Production .NET Contracts
Prove real SQL, reliable delivery, conditional HTTP and trust boundaries through complete .NET10 external labs and honest portable companions.
- SQL NULL and three-valued predicates
Observe actual SQLite predicates, aggregates and CHECK behavior.
SQL semantics and execution · 30 min - Composite and covering index observations
Inspect a real plan alongside the exact query and ordered result.
SQL semantics and execution · 30 min - Expression and partial index predicate contracts
Match the expression and partial predicate the database actually indexes.
SQL semantics and execution · 30 min - WAL snapshots and whole-transaction retry
Observe stale readers and restart the complete unit after a failed upgrade.
SQL semantics and execution · 30 min - Fault-tested atomic outbox persistence
Commit the business row and publication intent in one actual transaction.
Reliable delivery boundaries · 30 min - Outbox leases, replay and stale acknowledgments
Reclaim actual persisted work while fencing an older lease generation.
Reliable delivery boundaries · 30 min - Transactional inbox and full request equivalence
Deduplicate the effect and reject incompatible message identity reuse.
Reliable delivery boundaries · 30 min - Per-aggregate ordering, gaps and poison records
Do not advance a sequence merely because an invalid delivery was observed.
Reliable delivery boundaries · 30 min - Conditional GET and representation validators
Return304 for a matching representation without confusing weak and strong comparison.
HTTP and cache contracts · 30 min - If-Match and atomic versioned updates
Distinguish missing, weak and stale write preconditions.
HTTP and cache contracts · 30 min - Versioned routes and consumer compatibility
A new route name does not make a breaking JSON shape compatible.
HTTP and cache contracts · 30 min - Invalidate cached reads after a successful commit
Do not publish a rolled-back candidate or imply an atomic SQL-plus-cache transaction.
HTTP and cache contracts · 30 min - HybridCache stampede coordination within one instance
Test the real package with concurrent callers and a controlled factory gate.
HTTP and cache contracts · 30 min - Streaming completion and partial-result contracts
A200 header does not prove that a record stream completed successfully.
HTTP and cache contracts · 30 min - Configuration reload and secret exposure boundaries
Observe actual IOptionsMonitor reload without inventing automatic last-known-good behavior.
Trust and operations · 30 min - CORS preflight is not caller authentication
Inspect browser-sharing headers independently of actual endpoint access.
Trust and operations · 30 min - Antiforgery token and cookie binding
Use the actual framework validator rather than a known-string security toy.
Trust and operations · 30 min - HTML response encoding and context boundaries
Encode text where it is inserted instead of declaring an arbitrary string universally safe.
Trust and operations · 30 min - Trusted forwarded headers and original transport
Trust proxy metadata only from an explicitly configured immediate peer.
Trust and operations · 30 min - Host filtering and canonical link ownership
Separate allowed routing hosts from an application’s trusted public base URI.
Trust and operations · 30 min - Scoped dependencies in an actual hosted worker
Create and dispose one real DI scope per accepted operation.
Trust and operations · 30 min - Telemetry privacy and bounded dimensions
Inspect actual recorded signals without assuming every downstream system is sanitized.
Trust and operations · 30 min - Executable consumer and commit-failure contracts
Check the actual body and persisted state rather than status alone.
Integration evidence · 30 min - Capstone: conditional mutation, receipt and outbox
Reconcile an uncertain committed response through one actual local storage boundary.
Integration evidence · 30 min