1Default smoke tests may open routes, inspect root metadata, inspect tab metadata, inspect payload metadata, and check mobile overflow.
2Default smoke tests may click preview-only tabs and preview-only submit buttons because they do not call backend mutations.
3Default smoke tests must not click backend-guarded submit buttons unless an explicit unauthenticated AUTH_REQUIRED test is being run.
4Default smoke tests must not click the partner payment draft submit button unless a licensed partner sandbox test has been explicitly approved.
5Authenticated mutation smoke tests require a seeded sandbox tenant, seeded role account, idempotency key, audit capture, and rollback/cleanup plan.
6No smoke test may create wallet truth, payout truth, settlement truth, inventory truth, invoice truth, GRN truth, or ledger truth.
7No smoke test may use production credentials, production partner configs, real customer data, or real payment/provider secrets.