Functional test generated by RoostGPT

functional_tests/README.md

@@ -65,3 +65,20 @@
 
 ---
 
+**Execution Date:** 4/28/2026, 7:19:28 AM
+
+**Test Unique Identifier:** "functional-test-aegis"
+
+**Input(s):**
+   1. Aegis_WebCC_SRS.pdf
+      Path: /var/tmp/Roost/RoostGPT/functional-test-aegis/d6bf0345-379c-48af-b81d-1f8f88aaab5e/Aegis_WebCC_SRS.pdf
+
+**Test Output Folder:**
+   1. [functional-test-aegis.json](functional-test-aegis/functional-test-aegis.json)
+   2. [functional-test-aegis.feature](functional-test-aegis/functional-test-aegis.feature)
+   3. [functional-test-aegis.csv](functional-test-aegis/functional-test-aegis.csv)
+   4. [functional-test-aegis.xlsx](functional-test-aegis/functional-test-aegis.xlsx)
+   5. [functional-test-aegis.docx](functional-test-aegis/functional-test-aegis.docx)
+
+---
+

functional_tests/functional-test-aegis/.roost/roost_metadata.json

@@ -0,0 +1,24 @@
+{
+  "project": {
+    "name": "functional-test-aegis",
+    "created_at": "2026-04-28T07:19:28.118Z",
+    "updated_at": "2026-04-28T07:19:28.118Z"
+  },
+  "files": {
+    "input_files": [
+      {
+        "fileName": "functional-test-aegis.txt",
+        "fileURI": "/var/tmp/Roost/RoostGPT/functional-test-aegis/d6bf0345-379c-48af-b81d-1f8f88aaab5e/functional_tests/functional-test-aegis/functional-test-aegis.txt",
+        "fileSha": "cf83e1357e"
+      },
+      {
+        "fileName": "Aegis_WebCC_SRS.pdf",
+        "fileURI": "/var/tmp/Roost/RoostGPT/functional-test-aegis/d6bf0345-379c-48af-b81d-1f8f88aaab5e/functional_tests/functional-test-aegis/Aegis_WebCC_SRS.pdf",
+        "fileSha": "dcebdb1a12"
+      }
+    ]
+  },
+  "api_files": {
+    "input_files": []
+  }
+}

functional_tests/functional-test-aegis/functional-test-aegis.csv

@@ -0,0 +1,29 @@
+End-to-End Applicant Journey with Security Controls (Register -> Verify -> Login MFA -> Application -> APPROVED -> Token Rotation -> CSRF Enforcement -> PIN -> Summary -> Session Timeout)
+Registration Validations and Case-Insensitive Email Uniqueness
+Authentication Lockout, Rate Limit, Remember Me TTL, Logout Invalidation
+Refresh Token Rotation Concurrency Across Tabs and CSRF Session Binding
+Access Control and CSRF Enforcement Matrix with SameSite=Strict
+Foreign Currency Purchase, Rewards, Pagination, CSRF, Rate Limit, Statements and Grace
+Transaction Field Validation and FX Precision
+Valid Small-Value FX with Rounding and Listing Page Validation
+Transactions Date/Time Boundaries, UTC/DST, per_page Max, Stable Pagination
+Rewards Accrual Boundary and MCC Classification with Floor Rounding
+Transaction Rate-Limit Recovery via MFA
+WebSocket Live Feed Resilience and Authorization
+Card Controls Freeze/Unfreeze with OTP and CSRF, Transactions Blocked While Frozen
+Report Card STOLEN with Delivery Address Override, OTP, Audit, Irreversibility
+Payments, Late Fee, Interest/Grace, Scheduling, CSRF, Rescind Window
+Payments CUSTOM Boundary and CSRF
+Statement Calculations Boundary: Interest Rounding, Grace, Late Fee UTC Boundary, Not Found
+Application Step Order Enforcement, Session Token Validation, PENDING and DECLINED
+Application Step 2 Credit Pull: sin_consent Enforcement, 503 Retry Idempotency, Session Expiry
+Application Step 1 Validation, Autosave Privacy and Cross-User Isolation
+Notifications Webhook Validation, PII Masking, Severity Rendering
+Transaction Currency and Field Validation with Success at Precision Boundaries
+CSRF Regeneration After Refresh Rotation
+Phone OTP Verification Flow with Expiry, Resend Throttle, Attempts Remaining
+Web-Based PIN Set Edge Cases: Numeric Format, Leading Zeros, OTP Expiry, Attempts Throttle, CSRF
+Audit Trail for Credit Limit Changes and Access Control
+Right to Rescind Security Sweep Post-Delete
+Session Timeout Warning - Stay Signed In Flow and Auto-Logout
+PAN Masking and Iframe Tokenization Compliance Across Portal Surfaces