Provisioning Verification Checklist

First-Time Provisioning — Physical Verification Checklist

0 of 57 items verified · Incomplete

First-Time Provisioning — NOT VERIFIED

This checklist cannot be completed using existing-account replay. A disposable authenticated identity is required to exercise the true first-time creation path. Until this checklist is completed with a fresh user account, first-time provisioning remains classified as NOT VERIFIED.

Required:

A fresh Base44 user account (not the admin/owner account)
Admin access to invite a new user via base44.users.inviteUser
Access to the new user's email to complete registration
Ability to simulate network interruptions (e.g., DevTools network throttling)
Access to the database to verify record counts and field values

1. Fresh Account Creation

0/4

Invite a new user via base44.users.inviteUser(email, 'user') — NOT an existing admin account

User receives invitation email and completes registration with a fresh email address

User is authenticated and appears in User entity with role='user'

User has NO existing ClientProfile, BusinessTeamMember, or MembershipOperation records

2. ClientProfile Creation

0/6

User completes ClientOnboarding with client_type='Business'

ClientProfile record created with user_id matching the new user's ID

ClientProfile.account_status = 'pending_verification'

ClientProfile.client_type = 'Business'

ClientProfile.profile_work_id is a unique 10-digit number

No duplicate ClientProfile records exist for this user_id

3. Owner Membership Creation

0/8

BusinessTeamMember record created with business_client_profile_id matching the new ClientProfile ID

BusinessTeamMember.role = 'Owner'

BusinessTeamMember.role_v2 = 'Owner'

BusinessTeamMember.membership_status_v2 = 'active'

BusinessTeamMember.v2_migrated = true

BusinessTeamMember.member_user_id = new user's ID (NOT email)

BusinessTeamMember.member_email = new user's email (lowercase, trimmed)

Exactly ONE BusinessTeamMember record with role_v2='Owner' for this organization

4. Address Creation

0/3

Address record created and linked to the ClientProfile

Address contains verified location data (lat, lng, formatted_address)

ClientProfile.location_verified = true after Google Maps geocoding

5. UserVerification Creation

0/3

UserVerification record created with reference to the ClientProfile

UserVerification.verification_status = 'NotStarted' or 'Pending'

VerificationRequest linked to the ClientProfile

6. Single Operation Record

0/6

Exactly ONE MembershipOperation record exists for this provisioning flow

MembershipOperation.operation_type = 'business_client_provision'

MembershipOperation.status = 'completed'

MembershipOperation.completed_stages includes all 9 stages: validate_actor, reserve_operation, create_client_profile, bind_organization, create_owner_membership, create_address, create_user_verification, write_audit, verify_owner_invariant, complete

MembershipOperation.result_payload contains provisioned_at timestamp and client_profile_id

No duplicate MembershipOperation records with the same operation_id

7. Single Owner Record

0/3

Query BusinessTeamMember.filter({ business_client_profile_id, role_v2: 'Owner', membership_status_v2: 'active' }) returns exactly 1 record

countActiveOwners(base44, organizationId) returns 1

No orphaned or duplicate Owner records

8. Role/Status Values

0/4

BusinessTeamMember.role_v2 = 'Owner' (NOT 'Admin', 'Staff', etc.)

BusinessTeamMember.membership_status_v2 = 'active' (NOT 'pending', 'onboarding', 'suspended')

ClientProfile.verification_status = 'NotStarted' (default for new profiles)

ClientProfile.account_status = 'pending_verification' (default for new profiles)

9. Retry After Network Interruption

0/5

Call businessTeamProvision with the same operation_id after a simulated failure

Function returns the original completed result (PROVISIONING_COMPLETED)

No duplicate ClientProfile, BusinessTeamMember, Address, or UserVerification records created

MembershipOperation.retry_count remains 0 (idempotent retry, not a new attempt)

result_payload.provisioned_at timestamp is identical to the first successful call

10. Refresh and Login Persistence

0/4

User refreshes the browser — session persists (no re-login required)

User navigates away and back — business profile still accessible

base44.auth.me() returns the user with correct ID and email

ClientProfile record is still accessible via businessDataRead

11. Business Dashboard Access

0/5

User navigates to /BusinessDashboard — page loads without errors

businessDataRead function returns data scoped to the new ClientProfile

Dashboard displays the business profile name, work orders, and team members

No 'No business access' error

No cross-organization data leakage

12. Team Invitation Access

0/6

User can access the Business Team section on the dashboard

User can create a new team invitation (create_v2 action)

TeamInvitation record is created with correct organization_id

Invited member's email is normalized (lowercase, trimmed)

Invitation token is hashed (not stored in plaintext)

User can list team members (list_v2 action)

Complete all 57 items to verify first-time provisioning. This checklist must be performed with a fresh user account — existing-account replay does not qualify.