Per-test results are published from the correct reports directory

Collection steps run on failure

MUST NOT keep a credential in the workflow file

Reports retained as artifacts

Run targets staging, not production

MUST NOT let a failing suite report success

Dependency cache and Java version

Log output usable and scope respected

Split uses the build's integration-test phase and naming convention

Failsafe is declared with both goals

MUST NOT keep flags, aliases or per-method disabling as the mechanism

Fresh clone goes green on the default command

Per-stage commands named

Test bodies unchanged

Reports separated

Credentials are sent on the first request via the client's own mechanism

MUST NOT leave a non-preemptive Basic call anywhere

Diagnosis names the challenge-response round trip

Request count per authenticated test drops to one

Applied to every authenticated test

MUST NOT hard-code credentials

No masking behaviour added

Assertions, endpoints and build file untouched

Checks become document-path assertions in the response phase

The decision check is anchored to its element

Content type asserted as XML

MUST NOT compare against a recorded document

All five checks retained and formatting-insensitive

No new dependency

Single HTTP call preserved

Each test is one request-through-expectations chain

Manual JSON navigation removed

Bearer credential uses the client's auth support

Fluent static imports used

Checked exceptions gone

Same three behaviours and values preserved

MUST NOT introduce a hard-coded host, token, or new dependency

Host is supplied per build invocation with a default

Local default preserved

MUST NOT leave environment hostnames in test source

One mechanism, not two

The three release commands are shown

Assertions and class structure untouched

No new machinery introduced

Schema assertion is wired through the HTTP client, with the artifact it needs

Schema files are real JSON Schema, not sample payloads

The three documented changes go red

Schema lives in its own reviewable file on the test classpath

Existing assertions preserved

MUST NOT substitute whole-body comparison

Scope respected

Collection endpoints assert non-emptiness, not mere presence

The single-object endpoint fails on a null object

Content type is asserted where the HTML incident applies

Assertions are field-path plus matcher inside the response chain

MUST NOT reintroduce whole-body comparison

Per-test incident mapping supplied

Scope respected

Decomposed into per-field assertions

Volatile fields asserted on shape, not value

MUST NOT weaken to a status-only test

Nested and array fields use path expressions

No coverage silently dropped

Snapshot file resolved

Would catch the two documented regressions

Scope respected