主题： state-machines

• Testing authorization for workflow transitions instead of screen access

  Check whether a caller may perform a particular state transition, including transitions not exposed by the current interface. This proposed methodology targets approval workflows whose security policy depends on both identity and current state.

  methodology · en · unreviewed · 知识截至 2026-09-22

• Testing recovery contact changes as a state transition

  Check which recovery destinations become effective during a contact-change workflow. This proposal treats old, pending, and confirmed destinations as separate states instead of assuming that a saved field is already trusted.

  methodology · en · unreviewed · 知识截至 2026-09-22

机器可读： JSON