Operate
Sandbox and testing
Test released workflows without treating research tooling as authorization for real money movement.
Provisioning
Sandbox creation is an authenticated Fullness management operation and is currently provisioned during controlled-beta onboarding. A sandbox does not widen an OAuth client’s scopes or release additional tools.
Recommended integration tests
- OAuth state mismatch is rejected.
- PKCE verifier mismatch is rejected.
- Expired, revoked and cross-workspace grants fail.
- An unreleased tool is absent from discovery and cannot execute.
- A non-read retry reuses the same idempotency key and arguments.
- Caller-supplied approval data is rejected.
- Webhook stale timestamps and repeated event IDs are rejected.
- Approval and activity links return the user to Fullness.