fetch implementation. Use it to test
request construction without network access, then run a separate authenticated
canary against the Gateway you intend to operate.
Test layers
Production verification
Verify each layer independently:- Package: install the exact public version in a clean project.
- Contract: validate the request, response, scope, and version metadata.
- Authentication: test valid, missing, expired, revoked, and wrong-scope credentials.
- Isolation: prove the caller cannot read or mutate another subject or tenant.
- Idempotency: replay the same logical mutation and then send a digest mismatch.
- Lifecycle: observe the terminal state rather than stopping at admission.
- Cleanup: delete test data and confirm the documented retention boundary.