The Client Intake Failure-Test Kit

Setup Submit KIT-001 with all required fields and a controlled test address. Close the tab after the receipt; inspect the sandbox record independently.

Expected Show success only after a durable record is committed. Return a stable receipt ID. The record survives tab closure and can be found by ID; do not call it delivered or qualified.

Keep as evidence Receipt ID + persisted record; no reliance on a success animation.

Setup Omit the contact field, then send a malformed test address. Repeat directly against the authorized test endpoint to bypass browser validation.

Expected Server validation rejects invalid inputs with actionable errors. Preserve safe entered values. Create no accepted inquiry, delivery or conversion. Then correct the data and verify one acceptance.

Keep as evidence Validation response + zero accepted records before correction.

Setup Double-click a valid synthetic inquiry and replay the identical request with the same idempotency key. Also try changing the payload under that key.

Expected Identical retries return the original accepted ID, with one record and one downstream handoff. A changed payload under the same key is rejected, not silently overwritten. A genuinely new inquiry uses a new key.

Keep as evidence Request keys + one durable record + one routed item.

Setup In a test proxy, drop a request before it reaches the server; then drop a response after the server commits. Retry each using its original key.

Expected No false success for a request that never arrived. A lost response shows pending/unknown until safe retry or lookup resolves it. The committed case returns its original receipt without creating a duplicate.

Keep as evidence Both failure points + final unique IDs and accurate UI state.

Setup Make the sandbox inbox or CRM adapter return timeout, 429 and 5xx responses after KIT-005 is committed. Restore the adapter after the agreed retry window.

Expected Keep the inquiry durably queued. Retry safely with backoff and rate-limit handling; stop bounded retries into a visible exception queue. No lost record or false delivered status. Recovery creates one destination record.

Keep as evidence Accepted ID + retry history + exception entry + destination ID.

Setup Send synthetic inquiries for two service categories. Inspect both the intended inbox or CRM and assigned owner. Repeat with the primary owner unavailable.

Expected Map the right fields to the right destination and one named person. A shared inbox alone is not ownership. Verify a backup takes responsibility when needed. Do not mark qualified until written fit criteria are applied.

Keep as evidence Destination record + category rule + primary/backup assignment.

Setup Leave KIT-007 undelivered beyond the agreed alert deadline. Have the named recovery owner inspect the alert, repair the test mapping and replay the original record.

Expected Alert an accountable person with a minimal ID and protected recovery link, not inquiry contents. Track acknowledgment and escalation to backup. Manual replay uses the same ID, avoids duplicates and closes only after verified delivery.

Keep as evidence Alert/acknowledgment times + recovery log + delivery proof.

Setup With an anonymous session and a low-privilege test account, try reading, changing, exporting or replaying another synthetic inquiry by guessing or altering its ID.

Expected The server denies each unauthorized action, even if UI controls are hidden. No inquiry data, secrets or enumerable receipts leak. Only authorized roles can route or recover; record denials without logging full payloads.

Keep as evidence Role/action matrix + denial responses + restricted audit entry.

Setup Create tagged campaign, referral and untagged synthetic inquiries. Retry one. Include an unexpected source value and a URL query containing a synthetic email.

Expected Allowed source/campaign fields follow the accepted ID into the destination without retry overwrites. Missing source is unknown/direct, not invented. Treat source as untrusted; strip personal/query data and never use it as permission.

Keep as evidence Accepted-to-destination source mapping + sanitized values.

Setup Send one service inquiry with marketing opt-in unchecked and one explicitly checked. In the sandbox, test a later preference withdrawal. Inspect the preference record and marketing destination.

Expected Both inquiries reach service owners. Unchecked means no marketing enrollment. Any opt-in is separate, optional and initially unchecked, with the displayed wording/version and time recorded. Withdrawal updates the marketing path without deleting the service request.

Keep as evidence Separate service/consent fields + no-enrollment case + withdrawal.

Setup Inspect sandbox conversion payloads after one rejected attempt, one acceptance, a retry and two receipt-page reloads. Also inspect URLs and automatic page metadata.

Expected Count one accepted-inquiry conversion only at durable acceptance, deduped by an opaque event key. Rejects and reloads add none. Allowlist event/stage/source fields; exclude names, emails, phone numbers, message text, raw URLs and linkable customer IDs. Keep delivery and qualification as separate stages.

Keep as evidence Event count + dedupe key + payload/metadata field audit.

Setup In one time window, use 5 attempts: one invalid, a valid inquiry plus its retry, and two new valid inquiries. Hold one of the 3 accepted records pending; qualify one of the 2 delivered records. Apply the agreed test-data retention rule.

Expected Reconcile 5 attempts, 3 unique accepted, 2 delivered, 1 qualified and 1 pending by ID and timestamp. Surface the pending exception. Limit evidence access and retained fields; remove synthetic payloads from queue, destination and logs according to the documented retention/backup policy.

Keep as evidence Stage ledger + unresolved ID + retention/cleanup check.