Environment separation
Actions in test never touch live records, move real money or send Messages to a real Person.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC8.1 | The entity authorizes, designs, develops, configures, documents, tests, approves and implements changes to infrastructure, data, software and procedures. |
| ISO27001 A.8.31 | Development, testing and production environments are separated and secured. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every Action marked test in the report period. |
| Assert | None touches a live record, a money Transaction or a Message to a Person outside the namespace’s test set. |
Owner
Engineering Lead, Engineering Team.
Example
A founder runs a full test Order through a bookkeeping service. The charge, the delivery and the receipt all land in test, and no real card or inbox is touched.