Safe Workhuman Capability Smoke Test
Overview
Prove identity, entitlement, and one read-only capability before proposing any recognition, award, worker, or integration change.
Prerequisites
- An approved access path from
workhuman-install-auth - Current tenant documentation for the exact capability being tested
- A synthetic or explicitly approved test identity and a named program owner
Tool Discipline
Use Read, Glob, and Grep to inspect configuration, WebFetch to verify current first-party and tenant contracts, and Write or Edit only for fixtures and redacted receipts.
Current Contract
Workhuman publicly describes Social Recognition, a points-based Store, administrator controls, an open API, and managed integrations. Public material does not establish the baseline pack's /api/v1/* routes, payload fields, award levels, visibility values, or status sequence.
Authentication
Use only the documented principal and authorization method for the selected tenant capability. Never substitute an SSO cookie or a guessed bearer-token exchange.
Instructions
- Freeze the test objective, tenant, principal class, expected entitlement, and zero-write boundary.
- Fetch the current authorized contract and record its date, owner, environment, and exact read-only operation.
- Validate the host and path against an allowlist; reject placeholders and production if the approval names a test environment.
- Use synthetic identifiers or an approved test identity and request only the minimum response fields.
- Execute one documented read-only probe; record status, latency, schema fingerprint, and redacted correlation identifier.
- Compare the response with the documented contract and distinguish empty success from authorization or eligibility failure.
- Draft—but do not execute—a recognition or integration mutation preview with approver, idempotency, and rollback.
Approval Boundaries
Do not submit recognition, approve awards, change worker data, redeem points, or enable integrations during this smoke test.
Output
Return the contract reference, identity and entitlement result, sanitized probe receipt, schema observations, mutation preview, and an explicit READY or BLOCKED decision.
Error Handling
| Condition | Response |
|---|---|
| Host, route, or auth differs from documentation | Stop; resolve the contract mismatch before sending another request. |
| Read returns no records | Confirm that empty success is valid before treating it as an access failure. |
| Test identity is not eligible | Preserve the evidence and ask the program owner for an approved fixture. |
Example
A redacted completion receipt might look like this:
tenant=customer-test; capability=recognition-read; principal=service; result=200-empty-valid; mutation=preview-only; decision=READY
Resources
Next Steps
Move to the applicable workflow only after the owner approves the exact mutation preview.