PASS crash.ingest: Abrupt exit before ingest commit leaves every business table empty
PASS crash.response: Committed ingest survives process exit and replay creates no extra quantity
PASS load.idempotency: Eight concurrent writers turn 800 requests into 400 source events
PASS load.exact-total: Concurrent exact quantities sum without rounding
PASS load.corrections: Ten corrections append reversals and replacements with the expected net
PASS close.rollback: Crash before close commit leaves period open and no frozen version
PASS close.immutability: Late event and correction leave the frozen January digest unchanged
PASS api.isolation: Other-account read and viewer mutation are rejected
PASS api.boundary: Foreign Host and Origin are rejected
PASS api.storage: Storage failure returns HTTP 503 without inventing success
PASS restore.frozen-export: Restored January export matches every frozen row and digest
PASS restore.point-in-time: Snapshot correctly excludes the two records received after backup
PASS restore.source-replay: Stable upstream identities restore two lost records exactly once
PASS restore.carry-forward: Recovered late usage and correction close February at 2.625 minutes
PASS restore.closed-digest: Recovery and carry-forward preserve the January digest
PASS restore.corruption: Modified snapshot is rejected before destination creation
PASS restore.no-overwrite: Existing restore destination is preserved
PASS integrity.final: Recovered database passes integrity and foreign-key checks
PASS backup.schedule: Finite scheduler creates two checked snapshots and stops
{"checks": 19, "passed": 19, "elapsed_seconds": 1.804}