Identity access.evaluate
successOwner reads a document and receives an allowed Identity decision.
Identity · access.evaluateidentity.authtoolkit.com
Static shared test surface for product actions, key scopes, Commerce entitlements, request and response previews, trace IDs, logs, and health handoff.
Shared Test Console
Static test surface for product actions, key scopes, Commerce entitlements, request and response previews, trace IDs, logs, and health handoff.
Platform step: Setup → Test
Static demo only. No live API wiring, no real product action execution, and no credentials are used.
Shared console surfaces
Scenarios
Static scenario cards show how each product test will eventually be structured.
Owner reads a document and receives an allowed Identity decision.
Identity · access.evaluatePreview a verification challenge while preserving the Verification truth boundary.
Verification · verification.challenge.createPreview email delivery without deciding verification truth.
Notification · notification.email.sendPreview Commerce-owned product access checks.
Commerce · commerce.entitlement.checkPreview a blocked merchant-owned campaign send.
Marketing · marketing.campaign.sendRead-only reporting preview generated from product events.
Analytics · analytics.report.readPreview QR scan reporting from hosted experience events.
QR Experience · qr.scan.readProduct context
Project-facing values used by the shared Test Console.
atk_...projRequest preview
Read-only preview of the action and resource being tested.
{
"actorId": "actor_demo_owner",
"action": "document.read",
"resource": "document:doc_demo_123"
}Response preview
Owner role can read the selected document.
{
"status": "success",
"allowed": true
}Key scope check
Identity/Security owns key validation, credential safety, and scopes.
The selected key can test Identity access decisions.
Commerce entitlement check
Commerce owns entitlement, plan, usage, credits, and commercial access.
Identity is enabled for access evaluation.
Commerce owns entitlement: trueControlled Action Runner
A safe preview of how Identity and Commerce decisions combine before a product action is allowed to run.
Controlled preview only. No live Identity call, Commerce call, product execution, billing, provider call, or persistence is connected.
Identity answers access. Commerce answers entitlement. Console displays the combined decision, then stops.
Identity and Commerce both allow identity.access.evaluate on the Starter Prepaid plan. Product execution is still not connected.
The key does not include identity:admin.write, so Identity blocks the action even though Commerce would allow the plan.
Identity requires a passkey/WebAuthn step-up before the action can continue. Commerce would allow the plan.
Identity allows the key and scope, but Commerce says bot.voice_agent.action is not included in Starter Prepaid.
Identity allows notification.sms.send, but Commerce blocks the action because the preview credit balance is too low.
Identity allows the action, but Commerce returns a demo-only invoice preview. Console shows the boundary and stops.
Decision Matrix
The product runner is not called in this phase.
Scenario Detail
Identity and Commerce both allow identity.access.evaluate on the Starter Prepaid plan. Product execution is still not connected.
Identity allows this actor, key, and scope context.
Commerce allows this plan, feature, usage, and credit context.
Identity and Commerce both allow the action. Product execution is still not connected in this phase.
Use the selected project, environment, actor, and action labels from the static preview.
Identity decides whether the actor, key, scope, session, or factor can perform the action.
Commerce decides whether plan, feature, usage, credits, or upgrade state allows the action.
Console displays the combined result but does not become the source of truth.
Trace IDs point to the Logs preview only. No live ingestion is connected.
Readiness status points to Health preview only. No live health check runs.
Controlled action result is allowed; owner: product runner later.
Open HealthScenario Detail
The key does not include identity:admin.write, so Identity blocks the action even though Commerce would allow the plan.
Identity blocked the action because the presented key is missing identity:admin.write.
Commerce allows this plan, feature, usage, and credit context.
Identity blocked the action because the presented key is missing identity:admin.write.
Use the selected project, environment, actor, and action labels from the static preview.
Identity decides whether the actor, key, scope, session, or factor can perform the action.
Commerce decides whether plan, feature, usage, credits, or upgrade state allows the action.
Console displays the combined result but does not become the source of truth.
Trace IDs point to the Logs preview only. No live ingestion is connected.
Readiness status points to Health preview only. No live health check runs.
Controlled action result is blocked; owner: identity.
Open HealthScenario Detail
Identity requires a passkey/WebAuthn step-up before the action can continue. Commerce would allow the plan.
Identity requires passkey/WebAuthn step-up before this higher-confidence action.
Commerce allows this plan, feature, usage, and credit context.
Identity requires passkey/WebAuthn step-up before this higher-confidence action.
Use the selected project, environment, actor, and action labels from the static preview.
Identity decides whether the actor, key, scope, session, or factor can perform the action.
Commerce decides whether plan, feature, usage, credits, or upgrade state allows the action.
Console displays the combined result but does not become the source of truth.
Trace IDs point to the Logs preview only. No live ingestion is connected.
Readiness status points to Health preview only. No live health check runs.
Controlled action result is review_required; owner: identity.
Open HealthScenario Detail
Identity allows the key and scope, but Commerce says bot.voice_agent.action is not included in Starter Prepaid.
Identity allows this actor, key, and scope context.
Commerce says this feature is not in the current plan.
Commerce says this feature is not in the current plan.
Use the selected project, environment, actor, and action labels from the static preview.
Identity decides whether the actor, key, scope, session, or factor can perform the action.
Commerce decides whether plan, feature, usage, credits, or upgrade state allows the action.
Console displays the combined result but does not become the source of truth.
Trace IDs point to the Logs preview only. No live ingestion is connected.
Readiness status points to Health preview only. No live health check runs.
Controlled action result is upgrade_required; owner: commerce.
Open HealthScenario Detail
Identity allows notification.sms.send, but Commerce blocks the action because the preview credit balance is too low.
Identity allows this actor, key, and scope context.
Commerce blocked the action because prepaid credits are insufficient.
Commerce blocked the action because prepaid credits are insufficient.
Use the selected project, environment, actor, and action labels from the static preview.
Identity decides whether the actor, key, scope, session, or factor can perform the action.
Commerce decides whether plan, feature, usage, credits, or upgrade state allows the action.
Console displays the combined result but does not become the source of truth.
Trace IDs point to the Logs preview only. No live ingestion is connected.
Readiness status points to Health preview only. No live health check runs.
Controlled action result is blocked; owner: commerce.
Open HealthScenario Detail
Identity allows the action, but Commerce returns a demo-only invoice preview. Console shows the boundary and stops.
Identity allows this actor, key, and scope context.
Commerce returned a demo-only billing artifact preview.
One side of this controlled action is demo-only, so no product action can run.
Use the selected project, environment, actor, and action labels from the static preview.
Identity decides whether the actor, key, scope, session, or factor can perform the action.
Commerce decides whether plan, feature, usage, credits, or upgrade state allows the action.
Console displays the combined result but does not become the source of truth.
Trace IDs point to the Logs preview only. No live ingestion is connected.
Readiness status points to Health preview only. No live health check runs.
Controlled action result is demo_only; owner: shared preview.
Open HealthBoundaries
The Console maps decisions only. Product actions are not run in this phase.
Commerce decisions are static previews. No payment collection, invoices, or billing providers are connected.
This preview does not call Identity, Commerce, Supabase, Stripe, QRVerse, or external services.
Trace IDs, audit IDs, keys, billing references, and setup values are safe demo placeholders.
Next Steps
Review the existing request, response, scope, and entitlement preview.
OpenSee where trace and decision IDs will hand off later.
OpenCheck how readiness status will summarize the controlled result.
OpenUse docs/wiring-readiness-freeze-9n.md as the planning source before live wiring.
Docs reference onlySee plain-English workflows that use Identity, Commerce, Test, Logs, and Health together.
OpenAdapter Client Boundary
A planning-safe Console boundary for future Identity and Commerce adapter calls.
Static client boundary only. No fetch, live Identity call, live Commerce call, provider call, billing, persistence, or product execution is connected.
This section shows how Console will prepare future adapter requests. It does not send them.
Console prepares a future Identity request for identity.access.evaluate but does not send it.
Mode: read only planned
Console prepares a future Commerce entitlement request for bot.voice_agent.action but does not send it.
Mode: read only planned
Console maps Identity allowed plus Commerce upgrade-required into a final upgrade-required display.
Mode: static preview
If an adapter is unavailable later, Console keeps Test Console static and avoids product execution.
Mode: static preview
Console expects Identity to return review-required for passkey/WebAuthn step-up without running a live ceremony.
Mode: read only planned
Request Plan
Response Plan
Mapping Preview
Safety
Boundaries
Console prepares static request shapes only. No Identity or Commerce adapter is called.
This boundary plan has no fetch call, network transport, provider call, or Supabase client.
No external provider, Stripe, QRVerse, or LLM/provider call is connected.
Console uses preview IDs and safe display values only. No real credentials are used.
Adapter responses can be mapped later, but product execution remains disconnected.
Commerce planning covers entitlement display only. No billing collection is attempted.
Console does not save adapter requests, responses, settings, traces, credentials, or help sessions.
Identity decides access. Commerce decides entitlement. Console prepares and displays safe mappings.
Suggested Actions
See where adapter response mapping will appear in the controlled runner.
OpenReview trace handoff display from controlled decisions.
OpenReview readiness handoff display from controlled decisions.
OpenUse docs/wiring-readiness-freeze-9n.md as the planning source.
Docs reference onlyUse Identity docs/identity-hosted-adapter-endpoint-10e.md as the source-of-truth endpoint plan.
Docs reference onlyUse Commerce docs/commerce-adapter-readiness-10b.md as the entitlement adapter plan.
Docs reference onlyAdapter Client Fixture Mode
Static Identity and Commerce hosted adapter fixture responses mapped into Console decisions, Logs, and Health.
Fixture mode only. No live Identity call, Commerce call, fetch, network, provider call, billing, persistence, or product execution is connected.
This section uses static fixture responses that mirror the planned Identity and Commerce hosted adapter endpoints. It does not call the endpoints.
Identity fixture mirrors an ok response from POST /v1/identity/adapter/evaluate.
Mode: fixture only
Identity fixture mirrors a blocked missing-scope response.
Mode: fixture only
Identity fixture mirrors a passkey/WebAuthn step-up review response.
Mode: fixture only
Commerce fixture mirrors an ok response from POST /v1/commerce/adapter/evaluate.
Mode: fixture only
Commerce fixture mirrors upgrade_required for bot.voice_agent.action.
Mode: fixture only
Commerce fixture mirrors blocked insufficient credits.
Mode: fixture only
Commerce fixture mirrors a demo-only billing artifact preview.
Mode: fixture only
Identity ok plus Commerce ok maps to final allowed, with no product execution.
Mode: fixture only
Identity ok plus Commerce upgrade_required maps to final upgrade required.
Mode: fixture only
Identity review_required plus Commerce ok maps to final review required.
Mode: fixture only
Unavailable fixture data maps to unavailable and keeps Console static.
Mode: fixture unavailable
Fixture Mapping
Identity hosted fixture maps ok to allowed.
Identity fixture missing scope maps to blocked.
Identity passkey/WebAuthn review maps to review required.
Commerce hosted fixture maps ok to allowed.
Commerce fixture upgrade required maps to upgrade required.
Commerce fixture insufficient credits maps to blocked.
Commerce demo-only billing artifact maps to demo only.
Identity and Commerce fixtures both allow the action. Product execution is still disabled.
Commerce fixture upgrade requirement wins after Identity allows the action.
Identity passkey/WebAuthn review wins before Commerce allowance can proceed.
Fixture unavailable fallback keeps Console static and avoids product execution.
Fixture Trace Preview
Fixture Readiness Preview
allowed: Identity hosted fixture maps ok to allowed.
Product execution attempted: false
blocked: Identity fixture missing scope maps to blocked.
Product execution attempted: false
review required: Identity passkey/WebAuthn review maps to review required.
Product execution attempted: false
allowed: Commerce hosted fixture maps ok to allowed.
Product execution attempted: false
upgrade required: Commerce fixture upgrade required maps to upgrade required.
Product execution attempted: false
blocked: Commerce fixture insufficient credits maps to blocked.
Product execution attempted: false
demo only: Commerce demo-only billing artifact maps to demo only.
Product execution attempted: false
allowed: Identity and Commerce fixtures both allow the action. Product execution is still disabled.
Product execution attempted: false
upgrade required: Commerce fixture upgrade requirement wins after Identity allows the action.
Product execution attempted: false
review required: Identity passkey/WebAuthn review wins before Commerce allowance can proceed.
Product execution attempted: false
unavailable: Fixture unavailable fallback keeps Console static and avoids product execution.
Product execution attempted: false
Fixture Safety
Boundary
Console reads local static fixture records only. No endpoint is called.
Identity and Commerce hosted endpoints are mirrored by fixtures, not invoked.
Fixture mode has no fetch call, transport client, provider call, or Supabase client.
Only preview IDs and display-safe values are represented.
Fixture decisions can map to Console states, but product execution remains disconnected.
Billing artifact fixtures stay static and do not collect payment.
Console does not save fixture requests, responses, traces, health, settings, or help sessions.
Identity decides access. Commerce decides entitlement. Console maps fixture responses for preview.
Next
Trace references
These IDs show how the future shared Logs surface can connect a test result to operational records.
Logs handoff preview
Shared Logs will use trace IDs to connect tests, decisions, and product execution.
Identity test recorded for access.evaluate.
2026-06-08T01:45:00Z · trace_identity_demo_001Health handoff preview
Shared Health will summarize whether the product route is ready for test execution.
Identity demo route is healthy.
Troubleshooting
Confirm the selected API key can access this product action.
Commerce-owned entitlement can still block action execution.
Make sure Project, Environment, and Integration match the expected route.
Use the trace ID to inspect the future Identity decision log.
Page Help Widget
Test Console
I can help with this page only. Ask me about anything here that you need help understanding.
I’m not a general chatbot. I only explain information available on this page.
I can help with this page only. Ask me about anything here that you need help understanding.
This page previews how a product action would be tested after setup. It does not execute a real product action.
I can help with this page only. I don’t see that information here.
Static preview only. Live answering is not connected.
I can help with this page only. I don’t see that information here.
Page Help
Page-only help for the shared static product action test surface.
I’m not a general chatbot. I only explain information available on this page.
What does this test do?
What is request preview?
What is response preview?
What does Commerce entitlement mean?
This page previews how a product action would be tested after setup. It does not execute a real product action.
Fallback: I can help with this page only. I don’t see that information here.
Open related surfaceRequest preview shows the method, path, action, resource, body, and metadata that a future live test would send.
Fallback: I can help with this page only. I don’t see that information here.
Open related surfaceResponse preview shows the static result, allowed state, reason, safe error code, decision ID, trace ID, and audit event ID.
Fallback: I can help with this page only. I don’t see that information here.
Open related surfaceCommerce entitlement is the plan or access state that can block a product action even when key scope allows it.
Fallback: I can help with this page only. I don’t see that information here.
Open related surfaceText visible on this route.
Static model data rendered by this page.
Page-specific phase documentation.
Route, title, and platform-step context.
Global help can answer from Knowledge Hub only.
Global help can answer from Knowledge Hub only. This static console phase does not include Knowledge Hub search.
I don’t see that in the Knowledge Hub yet.