cloud-testlisted
Install: claude install-skill konradcinkusz/architecture-standards
# Exercising the API on a deployed environment
The same black-box pass as [`TEST-ON-LOCALHOST.md`](https://github.com/konradcinkusz/architecture-standards/blob/main/docs/delivery/TEST-ON-LOCALHOST.md), against a
**deployed environment whose URL you pass in**. Everything that document says about
resolving cases from the ticket, the notation, and turning findings into tests still
applies; this one covers what changes when the thing on the other end is real, shared, and
not yours alone.
It **does not deploy**, it **does not edit code**, and by default it **does not write
data**. The target is a parameter, never a convention.
Three things separate this from a local pass, and all three are ways to do damage rather
than to miss a bug: the environment is shared, the data may be real, and the credentials
are real. The rules below exist for those three.
**Contents**
0. [The standards have to be in front of you](#0-the-standards-have-to-be-in-front-of-you)
1. [The target is a parameter](#1-the-target-is-a-parameter)
2. [Read-only until told otherwise](#2-read-only-until-told-otherwise)
3. [Preflight: what is actually deployed there](#3-preflight)
4. [Credentials](#4-credentials)
5. [Running the pass](#5-running-the-pass)
6. [Reading a failure](#6-reading-a-failure)
7. [The results document](#7-the-results-document)
8. [Failure modes](#8-failure-modes)
9. [Checklist](#9-checklist)
---
## 0. The standards have to be in front of you
Confirm you can open [`00-REFERENCE-ARCHITECTURE