Files
Charon/docs/issues/manual_test_pr3_keepalive_controls_closure.md
akanealw eec8c28fb3
Some checks are pending
Go Benchmark / Performance Regression Check (push) Waiting to run
Cerberus Integration / Cerberus Security Stack Integration (push) Waiting to run
Upload Coverage to Codecov / Backend Codecov Upload (push) Waiting to run
Upload Coverage to Codecov / Frontend Codecov Upload (push) Waiting to run
CodeQL - Analyze / CodeQL analysis (go) (push) Waiting to run
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Waiting to run
CrowdSec Integration / CrowdSec Bouncer Integration (push) Waiting to run
Docker Build, Publish & Test / build-and-push (push) Waiting to run
Docker Build, Publish & Test / Security Scan PR Image (push) Blocked by required conditions
Quality Checks / Auth Route Protection Contract (push) Waiting to run
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Waiting to run
Quality Checks / Backend (Go) (push) Waiting to run
Quality Checks / Frontend (React) (push) Waiting to run
Rate Limit integration / Rate Limiting Integration (push) Waiting to run
Security Scan (PR) / Trivy Binary Scan (push) Waiting to run
Supply Chain Verification (PR) / Verify Supply Chain (push) Waiting to run
WAF integration / Coraza WAF Integration (push) Waiting to run
changed perms
2026-04-22 18:19:14 +00:00

3.4 KiB
Executable File

title, labels, priority
title labels priority
Manual Test Tracking Plan - PR-3 Keepalive Controls Closure
testing
frontend
backend
security
high

Manual Test Tracking Plan - PR-3 Keepalive Controls Closure

Scope

PR-3 only.

This plan tracks manual verification for:

  • Keepalive control behavior in System Settings
  • Safe default/fallback behavior for missing or invalid keepalive values
  • Non-exposure constraints for deferred advanced settings

Out of scope:

  • PR-1 compatibility closure tasks
  • PR-2 security posture closure tasks
  • Any new page, route, or feature expansion beyond approved PR-3 controls

Preconditions

  • Branch includes PR-3 closure changes only.
  • Environment starts cleanly.
  • Tester can access System Settings and save settings.
  • Tester can restart and re-open the app to verify persisted behavior.

Track A - Keepalive Controls

TC-PR3-001 Keepalive controls are present and editable

  • Open System Settings.
  • Verify keepalive idle and keepalive count controls are visible.
  • Enter valid values and save.
  • Expected result: values save successfully and are shown after refresh.
  • Status: [ ] Not run [ ] Pass [ ] Fail
  • Notes:

TC-PR3-002 Keepalive values persist across reload

  • Save valid keepalive idle and count values.
  • Refresh the page.
  • Re-open System Settings.
  • Expected result: saved values are preserved.
  • Status: [ ] Not run [ ] Pass [ ] Fail
  • Notes:

Track B - Safe Defaults and Fallback

TC-PR3-003 Missing keepalive input keeps safe defaults

  • Clear optional keepalive inputs (leave unset/empty where allowed).
  • Save and reload settings.
  • Expected result: app remains stable and uses safe default behavior.
  • Status: [ ] Not run [ ] Pass [ ] Fail
  • Notes:

TC-PR3-004 Invalid keepalive input is handled safely

  • Enter invalid keepalive values (out-of-range or malformed).
  • Attempt to save.
  • Correct the values and save again.
  • Expected result: invalid values are rejected safely; system remains stable; valid correction saves.
  • Status: [ ] Not run [ ] Pass [ ] Fail
  • Notes:

TC-PR3-005 Regression check after fallback path

  • Trigger one invalid save attempt.
  • Save valid values immediately after.
  • Refresh and verify current values.
  • Expected result: no stuck state; final valid values are preserved.
  • Status: [ ] Not run [ ] Pass [ ] Fail
  • Notes:

Track C - Non-Exposure Constraints

TC-PR3-006 Deferred advanced settings remain non-exposed

  • Review System Settings controls.
  • Confirm trusted_proxies_unix is not exposed.
  • Confirm certificate lifecycle internals are not exposed.
  • Expected result: only approved PR-3 keepalive controls are user-visible.
  • Status: [ ] Not run [ ] Pass [ ] Fail
  • Notes:

TC-PR3-007 Scope containment remains intact

  • Verify no new page/tab/modal was introduced for PR-3 controls.
  • Verify settings flow still uses existing System Settings experience.
  • Expected result: PR-3 remains contained to approved existing surface.
  • Status: [ ] Not run [ ] Pass [ ] Fail
  • Notes:

Defect Log

ID Test Case Severity Summary Reproducible Status

Exit Criteria

  • All PR-3 test cases executed.
  • No unresolved critical defects.
  • Keepalive controls, safe fallback/default behavior, and non-exposure constraints are verified.
  • No PR-1 or PR-2 closure tasks introduced in this PR-3 plan.