
A supervisor can open
Reviews
A supervisor account
The queue table renders with its
filter panel
L-02
An agent is refused at
the API
An agent account with no Reviews
right, and a live token
Refused by the server, not by a
hidden menu
L-12
Two supervisors claim at
once
One unassigned ticket, two sessions
holding it open
Only the first wins, and the audit
log has one entry
Reviews list
D-09
Rejecting needs a reason
A ticket you own
Update is refused, and the reason
reaches the audit log
D-14
A decided ticket is
read-only
One decided ticket of each outcome
No control offered, and the API
refuses a second decision
Review detail
C-02
Evidence links must be
https
Links using http, javascript and
data schemes
Only https is accepted
Not covered by the
acceptance criteria
Account recovery reviews
Supervisor-only queue. Every
case below is runnable today.
Fit