One-stop automated verification across all platforms (SuperAdmin, Fleet Operator, Client, Driver Mobile, Live Tracking & Telemetry, Microservices & Edge Cases).
Countries, Tariffs, Vehicles, Shifts, Bookings
Settings, Rates, Drivers, Roles, Payments
Soft Deletes, FK Integrity, Revocations
Cross-platform push & settings sync
Live tracking, dispatch telemetry, microservices
Independent agents continuous auditing across every portal, mobile application, and event mesh layer.
Platform Policies, Global Settings, Tariffs & Master RBAC Master
Operator Web Portal: Fleet, Drivers, Invoices & Dispatch Office
Client Web Portal: Corporate Admin, Department Budgets & Billing
Chauffeur Mobile App: Shifts, Trip Lifecycle, Metering & Offline Sync
Operator Mobile App: Rapid Dispatch, Live Radar & Emergency Hot-Swap
Client Mobile App: Biometric Login, Live Radar, Chat & Digital Tip
Actor Model Bus: Cross-Talk, Multi-Agent Handshakes & State Sync
GPS Tracking, Geofencing, Speed Corridor & SLA Sentinel
Multi-Country Taxation, Currency, Distance Units & Legal Compliance Sentinel
Role-Based Access Control, Tenant Isolation & Privilege Escalation Sentinel
API Gateway, Kafka, OSRM Routing, SLA & Zero-Delay Notification Sentinel
End-to-End Policy Cascades & Incident Recovery Auditor
| Status | Scenario ID & Title | Platform & Domain | Severity | Steps / Assertions | Latency | Actions |
|---|---|---|---|---|---|---|
| PASSING | SETTING-PROF-001UPDATE My Profile: Chauffeur Liaison Title & Personal Avatar Upload SuperAdmin updates personal profile details, uploading high-resolution executive avatar and updating chauffeur liaison title in company_profiles. | superadmin Profile Settings | medium | 3/3 Steps•2/2 Assertions | 72ms | |
| PASSING | SETTING-PROF-002UPDATE My Profile: Verified Corporate Email & Phone Number Mutation SuperAdmin initiates email change request requiring OTP verification token and E.164 phone formatting. | superadmin Profile Settings | critical | 3/3 Steps•2/2 Assertions | 74ms | |
| PASSING | SETTING-PROF-003UPDATE My Profile: Timezone & Preferred Locale/Language Preference Hot-Update SuperAdmin changes primary operating timezone to Europe/Madrid and language preference to Spanish with zero-page reload hot-hydration. | superadmin Profile Settings | medium | 3/3 Steps•2/2 Assertions | 32ms | |
| PASSING | SETTING-PROF-004UPDATE My Profile: Time-based One-Time Password (TOTP) 2FA Activation SuperAdmin enables RFC 6238 TOTP authenticator pairing, generating base32 secret, QR code, and validating 6-digit sync code with 10 single-use recovery codes. | superadmin Profile Settings | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-PROF-005DELETE My Profile: Remote Active Session Revocation & Token Invalidation SuperAdmin inspects active logged-in devices across Chrome Mac, Safari iPhone, and terminates stale sessions, invalidating refresh tokens immediately. | superadmin Profile Settings | high | 3/3 Steps•2/2 Assertions | 44ms | |
| PASSING | SETTING-PROF-006UPDATE My Profile: Operator Emergency Notification Sound Scheme Preference SuperAdmin chooses distinct sound chime alerts for High-Severity SOS vs Regular Dispatch Acceptance in the browser notification center. | superadmin Profile Settings | low | 2/2 Steps•2/2 Assertions | 27ms | |
| PASSING | SETTING-HQ-001UPDATE My Headquarter: Legal Corporate Entity Name & Commercial Registry Verification SuperAdmin registers TransHola Global Mobility S.L. commercial registry data, Tome, Folio, and corporate charter numbers. | superadmin Headquarter Settings | critical | 3/3 Steps•2/2 Assertions | 60ms | |
| PASSING | SETTING-HQ-002UPDATE My Headquarter: Tax VAT/NIF/EIN Registration ID Validation SuperAdmin inputs headquarter EU VIES VAT identifier (ESB88291039) and runs algorithmic checksum validation. | superadmin Headquarter Settings | critical | 3/3 Steps•2/2 Assertions | 75ms | |
| PASSING | SETTING-HQ-003UPDATE My Headquarter: Physical Dispatch Command Center Address & Coordinates SuperAdmin updates headquarter physical address (Paseo de la Castellana 95, Madrid) with geocoded coordinates for timezone and regional dispatch attribution. | superadmin Headquarter Settings | high | 3/3 Steps•2/2 Assertions | 76ms | |
| PASSING | SETTING-HQ-004UPDATE My Headquarter: Corporate Banking Coordinates (IBAN, BIC/SWIFT) Verification SuperAdmin updates primary corporate bank account for platform fee settlements, verifying IBAN MOD-97 algorithm and BIC routing code. | superadmin Headquarter Settings | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-HQ-005UPDATE My Headquarter: Corporate Primary Operational Currency Hot-Switch SuperAdmin validates operational currency defaults (EUR base), multi-currency ledger conversions, and rounding rules for financial reporting. | superadmin Headquarter Settings | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-HQ-006UPDATE My Headquarter: Escalation Finance & Accounting Liaison Contacts SuperAdmin designates dedicated financial escalation contacts, invoice remittance emails, and emergency billing audit notification distribution lists. | superadmin Headquarter Settings | medium | 2/2 Steps•2/2 Assertions | 26ms | |
| PASSING | SETTING-STAFF-001ADD Super Admin Internal: Onboard Internal Staff Member with Scoped Role SuperAdmin invites new internal operations staff member, assigning Dispatch Supervisor role with restricted access to billing and bank vaults. | superadmin Staff & Roles | critical | 3/3 Steps•2/2 Assertions | 72ms | |
| PASSING | SETTING-STAFF-002UPDATE Super Admin Internal: Granular RBAC Permission Matrix Mutation SuperAdmin updates permissions for Compliance Auditor role, granting read-only access to driver licenses while preventing manual approval actions. | superadmin Staff & Roles | critical | 3/3 Steps•2/2 Assertions | 44ms | |
| PASSING | SETTING-STAFF-003UPDATE Super Admin Internal: Temporary Emergency Step-Up Access Elevation SuperAdmin grants temporary 2-hour elevated access to Senior Dispatcher during major airport weather disruption, requiring mandatory reason audit note. | superadmin Staff & Roles | high | 3/3 Steps•2/2 Assertions | 62ms | |
| PASSING | SETTING-STAFF-004DELETE Super Admin Internal: Immediate Revocation & Staff Account Suspension SuperAdmin suspends departing staff account, instantly terminating all active WebSocket channels, Supabase JWTs, and revoking API permissions. | superadmin Staff & Roles | critical | 3/3 Steps•2/2 Assertions | 44ms | |
| PASSING | SETTING-STAFF-005FLOW Super Admin Internal: Staff Multi-Factor Enforcement Verification Periodic automated auditor verifies 100% of SuperAdmin and Internal Operations staff have active hardware or TOTP 2FA registered. | superadmin Staff & Roles | high | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | SETTING-STAFF-006UPDATE Super Admin Internal: Staff Duty Shift Hours & Dispatch Zone Assignment SuperAdmin assigns Dispatcher Carlos to EMEA Southern Zone (Madrid, Barcelona, Malaga) from 06:00 to 14:00 CET. | superadmin Staff & Roles | medium | 3/3 Steps•2/2 Assertions | 44ms | |
| PASSING | SETTING-SEC-001UPDATE Super Admin Security: Inactive Session Idle Timeout Enforcement SuperAdmin sets global idle session timeout to 15 minutes of inactivity; background watchdog terminates idle browser sessions. | superadmin Security Settings | high | 3/3 Steps•2/2 Assertions | 54ms | |
| PASSING | SETTING-SEC-002UPDATE Super Admin Security: Mandatory 2FA/MFA Step-Up on Financial Mutations SuperAdmin enforces mandatory step-up re-authentication whenever operator commission rates, bank accounts, or manual payout releases are triggered. | superadmin Security Settings | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-SEC-003UPDATE Super Admin Security: Enterprise IP CIDR Range Allowlist Enforcement SuperAdmin restricts internal admin portal access to designated corporate VPN IP CIDR ranges (195.55.120.0/24, 212.166.80.0/24). | superadmin Security Settings | critical | 3/3 Steps•2/2 Assertions | 42ms | |
| PASSING | SETTING-SEC-004UPDATE Super Admin Security: 90-Day Enterprise Password Complexity & Rotation Policy SuperAdmin mandates minimum 14 characters, uppercase, lowercase, numeric, symbol, and zxcvbn strength score >= 3 with 90-day expiration. | superadmin Security Settings | high | 3/3 Steps•2/2 Assertions | 45ms | |
| PASSING | SETTING-SEC-005UPDATE Super Admin Security: Platform API Secret Key Revocation & Hot-Rotation SuperAdmin rotates internal microservices API secret key, maintaining 15-minute dual-signature grace period to avoid downtime. | superadmin Security Settings | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-SEC-006FLOW Super Admin Security: Cross-Site Request Forgery (CSRF) & SameSite Cookie Enforcement Security automated probe audits all browser cookies to ensure Strict SameSite, Secure, HttpOnly, and Anti-CSRF token synchronization. | superadmin Security Settings | critical | 3/3 Steps•2/2 Assertions | 36ms | |
| PASSING | SETTING-NOTIF-001ADD Super Admin Notifications: High-Priority Systemwide Broadcast Dispatch SuperAdmin broadcasts emergency severe weather warning to all drivers and operators across Catalonia region with immediate push notification banner. | superadmin Notification Settings | critical | 3/3 Steps•2/2 Assertions | 51ms | |
| PASSING | SETTING-NOTIF-002UPDATE Super Admin Notifications: SMTP Email Relay Server TLS Handshake & Health SuperAdmin updates Amazon SES / SendGrid SMTP relay configuration, verifying STARTTLS port 587 handshake, DKIM, and SPF domain alignment. | superadmin Notification Settings | high | 3/3 Steps•2/2 Assertions | 110ms | |
| PASSING | SETTING-NOTIF-003UPDATE Super Admin Notifications: Twilio SMS Gateway Credentials & Delivery Status Webhook SuperAdmin configures Twilio Account SID and Auth Token, testing SMS dispatch and verifying status callback webhook signature validation. | superadmin Notification Settings | critical | 3/3 Steps•2/2 Assertions | 70ms | |
| PASSING | SETTING-NOTIF-004UPDATE Super Admin Notifications: Slack & Webhook Operational Incident Channels SuperAdmin links Slack channel #ops-critical-alerts for real-time dispatching SLA violations and chauffeur SOS panic notifications. | superadmin Notification Settings | medium | 3/3 Steps•2/2 Assertions | 72ms | |
| PASSING | SETTING-NOTIF-005CASCADE Super Admin Notifications: Native Mobile Push Audio Chime Scheme Sync SuperAdmin updates audio chime sound profiles for Android and iOS devices, pushing notification channel IDs to Apple APNs and Google FCM. | superadmin Notification Settings | low | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | SETTING-NOTIF-006UPDATE Super Admin Notifications: Automated Chauffeur Shift Reminder Dispatch Schedule SuperAdmin configures pre-shift reminders: 120 minutes, 60 minutes, and 15 minutes before chauffeur assigned shift duty starts. | superadmin Notification Settings | medium | 3/3 Steps•2/2 Assertions | 46ms | |
| PASSING | SETTING-AUDIT-001FLOW Super Admin Audit: Immutable Cryptographic SHA-256 Hash Chain Verification Audits integrity of audit_logs table; verifies each record hash incorporates previous row hash in cryptographic blockchain-style chain. | superadmin Audit Settings | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-AUDIT-002UPDATE Super Admin Audit: 7-Year Statutory Regulatory Log Retention Policy SuperAdmin mandates 2,555-day (7 years) immutable retention policy for financial, booking, and chauffeur dispatch audit logs per tax compliance laws. | superadmin Audit Settings | high | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | SETTING-AUDIT-003FLOW Super Admin Audit: Entity & Actor Multi-Criteria Filter Query Engine Audits performance of complex audit log queries: actor_id + entity_type + action + date_range executes in < 35ms using B-tree composite indexes. | superadmin Audit Settings | medium | 2/2 Steps•2/2 Assertions | 30ms | |
| PASSING | SETTING-AUDIT-004FLOW Super Admin Audit: Tamper-Evident Audit Export to Signed JSON & CSV SuperAdmin generates official regulatory compliance export file; system digitally signs export with RSA private key and issues cryptographic manifest. | superadmin Audit Settings | high | 3/3 Steps•2/2 Assertions | 88ms | |
| PASSING | SETTING-ACT-001FLOW Activity Engine: Kafka Event Topic Partition Balancing & High-Watermark Check Monitors Kafka topic transhola.telemetry.events across 8 partitions, validating zero partition lag and uniform message distribution. | engines Activity Engine | critical | 3/3 Steps•2/2 Assertions | 56ms | |
| PASSING | SETTING-ACT-002FLOW Activity Engine: Redis Stream Ring Buffer Window Thresholds Validates non-blocking rolling bitfield deduplication and memory ring buffer, supporting 100k events/sec without eviction drops. | engines Activity Engine | critical | 3/3 Steps•2/2 Assertions | 36ms | |
| PASSING | SETTING-ACT-003UPDATE Activity Engine: Telemetry Sampling Frequency Configuration Configures telemetry sampling frequency: 1Hz (1 ping per second) while chauffeur has active on-board passenger, 10s while idling on standby. | engines Activity Engine | high | 3/3 Steps•2/2 Assertions | 38ms | |
| PASSING | SETTING-ACT-004FLOW Activity Engine: Heartbeat Sentinel Automated Offline Timeout Activity Engine sentinel monitors active driver sockets; if no telemetry or ping is received for 45s, marks driver degraded, and offline at 90s. | engines Activity Engine | high | 3/3 Steps•2/2 Assertions | 42ms | |
| PASSING | SETTING-ACT-005FLOW Activity Engine: Microservice Health Probe Recovery & Circuit Breaker Reset Tests automated circuit breaker trip on downstream failure, fallback queueing, and automatic half-open circuit test recovery upon health restored. | engines Activity Engine | critical | 3/3 Steps•2/2 Assertions | 62ms | |
| PASSING | SETTING-ACT-006FLOW Activity Engine: Distributed Lock Lease Duration & Auto-Renewal Audits Redlock distributed lock algorithm ensuring job claim locks expire in 15 seconds unless renewed by active processing worker thread. | engines Activity Engine | critical | 3/3 Steps•2/2 Assertions | 42ms | |
| PASSING | SETTING-FO-001UPDATE Fleet Operator Defaults: Standard Platform Commission Split Ratio (85/15) SuperAdmin validates global default commission split: 85% payable to Fleet Operator, 15% retained as TransHola platform fee. | Operator Web Operator Defaults | critical | 3/3 Steps•2/2 Assertions | 40ms | |
| PASSING | SETTING-FO-002UPDATE Fleet Operator Defaults: Mandatory KYC Onboarding Dossier Requirements SuperAdmin defines mandatory KYC documents: Company Tax Certificate (CIF), Public Liability Insurance (min €50M), and Transport Authorization (VTC/TNC). | Operator Web Operator Defaults | critical | 3/3 Steps•2/2 Assertions | 56ms | |
| PASSING | SETTING-FO-003UPDATE Fleet Operator Defaults: Weekly Bank Payout Cadence & Minimum Settlement Threshold Configures automated SEPA / Stripe payout sweep every Tuesday at 03:00 UTC with €100.00 minimum earnings threshold. | Operator Web Operator Defaults | high | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-FO-004UPDATE Fleet Operator Defaults: Minimum Fleet Escrow Security Deposit Balance SuperAdmin configures €500.00 minimum escrow balance for operators executing high-capacity luxury group transfers. | Operator Web Operator Defaults | medium | 2/2 Steps•2/2 Assertions | 30ms | |
| PASSING | SETTING-FO-005UPDATE Fleet Operator Defaults: Automated Operator Inactivity Suspension Threshold Operators with zero fulfilled trips and zero active chauffeurs for 60 consecutive days are automatically transitioned to dormant_pending_review. | Operator Web Operator Defaults | medium | 3/3 Steps•2/2 Assertions | 50ms | |
| PASSING | SETTING-FO-006FLOW Fleet Operator Defaults: Multi-Currency Chauffeur Settlement Calculation Tests automated conversion when international passenger books in USD, operator fulfills in Spain (EUR), and chauffeur is settled in EUR with fixed lock FX. | Operator Web Operator Defaults | high | 3/3 Steps•2/2 Assertions | 36ms | |
| PASSING | SETTING-VEH-001UPDATE Vehicles Parameter: Allowed Vehicle Class Classification (Executive, First Class, Van, SUV) SuperAdmin defines 5 standard global vehicle categories: Executive Sedan (E-Class), First Class (S-Class), Luxury Van (V-Class), Executive SUV (Range Rover), and Minibus (Sprinter). | superadmin Vehicles Parameter | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-VEH-002UPDATE Vehicles Parameter: Maximum Vehicle In-Service Age Mandate (Max 5 Years) SuperAdmin enforces policy restricting vehicles older than 5 years (current year - model_year > 5) from executive dispatch operations. | superadmin Vehicles Parameter | high | 3/3 Steps•2/2 Assertions | 46ms | |
| PASSING | SETTING-VEH-003UPDATE Vehicles Parameter: Euro-6 / Zero-Emission EV Environmental Mandate SuperAdmin sets environmental engine compliance standards: Euro 6d-TEMP or 100% Electric (BEV) required for urban low-emission zones (ZBE/ULEZ). | superadmin Vehicles Parameter | high | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | SETTING-VEH-004UPDATE Vehicles Parameter: Passenger & Luggage Capacity Validation Rules Configures physical payload constraints: Sedan (Max 3 Pax, 2 Luggage), Van (Max 7 Pax, 7 Luggage). Blocks dispatches exceeding physical payload. | superadmin Vehicles Parameter | medium | 2/2 Steps•2/2 Assertions | 32ms | |
| PASSING | SETTING-VEH-005UPDATE Vehicles Parameter: Vehicle Compliance Document Expiry Notification Window Configures automated compliance alerts: 30 days and 7 days before vehicle insurance or registration expiration; auto-suspends on day 0. | superadmin Vehicles Parameter | high | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-VEH-006UPDATE Vehicles Parameter: Fleet Vehicle Reassignment & Chauffeur Shift Pairing Rules Validates multi-chauffeur shift sharing rules on a single vehicle, ensuring shifts do not overlap and chauffeur handover buffer is >= 30 minutes. | superadmin Vehicles Parameter | medium | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | SETTING-CLI-001UPDATE Clients Defaults: Corporate Client Credit Limit & Monthly Spending Caps SuperAdmin defines corporate billing terms: €10,000.00 standard monthly credit line with hard booking block when 100% ceiling is reached. | Client Web Client Defaults | critical | 3/3 Steps•2/2 Assertions | 50ms | |
| PASSING | SETTING-CLI-002UPDATE Clients Defaults: Automated Net-30 Invoicing Calendar & Payment Reminders Configures automated consolidated monthly invoice generation on the 1st of each month with Net-30 payment due terms and automated D-5 reminder. | Client Web Client Defaults | high | 3/3 Steps•2/2 Assertions | 46ms | |
| PASSING | SETTING-CLI-003UPDATE Clients Defaults: Mandatory Corporate Travel Policy Spending Rules SuperAdmin configures default travel policy template: Junior Staff restricted to Executive Sedan; First Class reserved for C-Suite and VIP guests. | Client Web Client Defaults | high | 2/2 Steps•2/2 Assertions | 36ms | |
| PASSING | SETTING-CLI-004UPDATE Clients Defaults: Instant PDF Expense Receipt Email Automation Configures automated generation and dispatch of tax-compliant PDF receipt to passenger email within 30 seconds of trip completion. | Client Web Client Defaults | medium | 3/3 Steps•2/2 Assertions | 79ms | |
| PASSING | SETTING-CLI-005UPDATE Clients Defaults: Department Cost Center Hierarchy Validation Requires mandatory cost center code (e.g. CC-SALES-01) on every corporate reservation; validates against client active cost center directory. | Client Web Client Defaults | high | 3/3 Steps•2/2 Assertions | 46ms | |
| PASSING | SETTING-CLI-006UPDATE Clients Defaults: Multi-Passenger Corporate Booking Approvals Configures manager approval workflow for corporate bookings exceeding €250.00 or reservations with 4+ passenger manifests. | Client Web Client Defaults | medium | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | SETTING-SOL-001UPDATE Services & Rates Preset: Point-to-Point Fixed Transfer Rate Matrix SuperAdmin defines fixed point-to-point city transfer rates (e.g. Madrid Center to MAD Barajas Airport: €45.00 flat rate for Executive Sedan). | superadmin Rates Preset | critical | 3/3 Steps•2/2 Assertions | 49ms | |
| PASSING | SETTING-SOL-002UPDATE Services & Rates Preset: Hourly Charter Minimum Duration & Overtime Surcharges Configures hourly chauffeur disposal service: minimum 2 hours at €75.00/hour, with overtime billed in 15-minute increments at 1.25x rate. | superadmin Rates Preset | high | 2/2 Steps•2/2 Assertions | 32ms | |
| PASSING | SETTING-SOL-003UPDATE Services & Rates Preset: Airport Flight Arrival Meet & Greet Surcharges Configures airport arrival meet & greet package: flight tracking, nameboard greeting in terminal, and 60 minutes complimentary waiting time after touchdown. | superadmin Rates Preset | medium | 2/2 Steps•2/2 Assertions | 36ms | |
| PASSING | SETTING-SOL-004UPDATE Services & Rates Preset: Dynamic High-Demand Peak Surge Multipliers SuperAdmin defines maximum surge multiplier ceiling (Max 1.8x) during severe demand peaks or major stadium events, preventing predatory price spikes. | superadmin Rates Preset | critical | 2/2 Steps•2/2 Assertions | 32ms | |
| PASSING | SETTING-SOL-005UPDATE Services & Rates Preset: Deadhead Repositioning Inbound & Outbound Mileage Tariffs Configures empty vehicle repositioning rates: €1.20/km for empty return to operating base when drop-off occurs outside primary metropolitan service zone. | superadmin Rates Preset | high | 2/2 Steps•2/2 Assertions | 28ms | |
| PASSING | SETTING-SOL-006UPDATE Services & Rates Preset: Multi-Currency Tariffs & Automatic FX Conversion Validates that preset tariffs hot-convert cleanly to GBP (£), USD ($), AED, SAR, and MAD with currency-specific aesthetic price ending rules (€45.00 -> $49.00). | superadmin Rates Preset | high | 2/2 Steps•2/2 Assertions | 30ms | |
| PASSING | SETTING-LEGAL-001ADD Legal Templates: Master Fleet Operator Service Agreement (MSA) Versioning SuperAdmin releases updated Master Service Agreement (Version 2026.3); prompts active fleet operators for cryptographic digital signature on next login. | superadmin Legal Agreements | critical | 3/3 Steps•2/2 Assertions | 60ms | |
| PASSING | SETTING-LEGAL-002UPDATE Legal Templates: Professional Chauffeur Code of Conduct & Dress Code Updates chauffeur professional standard: dark suit, white collared shirt, tie, luggage assistance, and zero-distraction phone policy while passenger is onboard. | superadmin Legal Agreements | high | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | SETTING-LEGAL-003UPDATE Legal Templates: SLA Failure Penalty & Dispute Resolution Arbitration Terms Defines formal legal penalty clauses: unexcused chauffeur no-shows incur 100% fare clawback + €50.00 administrative liquidated damages fee. | superadmin Legal Agreements | critical | 2/2 Steps•2/2 Assertions | 36ms | |
| PASSING | SETTING-LEGAL-004UPDATE Legal Templates: Enterprise Client Master Service Agreement (MSA) Template SuperAdmin updates enterprise corporate travel terms, setting liability limits, confidentiality, and GDPR data processor obligations. | superadmin Legal Agreements | critical | 2/2 Steps•2/2 Assertions | 58ms | |
| PASSING | SETTING-LEGAL-005UPDATE Legal Templates: Passenger Privacy Policy & GDPR/CCPA Rights Notice Publishes updated privacy policy detailing exact telematics data retention, GPS location tracking strictly during active trips, and Right-to-be-Forgotten erasure flow. | superadmin Legal Agreements | high | 2/2 Steps•2/2 Assertions | 32ms | |
| PASSING | SETTING-LEGAL-006UPDATE Legal Templates: Corporate Trip Cancellation & Late No-Show Refund Terms Configures cancellation policy: free cancellation up to 2 hours before pickup; 50% charged if cancelled within 2 hours; 100% charged for passenger no-show. | superadmin Legal Agreements | high | 3/3 Steps•2/2 Assertions | 46ms | |
| PASSING | SETTING-INT-001UPDATE Integration Hub: Stripe Connect Custom Accounts & Chauffeur Automated Payouts Tests Stripe Connect integration: Webhook signature verification, Express Onboarding redirect flow, and Transfers API for operator split payouts. | superadmin Integration Hub | critical | 3/3 Steps•2/2 Assertions | 80ms | |
| PASSING | SETTING-INT-002UPDATE Integration Hub: Twilio Chauffeur-Passenger Masked Phone Number Proxy Tests Twilio Proxy service: automatically provisions temporary virtual relay number pairing chauffeur and passenger during active trip, masking actual phone numbers. | superadmin Integration Hub | critical | 3/3 Steps•2/2 Assertions | 68ms | |
| PASSING | SETTING-INT-003UPDATE Integration Hub: FlightAware Live Flight Arrival Radar & Delay Auto-Sync Tests FlightAware AeroAPI connection: tracks flight IB3166 (LHR -> MAD), automatically shifting scheduled chauffeur pickup time when flight experiences 35m delay. | superadmin Integration Hub | high | 3/3 Steps•2/2 Assertions | 86ms | |
| PASSING | SETTING-INT-004UPDATE Integration Hub: Google Maps / Mapbox High-Precision GIS Matrix Engine Tests GIS routing provider: compares Mapbox Directions API and Google Distance Matrix with historical traffic models for sub-second ETA precision. | superadmin Integration Hub | critical | 3/3 Steps•2/2 Assertions | 64ms | |
| PASSING | SETTING-INT-005FLOW Integration Hub: Redis Sentinel High-Availability Cache Cluster Handshake Tests Redis Sentinel failover health: 3 sentinel nodes monitor master redis://localhost:6379, validating sub-second automatic promotion if master drops. | superadmin Integration Hub | critical | 3/3 Steps•2/2 Assertions | 36ms | |
| PASSING | SETTING-INT-006FLOW Integration Hub: Apache Kafka Event Mesh Broker Connection & Consumer Groups Tests core event mesh broker connectivity across audit-engine, sla-engine, and notification-engine consumer groups with zero rebalance stalls. | superadmin Integration Hub | critical | 3/3 Steps•2/2 Assertions | 58ms | |
| PASSING | CNTRY-CFG-ES-001CASCADE Jurisdiction (Spain): EUR Currency, 21% IVA, Madrid/Barcelona VTC Regulations Audits Spain jurisdictional settings: EUR currency, 21% IVA tax rate, kilometers, +34 dialing prefix, 112 SOS emergency, Madrid & Barcelona VTC urban transport regulations. | Country Config Country Compliance | critical | 3/3 Steps•3/3 Assertions | 50ms | |
| PASSING | CNTRY-CFG-ES-002FLOW Jurisdiction (Spain): Digital Hoja de Ruta Pre-Contracting & Registro VTC Compliance Verifies mandatory pre-contracting electronic register submission to Ministry of Transport (MITMA) with passenger NIF/NIE before wheels start rolling. | Country Config Country Compliance | high | 3/3 Steps•2/2 Assertions | 70ms | |
| PASSING | CNTRY-CFG-GB-001CASCADE Jurisdiction (UK): GBP Currency, 20% VAT, London ULEZ & Congestion Surcharges Audits United Kingdom settings: GBP currency, 20% VAT rate, imperial statute miles, +44 dialing prefix, 999 SOS emergency, London Congestion Charge & ULEZ compliance. | Country Config Country Compliance | critical | 3/3 Steps•3/3 Assertions | 52ms | |
| PASSING | CNTRY-CFG-GB-002FLOW Jurisdiction (UK): Transport for London (TfL) Private Hire Operator Licensing Audits compliance with TfL Private Hire Regulations 1998: principal operating address in Greater London, criminal record check (DBS), and topography test. | Country Config Country Compliance | high | 2/2 Steps•2/2 Assertions | 32ms | |
| PASSING | CNTRY-CFG-US-001CASCADE Jurisdiction (US): USD Currency, NY State Sales Tax, Airport TNC Surcharges Audits United States settings: USD currency, state & NY sales tax nexus, statute miles, +1 dialing prefix, 911 SOS emergency, Airport TNC access fee surcharges. | Country Config Country Compliance | critical | 3/3 Steps•3/3 Assertions | 44ms | |
| PASSING | CNTRY-CFG-US-002FLOW Jurisdiction (US): NYC Taxi and Limousine Commission (TLC) Medallion & FHV Compliance Verifies NYC TLC For-Hire Vehicle (FHV) license plate registration, driver drug test clearance, and visual diamond inspection sticker. | Country Config Country Compliance | high | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | CNTRY-CFG-AE-001CASCADE Jurisdiction (UAE): AED Currency, 5% FTA VAT, Dubai RTA Limousine & Salik Tolls Audits United Arab Emirates settings: AED currency, 5% FTA VAT, kilometers, +971 dialing prefix, 999 SOS emergency, Dubai RTA Limousine licensing & Salik toll gates. | Country Config Country Compliance | critical | 3/3 Steps•3/3 Assertions | 50ms | |
| PASSING | CNTRY-CFG-AE-002FLOW Jurisdiction (UAE): Dubai RTA Transport Executive e-Permit & Aswaq Integration Audits Dubai Road and Transport Authority (RTA) luxury franchise permit, driver RTA Card badge, and luxury chauffeur fleet minimum vehicle valuation (> 150,000 AED). | Country Config Country Compliance | high | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | CNTRY-CFG-SA-001CASCADE Jurisdiction (Saudi Arabia): SAR Currency, 15% ZATCA Phase-2 QR Invoicing & TGA Wasl Tracking Audits Saudi Arabia settings: SAR currency, 15% ZATCA Phase-2 QR-code compliant e-invoicing, kilometers, +966 dialing prefix, 997 Red Crescent, TGA Wasl tracking. | Country Config Country Compliance | critical | 4/4 Steps•4/4 Assertions | 76ms | |
| PASSING | CNTRY-CFG-SA-002FLOW Jurisdiction (Saudi Arabia): TGA Operating License & Hijri Calendar Date Support Audits Transport General Authority operating license and validates dual Gregorian / Hijri calendar date stamping on client contracts and receipts. | Country Config Country Compliance | medium | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | CNTRY-CFG-FR-001CASCADE Jurisdiction (France): EUR Currency, 10% TVA Transport, Carte Professionnelle VTC Mandate Audits France jurisdictional settings: EUR currency, 10% transport passenger TVA, kilometers, +33 dialing prefix, 112 SOS emergency, Carte Professionnelle VTC mandate. | Country Config Country Compliance | critical | 3/3 Steps•3/3 Assertions | 50ms | |
| PASSING | CNTRY-CFG-FR-002FLOW Jurisdiction (France): Registre des VTC REVTC Registration & Paris Airport Surcharges Verifies operator entry in Ministère de la Transition Écologique REVTC registry and Paris CDG/Orly airport fixed package tariffs. | Country Config Country Compliance | high | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | CNTRY-CFG-DE-001CASCADE Jurisdiction (Germany): EUR Currency, 19% MwSt, PBefG § 49 Rückkehrpflicht Compliance Audits Germany settings: EUR currency, 19% MwSt, kilometers, +49 dialing prefix, 112 SOS emergency, PBefG § 49 Rückkehrpflicht (return-to-base mandate). | Country Config Country Compliance | critical | 3/3 Steps•4/4 Assertions | 52ms | |
| PASSING | CNTRY-CFG-DE-002FLOW Jurisdiction (Germany): Mietwagen Konzession & P-Schein Chauffeur Licensing Audits city municipal Konzession concession permits (Munich, Berlin, Frankfurt) and chauffeur Personenbeförderungsschein (P-Schein). | Country Config Country Compliance | high | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | CNTRY-CFG-MA-001CASCADE Jurisdiction (Morocco): MAD Currency, 14% Tourism Transport TVA, Ministry Agrément Audits Morocco settings: MAD currency, 14% tourism transport TVA, kilometers, +212 dialing prefix, 190 police emergency, Ministry of Transport & Tourism agrément. | Country Config Country Compliance | critical | 3/3 Steps•3/3 Assertions | 50ms | |
| PASSING | CNTRY-CFG-MA-002FLOW Jurisdiction (Morocco): Carnet de Bord Digital Manifest & Inter-City Authorization Audits digital carnet de bord logbook for tourist transport (Transport Touristique Série T) across Marrakech, Casablanca, and Tangier. | Country Config Country Compliance | medium | 2/2 Steps•2/2 Assertions | 34ms | |
| PASSING | CNTRY-CFG-ID-001CASCADE Jurisdiction (Indonesia): IDR Currency, 11% PPN Tax, Jakarta Ganjil-Genap Rule Audits Indonesia settings: IDR currency, 11% PPN tax rate, kilometers, +62 dialing prefix, 112 SOS emergency, and Jakarta odd-even license plate traffic rules. | Country Config Country Compliance | high | 3/3 Steps•3/3 Assertions | 48ms | |
| PASSING | CNTRY-CFG-ID-002FLOW Jurisdiction (Indonesia): Bali Tourism Tax & Ngurah Rai Airport Chauffeur Zone Audits Bali provincial foreign tourist levy (150,000 IDR) and Denpasar DPS airport executive terminal meet & greet pickup parking permits. | Country Config Country Compliance | medium | 2/2 Steps•2/2 Assertions | 30ms | |
| PASSING | RBAC-SEC-001UPDATE Role Permissions: SuperAdmin (Root Authority & Financial Step-Up Guard) SuperAdmin has unrestricted platform mutation authority but must provide 2FA step-up verification before altering commission splits, payout bank accounts, or system fees. | RBAC Policy RBAC Security | critical | 3/3 Steps•2/2 Assertions | 54ms | |
| PASSING | RBAC-SEC-002FLOW Role Permissions: Country Manager (Territorial Isolation Barrier) Country Manager assigned to Spain (ES) attempts to access United Kingdom (GB) financial ledgers; system enforces HTTP 403 Forbidden with security audit log. | RBAC Policy RBAC Security | critical | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | RBAC-SEC-003FLOW Role Permissions: Fleet Operator Owner (Multi-Tenant Row-Level Security) Operator Owner authenticated for Company A queries PostgreSQL vehicles and bookings; Row-Level Security (RLS) policies completely hide Company B records. | RBAC Policy RBAC Security | critical | 3/3 Steps•2/2 Assertions | 44ms | |
| PASSING | RBAC-SEC-004FLOW Role Permissions: Operator Dispatcher (Dispatch Queue Only, No Bank Vault Access) Fleet Dispatcher can assign, reassign, and monitor live dispatches; system strictly blocks access to bank accounts, payout settings, and company commission rates. | RBAC Policy RBAC Security | high | 3/3 Steps•2/2 Assertions | 38ms | |
| PASSING | RBAC-SEC-005FLOW Role Permissions: Operator Accountant (Financial Ledger Access, No Dispatch Mutation) Operator Accountant has complete read/export access to financial ledgers and tax invoices; system blocks ability to reassign live bookings or cancel trips. | RBAC Policy RBAC Security | high | 2/2 Steps•2/2 Assertions | 38ms | |
| PASSING | RBAC-SEC-006FLOW Role Permissions: Driver Chauffeur (Active Shift Only, Passenger Phone Masking) Chauffeur mobile app can only access assigned active shifts; passenger phone numbers and emails are masked via Twilio proxy; zero access to credit card PAN. | RBAC Policy RBAC Security | critical | 3/3 Steps•2/2 Assertions | 40ms | |
| PASSING | RBAC-SEC-007FLOW Role Permissions: Client Corporate Admin (Employee Roster & Budget Caps) Corporate Travel Admin manages employee accounts, cost centers, and department monthly spending caps; zero access to other corporate client portals. | RBAC Policy RBAC Security | high | 3/3 Steps•2/2 Assertions | 58ms | |
| PASSING | RBAC-SEC-008FLOW Role Permissions: Client Passenger (Policy-Enforced Booking Flow) Corporate passenger books rides strictly adhering to company travel policy; bookings exceeding department budget caps automatically require manager approval. | RBAC Policy RBAC Security | medium | 2/2 Steps•2/2 Assertions | 38ms | |
| PASSING | RBAC-SEC-009FLOW Role Permissions: Client Individual (B2C Retail Rider PCI Tokenization) B2C retail riders manage personal bookings only; payment cards are tokenized through Stripe Elements PCI-DSS Level 1 vault with zero server storage of CVV. | RBAC Policy RBAC Security | high | 3/3 Steps•2/2 Assertions | 58ms | |
| PASSING | RBAC-SEC-010FLOW Role Permissions: Compliance Auditor (Read-Only KYC Inspection, Zero Mutation) Audits Compliance Auditor role: can inspect all jurisdictional KYC dossiers, chauffeur licenses, and vehicle certificates; strictly prohibited from mutating data. | RBAC Policy RBAC Security | medium | 2/2 Steps•2/2 Assertions | 36ms | |
| PASSING | RBAC-SEC-011FLOW Security Defense: Privilege Escalation Attack Vector Mitigation Simulates malicious user injecting "role": "super_admin" in profile PATCH request; verifies server-side Zod schema strips protected attributes and denies elevation. | RBAC Policy RBAC Security | critical | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | RBAC-SEC-012FLOW Security Defense: SQL Injection & Parametrized Query Hardening in Search APIs Tests search input fields with SQL injection vectors (" OR 1=1; DROP TABLE bookings; --); verifies PostgreSQL parameterized queries treat input as harmless literal string. | RBAC Policy RBAC Security | critical | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | RBAC-SEC-013FLOW Security Defense: Token Forgery & Cryptographic Signature Verification Simulates forged JWT with "alg": "none" or tampered payload; verifies API Gateway rejects request with HTTP 401 Unauthorized immediately. | RBAC Policy RBAC Security | critical | 3/3 Steps•1/1 Assertions | 42ms | |
| PASSING | RBAC-SEC-014FLOW Security Defense: Brute-Force Rate Limiting on Authentication Endpoints Tests Redis sliding window rate limiter on /api/auth/login; triggers HTTP 429 Too Many Requests after 5 failed password attempts from same IP within 5 minutes. | RBAC Policy RBAC Security | high | 2/2 Steps•2/2 Assertions | 38ms | |
| PASSING | RBAC-SEC-015FLOW Security Defense: Cross-Tenant URL Manipulation & IDOR Protection Tests Insecure Direct Object Reference (IDOR): Operator A replaces booking ID in URL with Operator B booking ID; verifies server enforces tenant ownership check. | RBAC Policy RBAC Security | critical | 2/2 Steps•2/2 Assertions | 32ms | |
| PASSING | SA-MOD-OPC-001FLOW Op-Center: Real-Time Mission Control Matrix & Active Dispatch Radar SuperAdmin monitors live global operations grid on /op-center: active dispatches, chauffeur flight delays, and geographic cluster markers rendered at 60 FPS. | superadmin Op-Center | critical | 3/3 Steps•2/2 Assertions | 74ms | |
| PASSING | SA-MOD-OPC-002FLOW Op-Center: Chauffeur Delay Early-Warning Alarm (+15m Threshold) SLA Engine detects chauffeur speed and distance to pickup will exceed scheduled pickup time by 15 minutes; automatically trips orange warning badge in Op-Center. | superadmin Op-Center | critical | 3/3 Steps•2/2 Assertions | 58ms | |
| PASSING | SA-MOD-OPC-003UPDATE Op-Center: TripResolutionSheet Emergency Operator Hot-Swap Execution SuperAdmin opens TripResolutionSheet to suspend delinquent operator and reassign job to Apex Executive Transport with zero passenger interruption. | superadmin Op-Center | critical | 3/3 Steps•2/2 Assertions | 68ms | |
| PASSING | SA-MOD-FO-001ADD Fleet Operators: Multi-Tenant Operator Onboarding Wizard Verification SuperAdmin navigates /fleet-operators/onboard: enters company name, CIF tax ID, country, primary contact, fleet size, and generates company_profiles tenant record. | superadmin Fleet Operators | critical | 3/3 Steps•2/2 Assertions | 76ms | |
| PASSING | SA-MOD-FO-002UPDATE Fleet Operators: Commercial License Verification & Status Activation SuperAdmin reviews operator KYC transport license; approves verified credentials, transitioning operator status from pending_verification to active. | superadmin Fleet Operators | critical | 3/3 Steps•2/2 Assertions | 72ms | |
| PASSING | SA-MOD-FO-003UPDATE Fleet Operators: Operator Suspension for Repeated SLA Violations SuperAdmin suspends operator with excessive cancellation rate (> 8%); instantly removes operator from open marketplace dispatches and freezes payout wallet. | superadmin Fleet Operators | critical | 3/3 Steps•2/2 Assertions | 64ms | |
| PASSING | SA-MOD-CLI-001FLOW End-Consumers: B2C Passenger & B2B Corporate Traveler Directory Audit SuperAdmin queries consumer directory on /end-consumers: filters by corporate vs retail account type, lifetime GMV, dispute count, and VIP status. | superadmin End Consumers | high | 2/2 Steps•2/2 Assertions | 40ms | |
| PASSING | SA-MOD-CLI-002UPDATE End-Consumers: Passenger Account Suspension for Fraudulent Dispute Abuse Risk Engine detects passenger account filing 3 fraudulent credit card chargebacks; SuperAdmin suspends account, blacklisting phone number and device fingerprint. | superadmin End Consumers | critical | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | SA-MOD-MKT-001FLOW Marketplace: Open Marketplace Bidding Auction Broadcast & Window Expiry Tests open marketplace bidding window on /marketplace: broadcast booking offers to eligible nearby operators with 180-second countdown and atomic winner selection. | superadmin Marketplace | critical | 3/3 Steps•2/2 Assertions | 78ms | |
| PASSING | SA-MOD-MKT-002FLOW Marketplace: Minimum Price Floor Enforcement (Anti-Dumping Protection) Ensures operator bids below jurisdictional statutory minimum price floors (e.g. Min €35.00 for Airport Transfer) are rejected to prevent predatory price dumping. | superadmin Marketplace | high | 3/3 Steps•2/2 Assertions | 36ms | |
| PASSING | SA-MOD-BI-001FLOW BI & Reports: Gross Booking Value (GBV) & Platform Margin Ledger Reconciliation Audits BI reporting engine on /bi: cross-references monthly GMV, operator payouts, platform commissions, and payment gateway fees, asserting zero discrepancy. | superadmin BI & Financials | critical | 3/3 Steps•2/2 Assertions | 84ms | |
| PASSING | SA-MOD-BI-002FLOW BI & Reports: Automated Jurisdictional Tax Summary Export (Spanish Modelo 303) Generates standardized quarterly VAT/IVA tax summary file formatted for Spanish Tax Agency (AEAT) Modelo 303 quarterly return submission. | superadmin BI & Financials | high | 2/2 Steps•2/2 Assertions | 58ms | |
| PASSING | SA-MOD-CMP-001FLOW Compliance Queue: Automated OCR Extraction on Chauffeur Driver License Tests OCR microservice on /compliance-queue: extracts chauffeur license number, full name, expiration date, and vehicle class categories from uploaded scan. | superadmin Compliance Queue | high | 3/3 Steps•2/2 Assertions | 80ms | |
| PASSING | SA-MOD-CMP-002UPDATE Compliance Queue: One-Click Approval & Document Expiry Watchdog Sync SuperAdmin approves chauffeur compliance dossier; system arms automated 30-day expiration watchdog and notifies chauffeur on mobile app. | superadmin Compliance Queue | critical | 3/3 Steps•2/2 Assertions | 62ms | |
| PASSING | SA-MOD-KPI-001FLOW KPIs: Operational Performance Metrics Live Calculation & Aggregation Audits live KPI aggregation engine on /kpis: calculates Dispatch Acceptance Rate (98.4%), Average Chauffeur Response Latency (18s), and On-Time Arrival SLA (99.2%). | superadmin KPIs | high | 3/3 Steps•2/2 Assertions | 64ms | |
| PASSING | SA-MOD-KPI-002FLOW KPIs: Fleet Utilization & Active Duty Shift Hours Distribution Calculates active vehicle utilization (% of registered fleet currently in transit with booked passenger vs idling on standby), optimizing operator shift coverage. | superadmin KPIs | medium | 3/3 Steps•2/2 Assertions | 54ms | |
| PASSING | SA-MOD-ACT-001FLOW Action Box: Pending Multi-Domain Approval Tasks Aggregation Audits /action-box unified inbox: aggregates pending operator onboarding reviews, document verifications, high-amount corporate refunds, and dispute arbitrations. | superadmin Action Box | high | 3/3 Steps•2/2 Assertions | 64ms | |
| PASSING | SA-MOD-TCK-001FLOW Task Tickets: Incident Support Ticket Lifecycle & SLA Escalation Audits /task-tickets incident tracking: creates customer support ticket, assigns to support agent, progresses status from open -> in_progress -> resolved, tracking SLA response. | superadmin Task Tickets | medium | 3/3 Steps•2/2 Assertions | 56ms | |
| PASSING | SA-MOD-MAP-001ADD Global Mapping: PostGIS Geofence Polygon Creation & Urban Boundary Auditing SuperAdmin draws and saves PostGIS spatial polygon for Madrid Low-Emission Zone (ZBE Distrito Centro) on /global-mapping; verifies spatial point-in-polygon queries. | superadmin Global Mapping | high | 3/3 Steps•2/2 Assertions | 68ms | |
| PASSING | SA-MOD-MAP-002FLOW Global Mapping: Airport Geofence Automatic Chauffeur Staging Queue Tests airport geofencing: when chauffeur enters Barcelona El Prat Terminal 1 staging perimeter, system automatically registers vehicle in FIFO dispatch holding queue. | superadmin Global Mapping | high | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | OP-WEB-VEH-001ADD Fleet Operators: Add New Luxury Vehicle to Operator Fleet Fleet Operator creates vehicle record: Mercedes-Benz E-Class, 2024, License Plate 9182LMN, Class: Executive Sedan, VIN: W1K2130041A998124. | Operator Web Fleet Vehicles | critical | 3/3 Steps•3/3 Assertions | 56ms | |
| PASSING | OP-WEB-VEH-002UPDATE Fleet Operators: Update Vehicle Operational Status & Class Reassignment Operator updates vehicle status from available to scheduled_booking and links active chauffeur for afternoon airport rotation. | Operator Web Fleet Vehicles | high | 3/3 Steps•2/2 Assertions | 48ms | |
| PASSING | OP-WEB-VEH-003DELETE Fleet Operators: Soft Delete / Deactivate Vehicle with FK Constraint Guard Operator deactivates vehicle; system performs soft delete (deleted_at = now()) preserving historical trip records and ledger relationships. | Operator Web Fleet Vehicles | high | 3/3 Steps•2/2 Assertions | 50ms | |
| PASSING | OP-WEB-VEH-004ADD Fleet Operators: Bulk Fleet Vehicle Import via CSV Template Operator uploads CSV file with 15 luxury vehicles; parser validates VINs, license plates, fuel types, and commits batch transaction in < 250ms. | Operator Web Fleet Vehicles | high | 3/3 Steps•2/2 Assertions | 108ms | |
| PASSING | OP-WEB-VEH-005UPDATE Fleet Operators: Link Dedicated Hardware AVL GPS Terminal to Vehicle Operator pairs Teltonika FMC130 4G AVL hardware tracker with vehicle V-001, setting IMEI 864921045938102 and establishing live tracking stream. | Operator Web Fleet Vehicles | high | 3/3 Steps•2/2 Assertions | 68ms | |
| PASSING | OP-WEB-DRV-001ADD Chauffeur Staff: Onboard New Chauffeur with Driver License & Background Check Operator registers new chauffeur: name, mobile number, driver license number, VTC credential card, and dispatches mobile app setup invite. | Operator Web Chauffeur Staff | critical | 3/3 Steps•2/2 Assertions | 74ms | |
| PASSING | OP-WEB-DRV-002UPDATE Chauffeur Staff: Assign Duty Shift Schedule & Operational Zone Operator assigns Chauffeur Alejandro to Morning Airport Rotation (05:00 - 13:00 CET) at Madrid Barajas Terminal 4 with assigned vehicle V-001. | Operator Web Chauffeur Staff | high | 3/3 Steps•2/2 Assertions | 54ms | |
| PASSING | OP-WEB-DRV-003DELETE Chauffeur Staff: Deactivate Chauffeur & Instant Shift Unlinking Operator deactivates chauffeur; system cancels upcoming unfulfilled shifts, clears mobile login session, and marks profile inactive. | Operator Web Chauffeur Staff | high | 3/3 Steps•2/2 Assertions | 54ms | |
| PASSING | OP-WEB-DSP-001UPDATE Dispatch Timeline: Manual Job Allocation to Fleet Chauffeur Dispatcher opens Dispatch Timeline on /dispatch, drags pending unassigned booking BK-8812 onto Chauffeur Alejandro timeline slot, triggering instant assignment. | Operator Web Dispatching | critical | 3/3 Steps•2/2 Assertions | 56ms | |
| PASSING | OP-WEB-DSP-002FLOW Dispatch Timeline: Automated Smart Dispatch Algorithm (Proximity & Availability) Auto-dispatch engine evaluates 12 available fleet drivers; scores by distance to pickup, driver rating, and shift end buffer; auto-assigns optimal chauffeur. | Operator Web Dispatching | critical | 3/3 Steps•2/2 Assertions | 70ms | |
| PASSING | OP-WEB-DSP-003UPDATE Dispatch Timeline: Reassign Job on Chauffeur Flat Tire Breakdown Chauffeur reports emergency puncture on mobile; dispatcher clicks 1-Click Hot-Swap in Dispatch Timeline; transfers booking to standby backup driver in 1.1s. | Operator Web Dispatching | critical | 3/3 Steps•2/2 Assertions | 64ms | |
| PASSING | OP-WEB-RAT-001UPDATE Rates Engine: Base Flagfall, Distance & Duration Tariff Customization Operator configures bespoke Executive Sedan rate card: €12.00 Base Flagfall, €2.10 per kilometer, €0.65 per minute in /rates tab. | Operator Web Rates Engine | critical | 3/3 Steps•2/2 Assertions | 52ms | |
| PASSING | OP-WEB-RAT-002UPDATE Rates Engine: Night Shift & Weekend Surge Multiplier Configuration Operator sets 1.20x night multiplier between 22:00 and 06:00 and 1.15x weekend multiplier (Saturday-Sunday) in rate card schedule. | Operator Web Rates Engine | high | 2/2 Steps•2/2 Assertions | 28ms | |
| PASSING | OP-WEB-BIL-001FLOW Operator Billing: Wallet Balance Ledger & Available Funds Calculation Operator inspects /billing dashboard: calculates Available Balance (€3,842.10), Pending Escrow (€420.00), and Lifetime Earnings (€48,210.00) from ledger. | Operator Web Operator Billing | critical | 2/2 Steps•2/2 Assertions | 44ms | |
| PASSING | OP-WEB-BIL-002ADD Operator Billing: Request Instant Wallet Payout to Registered Bank Account Operator requests €2,000.00 payout; system validates 2FA code, deducts funds from available wallet balance, and dispatches SEPA transfer via Stripe Connect. | Operator Web Operator Billing | critical | 3/3 Steps•2/2 Assertions | 74ms | |
| PASSING | OP-WEB-BIL-003FLOW Operator Billing: Download Signed Monthly Commission Tax Invoice PDF Operator downloads official monthly commission tax invoice (Factura de Comisión) with 21% IVA breakdown, electronic fiscal signature, and QR code. | Operator Web Operator Billing | high | 2/2 Steps•2/2 Assertions | 56ms | |
| PASSING | OP-WEB-MAP-001FLOW Fleet Live Map: Real-Time Fleet Telematics Map & Chauffeur Velocity Overlay Operator visualizes full fleet on live map: smooth Leaflet marker rotation by vehicle heading, velocity badges (e.g. 78 km/h), and status rings (Green=In Transit, Blue=Available). | Operator Web Live Tracking | critical | 3/3 Steps•2/2 Assertions | 50ms | |
| PASSING | OP-WEB-MAP-002FLOW Fleet Live Map: Geofence Corridor Deviation & Speeding Alarm System detects vehicle exceeding 130 km/h highway speed limit or deviating > 5km from planned route polyline; flashes amber notification in operator top bar. | Operator Web Live Tracking | high | 3/3 Steps•2/2 Assertions | 38ms | |
| PASSING | CW-BOOK-001ADD Client Web: Executive Point-to-Point Booking Creation Corporate client creates an immediate executive transfer with flight number monitoring, luggage count, and VIP passenger details. | Client Web Bookings & Reservations | critical | 4/4 Steps•3/3 Assertions | 74ms | |
| PASSING | CW-BOOK-002UPDATE Client Web: Multi-Stop Itinerary Modification & Fare Recalculation Client dynamically injects a secondary pickup waypoint into an unstarted reservation, triggering automated distance recalculation and quote update. | Client Web Bookings & Reservations | high | 4/4 Steps•3/3 Assertions | 76ms | |
| PASSING | CW-BOOK-003DELETE Client Web: Grace-Period Cancellation with Zero-Fee Penalty Client cancels reservation > 2 hours prior to scheduled pickup, releasing allocated operator lock with zero cancellation penalty. | Client Web Bookings & Reservations | medium | 4/4 Steps•3/3 Assertions | 58ms | |
| PASSING | CW-BOOK-004ADD Client Web: Hourly Charter Reservation with Flexible Duration Extension Corporate client creates an 8-hour dedicated disposal charter booking with predefined mileage cap and overtime hourly rate tiers. | Client Web Bookings & Reservations | high | 4/4 Steps•3/3 Assertions | 75ms | |
| PASSING | CW-QUOTE-001ADD Client Web: Multi-Operator RFQ Broadcast Submission Corporate client publishes a bespoke event transport RFQ for 10 Mercedes V-Class vans across 3 days, broadcasting to qualified operators. | Client Web Quotations & Bidding | high | 3/3 Steps•3/3 Assertions | 77ms | |
| PASSING | CW-QUOTE-002FLOW Client Web: Competitive Bid Selection & Instant Contract Award Client reviews 4 operator bids, selects lowest verified bid with 99.8% SLA rating, and triggers automated multi-trip job binding. | Client Web Quotations & Bidding | critical | 4/4 Steps•3/3 Assertions | 105ms | |
| PASSING | CW-TRIP-001FLOW Client Web: High-Precision Chauffeur Approach Radar & ETA Countdown Client web tracking radar subscribes to zero-delay WebSocket feed, rendering chauffeur live coordinates, bearing, and smoothed ETA. | Client Web Live Operations | critical | 4/4 Steps•3/3 Assertions | 48ms | |
| PASSING | CW-TRIP-002ADD Client Web: Masked In-App Chauffeur Chat & VoIP Relay Client sends masked pickup instruction message to assigned chauffeur without exposing direct phone numbers. | Client Web Live Operations | medium | 3/3 Steps•3/3 Assertions | 52ms | |
| PASSING | CW-BILL-001ADD Client Web: Consolidated Monthly Tax Invoice & Breakdown Generation Client triggers generation of monthly consolidated PDF/XML tax invoice detailing all corporate trips, VAT breakdown, and cost centers. | Client Web Billing & Invoicing | high | 4/4 Steps•4/4 Assertions | 128ms | |
| PASSING | CW-BILL-002ADD Client Web: Cost Center Hierarchy & Budget Quota Allocation Corporate admin defines a new internal cost center (e.g. Sales-EMEA-2026) with monthly spending ceiling and automated lock triggers. | Client Web Billing & Invoicing | medium | 3/3 Steps•3/3 Assertions | 48ms | |
| PASSING | CW-BILL-003CASCADE Client Web: Cost Center Budget Cap Enforcement & Overage Rejection System intercepts booking attempt on a cost center that has reached 100% of its allocated monthly quota, blocking dispatch without manager override. | Client Web Billing & Invoicing | high | 3/3 Steps•3/3 Assertions | 43ms | |
| PASSING | CW-BILL-004UPDATE Client Web: Corporate Payment Method Mandate (SEPA B2B / Stripe SetupIntent) Corporate client attaches a new SEPA Direct Debit B2B mandate with signed IBAN authorization, executing micro-deposit challenge verification. | Client Web Billing & Invoicing | critical | 4/4 Steps•3/3 Assertions | 121ms | |
| PASSING | CW-POL-001ADD Client Web: Corporate Travel Policy Ruleset Definition Corporate Travel Manager creates travel policy restricting junior employees to Standard Sedan and requiring booking >= 4 hours in advance. | Client Web Corporate Policy & RBAC | high | 4/4 Steps•3/3 Assertions | 65ms | |
| PASSING | CW-POL-002CASCADE Client Web: Travel Policy Out-of-Policy Violation Detection & Flagging Staff member attempts to book First Class vehicle at €220.00; system automatically triggers out-of-policy modal and routes justification to manager. | Client Web Corporate Policy & RBAC | medium | 5/5 Steps•3/3 Assertions | 69ms | |
| PASSING | CW-POL-003FLOW Client Web: Manager One-Click Out-of-Policy Approval & Instant Dispatch Corporate Manager approves out-of-policy booking from email/web dashboard with encrypted token, releasing the reservation for instant operator dispatch. | Client Web Corporate Policy & RBAC | high | 4/4 Steps•3/3 Assertions | 70ms | |
| PASSING | CW-USER-001ADD Client Web: CSV Bulk Employee Roster Onboarding & Department Mapping Corporate HR admin imports 50 employees via CSV, automatically creating accounts, setting default cost centers, and issuing welcome magic links. | Client Web Corporate Organization | high | 4/4 Steps•3/3 Assertions | 121ms | |
| PASSING | CW-USER-002DELETE Client Web: Employee Offboarding & Active Booking Cascade Reassignment Admin deactivates departed employee account; system revokes active sessions, cancels personal draft bookings, and transfers upcoming corporate trips to admin queue. | Client Web Corporate Organization | critical | 4/4 Steps•3/3 Assertions | 68ms | |
| PASSING | CW-SUPP-001ADD Client Web: Chauffeur Service Quality Rating & Detailed Review Submission Passenger rates completed trip (5 stars, punctuality, cleanliness, route expertise) and leaves digital chauffeur tip. | Client Web Support & Feedback | low | 3/3 Steps•3/3 Assertions | 61ms | |
| PASSING | CW-SUPP-002ADD Client Web: Post-Trip Fare Dispute Ticket Creation & Evidence Upload Client challenges an unexpected toll surcharge on trip invoice, uploading supporting route toll receipt image and opening a dispute ticket. | Client Web Support & Feedback | medium | 4/4 Steps•3/3 Assertions | 89ms | |
| PASSING | CW-SUPP-003ADD Client Web: Lost Property Inquiry Registration & Instant Chauffeur Ping Passenger reports left item (Laptop bag) immediately after vehicle dropoff; system dispatches urgent push alert to chauffeur mobile app. | Client Web Support & Feedback | medium | 3/3 Steps•3/3 Assertions | 59ms | |
| PASSING | MOB-DRV-001ADD Driver Mobile: Chauffeur Biometric Authentication & Session Token Refresh Chauffeur logs in via FaceID/Fingerprint biometric prompt; mobile app exchanges hardware-backed secure enclave key for short-lived JWT and refresh token. | driver mobile Authentication & Session | critical | 4/4 Steps•3/3 Assertions | 72ms | |
| PASSING | MOB-DRV-002UPDATE Driver Mobile: Duty Shift Start & Availability State Broadcast Chauffeur toggles shift status to "ONLINE - AVAILABLE"; app broadcasts coordinates and availability to Smart Dispatch Engine. | driver mobile Duty & Status | high | 3/3 Steps•3/3 Assertions | 46ms | |
| PASSING | MOB-DRV-003FLOW Driver Mobile: Urgent Dispatch Job Offer Notification & Instant Acceptance Driver receives incoming job offer with 30s countdown timer, fare preview, pickup location; driver accepts within 5s, acquiring exclusive trip lock. | driver mobile Dispatch & Assignment | critical | 4/4 Steps•3/3 Assertions | 45ms | |
| PASSING | MOB-DRV-004FLOW Driver Mobile: Job Offer Decline with Justification Code & Cascade Re-dispatch Driver declines dispatch offer with reason "Shift Ending Soon"; system immediately releases offer and cascades to the next best ranked chauffeur. | driver mobile Dispatch & Assignment | medium | 3/3 Steps•3/3 Assertions | 47ms | |
| PASSING | MOB-DRV-005FLOW Driver Mobile: En Route to Pickup State & 1Hz High-Frequency GPS Stream Driver taps "En Route to Pickup"; app initiates background high-accuracy CoreLocation/FusedLocation stream at 1Hz, publishing to IoT AVL Gateway. | driver mobile Live Operations | critical | 4/4 Steps•3/3 Assertions | 60ms | |
| PASSING | MOB-DRV-006UPDATE Driver Mobile: Arrived at Pickup & Automated Geofence Proximity Ping Vehicle crosses 100m geofence radius of pickup location; driver confirms "Arrived at Pickup", triggering zero-delay push alert to passenger. | driver mobile Live Operations | high | 4/4 Steps•3/3 Assertions | 58ms | |
| PASSING | MOB-DRV-007FLOW Driver Mobile: Passenger Onboard & Turn-by-Turn Navigation Handoff Driver verifies passenger identity, confirms luggage stowed, taps "Passenger Onboard", and hands off route navigation to Google Maps / Apple Maps. | driver mobile Live Operations | critical | 4/4 Steps•3/3 Assertions | 55ms | |
| PASSING | MOB-DRV-008UPDATE Driver Mobile: Intermediate Waypoint Check-in & Waiting Time Ledger Driver arrives at scheduled intermediate waypoint (Hotel stop), pauses navigation, and runs official waiting time counter. | driver mobile Live Operations | medium | 4/4 Steps•3/3 Assertions | 53ms | |
| PASSING | MOB-DRV-009FLOW Driver Mobile: Destination Arrival, Surcharges & Digital Signature Capture Driver arrives at final destination, records legitimate airport parking fee (€5.50), collects passenger e-signature, and finishes trip. | driver mobile Trip Completion | critical | 4/4 Steps•4/4 Assertions | 91ms | |
| PASSING | MOB-DRV-010UPDATE Driver Mobile: Offline Network Tunnel Recovery & Deferred Telemetry Replay Mobile app enters tunnel with 0% cellular connectivity, caches 45 telemetry pings in SQLite, and flushes backlog in order upon reconnection. | driver mobile Offline & Resilience | high | 4/4 Steps•3/3 Assertions | 86ms | |
| PASSING | MOB-DRV-011FLOW Driver Mobile: Passenger No-Show Resolution Protocol with Geofence Proof Chauffeur waits 20m at pickup (> 15m complimentary grace), initiates 2 unanswered voice calls; app validates GPS presence and files no-show fee. | driver mobile Disputes & Exceptions | high | 4/4 Steps•3/3 Assertions | 63ms | |
| PASSING | MOB-DRV-012CASCADE Driver Mobile: Incident Report (Puncture / Road Closure) & Instant Swarm Hand-off Driver encounters sudden tire puncture en route to VIP pickup; reports incident with photo; system instantly re-dispatches nearest backup vehicle. | driver mobile Disputes & Exceptions | critical | 5/5 Steps•3/3 Assertions | 104ms | |
| PASSING | MOB-OPR-001FLOW Operator Mobile: Live Operations Roster & Fleet Status Metric Stream Fleet manager views live mobile dashboard streaming active trips, chauffeur availability counts, and hourly revenue run-rate. | Operator Mobile Fleet Supervision | high | 3/3 Steps•3/3 Assertions | 42ms | |
| PASSING | MOB-OPR-002UPDATE Operator Mobile: Urgent Unassigned Dispatch Queue Alert & Manual Assignment Manager receives high-priority push alert for unassigned VIP trip (15m to pickup); overrides algorithm and manually assigns top senior chauffeur. | Operator Mobile Dispatch Supervision | critical | 4/4 Steps•3/3 Assertions | 62ms | |
| PASSING | MOB-OPR-003CASCADE Operator Mobile: Emergency SOS Panic Alarm Triage & Dispatch Center Escalation Chauffeur triggers SOS button on driver app; operator mobile app rings high-priority audible siren, displays live vehicle coordinates, and connects emergency line. | Operator Mobile Safety & Emergency | critical | 4/4 Steps•3/3 Assertions | 51ms | |
| PASSING | MOB-OPR-004FLOW Operator Mobile: Live Interactive Fleet Map & Geohash Cluster Filtering Operator explores live mobile Mapbox view, filtering vehicles by category (Sedan, SUV, Van) and status (Available, En Route, On Trip). | Operator Mobile Fleet Supervision | high | 3/3 Steps•3/3 Assertions | 50ms | |
| PASSING | MOB-OPR-005UPDATE Operator Mobile: Driver Shift Coverage Swap & On-Demand Assignment Driver requests shift swap due to personal reason; fleet manager reviews and approves swap to replacement chauffeur on mobile. | Operator Mobile Staff Management | medium | 4/4 Steps•3/3 Assertions | 69ms | |
| PASSING | MOB-OPR-006UPDATE Operator Mobile: Flight Delay Schedule Adjustment & One-Tap Chauffeur Reschedule System detects incoming flight AF1024 delayed by 45m; operator receives alert and confirms adjusted pickup time on mobile with one tap. | Operator Mobile Dispatch Supervision | high | 3/3 Steps•3/3 Assertions | 48ms | |
| PASSING | MOB-OPR-007CASCADE Operator Mobile: Critical SLA Breach Warning & Escalation Countermeasures Chauffeur stuck in severe unexpected traffic, SLA Engine predicts +12m delay; operator mobile displays proactive intervention warning. | Operator Mobile Safety & Emergency | high | 4/4 Steps•3/3 Assertions | 70ms | |
| PASSING | MOB-OPR-008FLOW Operator Mobile: Fleet Operator Daily Revenue & Settlement Snapshot Operator inspects daily completed trip earnings, commission deducts, net payout wallet balance, and next automated SEPA transfer date. | Operator Mobile Billing & Financials | medium | 3/3 Steps•3/3 Assertions | 41ms | |
| PASSING | MOB-OPR-009UPDATE Operator Mobile: Push Notification Token Registration & APNs/FCM Lifecycle Operator mobile registers device push token with Zero-Delay Notification Engine, testing heartbeat ping delivery. | Operator Mobile Settings & Infrastructure | medium | 3/3 Steps•3/3 Assertions | 67ms | |
| PASSING | MOB-CLI-001ADD Client Mobile: Passenger Onboarding, Biometric Passkey & Profile Setup End passenger registers account via WebAuthn/Passkey, binds corporate work email, and configures preferred vehicle ride preferences. | Client Mobile Authentication & Profile | high | 3/3 Steps•3/3 Assertions | 57ms | |
| PASSING | MOB-CLI-002ADD Client Mobile: Instant "Book Now" Executive Pickup with GPS Auto-Pinning Passenger requests immediate executive car from mobile; app resolves high-precision reverse-geocoded pickup pin and dispatches within 3s. | Client Mobile Bookings & Rides | critical | 4/4 Steps•3/3 Assertions | 69ms | |
| PASSING | MOB-CLI-003ADD Client Mobile: Scheduled Airport Transfer with Automated Flight Delay Guard Passenger schedules pickup for tomorrow at airport with flight number IB3170; app binds flight tracking webhook for automated schedule shifting. | Client Mobile Bookings & Rides | high | 4/4 Steps•3/3 Assertions | 73ms | |
| PASSING | MOB-CLI-004FLOW Client Mobile: High-Fidelity Approaching Radar & Dynamic Chauffeur Card Mobile screen animates approaching chauffeur vehicle along mapped route polyline, rendering driver portrait, vehicle license plate, and live ETA. | Client Mobile Live Ride Tracking | critical | 4/4 Steps•3/3 Assertions | 55ms | |
| PASSING | MOB-CLI-005ADD Client Mobile: Masked In-App Chauffeur Chat & VoIP Call Relay Passenger initiates masked VoIP call to chauffeur through in-app WebRTC bridge, verifying zero PSTN telephone number leakage. | Client Mobile Live Ride Tracking | medium | 4/4 Steps•3/3 Assertions | 82ms | |
| PASSING | MOB-CLI-006ADD Client Mobile: Live Trip Itinerary Sharing with External Contact (Live URL) Passenger shares live trip tracking link via SMS/WhatsApp; external recipient opens real-time web map tracking trip progress without logging in. | Client Mobile Safety & Sharing | medium | 3/3 Steps•3/3 Assertions | 54ms | |
| PASSING | MOB-CLI-007ADD Client Mobile: One-Tap Digital Tipping & 5-Star Service Rating Upon trip completion, passenger rates experience (5 stars, tags) and adds €10 tip charged to the same corporate/personal payment method. | Client Mobile Post-Trip & Feedback | medium | 4/4 Steps•3/3 Assertions | 63ms | |
| PASSING | MOB-CLI-008DELETE Client Mobile: In-App Ride Cancellation with Policy Fee Transparency Modal Passenger requests ride cancellation 10 minutes after assignment; app warns of €25 late cancellation fee and executes cancellation upon confirmation. | Client Mobile Bookings & Rides | medium | 5/5 Steps•3/3 Assertions | 85ms | |
| PASSING | MOB-CLI-009FLOW Client Mobile: Digital VAT Receipt & Expense Management Auto-Export Passenger views completed ride receipt, auto-forwards PDF to Concur/Expensify expense inbox, and downloads signed VAT breakdown. | Client Mobile Billing & Financials | low | 3/3 Steps•3/3 Assertions | 64ms | |
| PASSING | ENG-NOTIF-001FLOW Notification Engine: Dual-Lane Zero-Delay Push Fanout (<5ms Latency) High-frequency broadcast of urgent dispatch alerts via WebSocket binary frames with zero in-memory queue delay, verified across 1,000 concurrent listeners. | engines Notification Engine | critical | 3/3 Steps•3/3 Assertions | 7ms | |
| PASSING | ENG-NOTIF-002CASCADE Notification Engine: Automated SSE Fallback on WebSocket Degradation When client firewall drops TCP WebSocket connections, client transparently falls back to Server-Sent Events (SSE) HTTP/2 stream within 200ms. | engines Notification Engine | critical | 4/4 Steps•3/3 Assertions | 44ms | |
| PASSING | ENG-NOTIF-003FLOW Notification Engine: Rate-Limiter Bypass for Critical P0 Emergency Alarms Ensures SOS panic alerts and urgent dispatch offers bypass all tenant rate-limiting throttles and pass through dedicated VIP priority channel. | engines Notification Engine | critical | 3/3 Steps•3/3 Assertions | 20ms | |
| PASSING | ENG-SLA-001FLOW SLA Engine: Realtime Chauffeur Arrival Countdown & Breach Predictive Escalation SLA engine monitors active trips; detects when chauffeur current speed and traffic conditions will cause arrival > 5m late, escalating to dispatcher. | engines SLA & Monitoring | high | 3/3 Steps•3/3 Assertions | 44ms | |
| PASSING | ENG-SLA-002CASCADE SLA Engine: Automatic Chauffeur Hot-Swap Swarm Trigger upon Critical Delay (>15m) When traffic accident halts highway causing > 15m delay, SLA engine automatically triggers autonomous swarm reassignment to backup chauffeur. | engines SLA & Monitoring | critical | 4/4 Steps•3/3 Assertions | 66ms | |
| PASSING | ENG-IOT-001FLOW IoT AVL Engine: 1Hz Telemetry Ingestion & Dead-Reckoning Kalman Filtering Ingests high-rate 1Hz GPS coordinate streams from 500 mobile devices, running Kalman filter to eliminate GPS jitter and snap to road network. | Live Tracking IoT & Telemetry | high | 4/4 Steps•3/3 Assertions | 23ms | |
| PASSING | ENG-IOT-002CASCADE IoT AVL Engine: Geofence Polygon Trigger Detection (<100ms) Evaluates driver coordinates against 200 operational geofences (Airports, Ports, VIP zones) using PostGIS R-Tree index in < 15ms. | Live Tracking IoT & Telemetry | high | 3/3 Steps•3/3 Assertions | 19ms | |
| PASSING | ENG-AUD-001ADD Audit Engine: Immutable Tamper-Proof Kafka Event Streaming Writes system state transitions and administrative actions to immutable append-only event stream with cryptographic SHA-256 chain. | engines Audit & Compliance | critical | 3/3 Steps•3/3 Assertions | 28ms | |
| PASSING | ENG-AUD-002FLOW Audit Engine: Forensic Search & Query Verification Across 10M Historical Records Executes indexed forensic audit queries filtered by actor, date range, and IP address, returning results in < 100ms. | engines Audit & Compliance | medium | 3/3 Steps•3/3 Assertions | 76ms | |
| PASSING | ENG-RISK-001FLOW Risk Engine: Card Velocity & Payment Anomaly Detection Intercepts rapid repeated booking attempts on new corporate accounts, detecting credit card velocity anomalies and enforcing 3D-Secure challenge. | engines Risk & Fraud | critical | 3/3 Steps•3/3 Assertions | 36ms | |
| PASSING | ENG-RISK-002FLOW Risk Engine: GPS Telemetry Mocking & Spoofing Identification Detects artificial GPS telemetry spoofing (impossible acceleration > 250 km/h or instant coordinate teleportation), disqualifying spoofed driver. | engines Risk & Fraud | high | 3/3 Steps•3/3 Assertions | 24ms | |
| PASSING | ENG-RES-001FLOW Infrastructure: Redis Redlock Mutual Exclusion Under High Contention Tests 50 simultaneous dispatch requests competing for the exact same trip lock; verifies exactly 1 winner and 49 clean graceful lock rejections. | engines Database & Locks | critical | 4/4 Steps•3/3 Assertions | 52ms | |
| PASSING | ENG-RES-002FLOW Infrastructure: Database Read-Replica Load Distribution & Sub-Second Failover Verifies PostgreSQL read queries route across pool of 3 read-replicas; simulates primary failover with < 800ms promotion time. | engines Database & Locks | critical | 4/4 Steps•3/3 Assertions | 90ms | |
| PASSING | ENG-RES-003CASCADE Infrastructure: API Gateway Circuit Breaker & Graceful Degradation When third-party flight API begins returning 500 errors, API Gateway circuit breaker opens within 5 failures, serving cached flight data. | engines Gateway & Resilience | high | 4/4 Steps•3/3 Assertions | 35ms | |
| PASSING | ENG-EDGE-001FLOW Edge Cases: Stripe Webhook Duplicate Event Deduplication (Idempotency Key) Stripe retries charge.succeeded webhook 3 times with identical idempotency key; gateway processes exactly once and returns cached 200 OK. | edge cases Edge Cases & Gateway | critical | 4/4 Steps•3/3 Assertions | 29ms | |
| PASSING | ENG-EDGE-002CASCADE Edge Cases: Geocoding Multi-Provider Automatic Fallback (Google -> Mapbox -> OSM) When primary geocoding provider fails or hits API quota limit, system falls back to secondary within 35ms without throwing user errors. | edge cases Edge Cases & Gateway | high | 4/4 Steps•3/3 Assertions | 50ms | |
| PASSING | ENG-EDGE-003FLOW Edge Cases: WebSocket Client Reconnection with Backpressure Buffer Recovery Client experiences momentary 3-second WiFi blip; engine queues up to 100 missed telemetry frames in Redis and replays on socket reconnect. | engines Notification Engine | high | 4/4 Steps•3/3 Assertions | 33ms | |
| PASSING | ENG-EDGE-004FLOW Edge Cases: Daylight Saving Time (DST) Midnight Boundary Shift Handling Booking scheduled across the 02:00 -> 03:00 European DST spring forward hour transition computes correct UTC absolute duration and chauffeur rest intervals. | edge cases Edge Cases & Gateway | medium | 3/3 Steps•3/3 Assertions | 15ms | |
| PASSING | ENG-EDGE-005FLOW Edge Cases: High-Concurrency Flash Surge Load Spike (5,000 req/sec) Simulates instantaneous 5,000 req/sec search query spike during major stadium event egress; verifies response p99 latency remains < 120ms. | engines Gateway & Resilience | critical | 3/3 Steps•3/3 Assertions | 59ms | |
| PASSING | ENG-EDGE-006FLOW Edge Cases: Cryptographic Chauffeur Token Tamper Rejection Attacker modifies JWT payload claims (attempting to escalate driverId to another user); gateway verifies HMAC-SHA256 signature and immediately rejects. | edge cases Risk & Fraud | critical | 4/4 Steps•3/3 Assertions | 24ms | |
| PASSING | ENG-EDGE-007FLOW Edge Cases: Cross-Border Geofence Timezone & Currency Dynamic Switch Vehicle crosses border from France (EUR) to Switzerland (CHF); mobile and dispatch engines dynamically adjust currency and VAT rules in real time. | edge cases Edge Cases & Gateway | medium | 3/3 Steps•3/3 Assertions | 42ms | |
| PASSING | ENG-EDGE-008FLOW Edge Cases: Zero-Downtime Blue/Green Microservice Rolling Deployment Dispatches 1,000 active booking requests during a live blue/green service deployment; verifies zero dropped TCP connections or HTTP 502/503 errors. | engines Gateway & Resilience | high | 4/4 Steps•3/3 Assertions | 90ms | |
| PASSING | ENG-CHAT-001FLOW Chat Engine: Sub-2ms Direct In-Ride Messaging & Zero-Delay Socket Delivery Validates ultra-low latency direct message routing between Passenger and Chauffeur mobile apps via Bun native WebSockets on port 4080 with < 2ms transit. | engines Realtime Chat Engine | critical | 3/3 Steps•3/3 Assertions | 7ms | |
| PASSING | ENG-CHAT-002FLOW Chat Engine: Automated Real-Time PII Scrubbing & Anti-Disintermediation Filter Intercepts messages containing telephone numbers, credit card numbers, or emails; automatically scrubs sensitive strings in flight to preserve platform privacy. | engines Realtime Chat Engine | critical | 3/3 Steps•3/3 Assertions | 5ms | |
| PASSING | ENG-CHAT-003UPDATE Chat Engine: Real-Time Typing Indicators & Bi-Directional Read Acknowledgments Broadcasts live typing indicators and delivery/read receipts across chat room participants with instant state synchronization. | engines Realtime Chat Engine | medium | 4/4 Steps•3/3 Assertions | 7ms | |
| PASSING | ENG-CHAT-004CASCADE Chat Engine: Tri-Party Room Multiplexing (Passenger + Chauffeur + Dispatcher) Validates seamless tri-party communication where Fleet Dispatcher intervenes in active ride room, injecting automated flight reschedule announcements. | engines Realtime Chat Engine | high | 3/3 Steps•3/3 Assertions | 8ms | |
| PASSING | ENG-CHAT-005FLOW Chat Engine: Sub-Millisecond RingBuffer Replay on Mobile Reconnection Driver exits underground tunnel; socket reconnects and receives full 30-message historical backlog from in-memory ring buffer in < 1ms without hitting disk database. | engines Realtime Chat Engine | high | 3/3 Steps•3/3 Assertions | 4ms | |
| PASSING | ENG-CHAT-006ADD Chat Engine: Asynchronous Non-Blocking Database Archival to PostgreSQL Ensures all live chat messages are asynchronously archived to public.chat_messages table in PostgreSQL without blocking real-time WebSocket event loops. | engines Realtime Chat Engine | medium | 3/3 Steps•3/3 Assertions | 14ms | |
| PASSING | MESH-001FLOW Inter-Agent Mesh: Mutual TLS Handshake & Cryptographic Agent Identity Attestation Autonomous agents establish mutual TLS connections with hardware-backed X.509 certs, verifying public key fingerprints before joining mesh. | Inter-Agent Mesh Inter-Agent Consensus | critical | 3/3 Steps•3/3 Assertions | 41ms | |
| PASSING | MESH-002FLOW Inter-Agent Mesh: Strict Typed JSON-RPC 2.0 Message Contract Schema Enforcement All inter-agent messages conform strictly to TypeScript/Zod schemas; malformed or tampered payloads are quarantined instantly. | Inter-Agent Mesh Inter-Agent Consensus | high | 3/3 Steps•3/3 Assertions | 18ms | |
| PASSING | MESH-003FLOW Inter-Agent Mesh: Nonce-Based Replay Attack Prevention & Sequence Ordering Every inter-agent message carries monotonically increasing sequence number and cryptographic nonce; replayed messages are rejected instantly. | Inter-Agent Mesh Inter-Agent Consensus | critical | 4/4 Steps•3/3 Assertions | 27ms | |
| PASSING | MESH-004CASCADE Inter-Agent Mesh: Cross-Agent Distributed 2-Phase Commit (2PC) Atomic Booking Client, Operator, and SuperAdmin agents execute 2PC atomic transaction: PREPARE phase locks chauffeur + pre-auths card; COMMIT phase finalizes booking. | Inter-Agent Mesh Inter-Agent Consensus | critical | 4/4 Steps•3/3 Assertions | 52ms | |
| PASSING | MESH-005FLOW Inter-Agent Mesh: Byzantine Quorum Consensus Verification (Raft/Paxos Protocol) Verifies state synchronization across 5 mesh nodes, achieving quorum consensus (3 of 5 nodes) even when 1 node experiences simulated partition. | Inter-Agent Mesh Inter-Agent Consensus | high | 4/4 Steps•3/3 Assertions | 46ms | |
| PASSING | MESH-006CASCADE Inter-Agent Mesh: Autonomous Dead-Letter Queue (DLQ) Recovery & Exponential Backoff When message delivery to driver agent fails due to temporary signal loss, message routes to DLQ with exponential retry backoff, succeeding upon retry. | Inter-Agent Mesh Inter-Agent Consensus | high | 4/4 Steps•3/3 Assertions | 47ms | |
| PASSING | MESH-007FLOW Inter-Agent Mesh: Decentralized Heartbeat & Liveness Gossip Protocol Agents exchange periodic 2-second gossip packets (SWIM protocol) to maintain mesh topology, detecting dead nodes within 4.5 seconds. | Inter-Agent Mesh Inter-Agent Consensus | medium | 4/4 Steps•3/3 Assertions | 53ms | |
| PASSING | MESH-008FLOW Inter-Agent Mesh: Distributed Trace Context Propagation (OpenTelemetry W3C) Ensures traceparent header (W3C trace context) is propagated unmodified across 6 agents from initial click to chauffeur dispatch and billing. | Inter-Agent Mesh Inter-Agent Consensus | medium | 3/3 Steps•3/3 Assertions | 42ms | |
| PASSING | MESH-009CASCADE Inter-Agent Mesh: Split-Brain Fencing Token Generation & Stale Node Rejection When network partition heals, old leader attempts to issue commands with stale fencing token; storage engine rejects stale token and preserves consistency. | Inter-Agent Mesh Inter-Agent Consensus | critical | 4/4 Steps•3/3 Assertions | 42ms | |
| PASSING | MESH-010FLOW Inter-Agent Mesh: Dynamic Capability Negotiation & Schema Backward Compatibility During rolling upgrade, modern Agent (v2.1) negotiates capability set with legacy Agent (v2.0), gracefully downgrading optional fields. | Inter-Agent Mesh Inter-Agent Consensus | medium | 3/3 Steps•3/3 Assertions | 32ms | |
| PASSING | MESH-011FLOW Inter-Agent Mesh: Cross-Agent Prioritized Token Bucket Flow Control When mesh experiences high message volume, high-priority messages (SOS, Dispatch) pass through unimpeded while background telemetry throttles. | Inter-Agent Mesh Inter-Agent Consensus | high | 3/3 Steps•3/3 Assertions | 48ms | |
| PASSING | MESH-012CASCADE Inter-Agent Mesh: Partition Healing & Eventual State Log Reconciliation After 30-second network partition between two regions, agents synchronize Merkle trees, detect 14 missing entries, and reconcile state with zero conflicts. | Inter-Agent Mesh Inter-Agent Consensus | critical | 4/4 Steps•3/3 Assertions | 66ms |