Meeting Room Reservations QA report

Summary

verified: 12
intentional-difference: 1
environment-blocked: 9
bug: 1

Distinct bugs

BUG-MR-001 · Meeting-room detail endpoint returns 500 during valid room selection (medium)

Expected: Selecting a valid room loads its detail successfully and the consolidated parent-iframe flow has no unexplained request failures.

Actual: GET /api/v5/meeting_rooms/{meeting_room_id} returned 500 twice in the UI and again in a controlled authenticated diagnostic. The server raised NoMethodError because the meeting-room policy called operator_organisation_id on V5::Products::MeetingRoom.

Reproduction

Log in through the legacy parent as the proven operator-admin identity.
Open Meeting Reservations with the OC-2 feature enabled for that actor.
Open New Reservation and select the affected valid meeting room.
Observe GET /api/v5/meeting_rooms/{meeting_room_id} return HTTP 500.

Affected behaviors: BEH-HYGIENE-01
Roles: operator_admin
Confidence: high · reproduced in UI and controlled authenticated API diagnostic
Evidence: EV-HYGIENE-500
Cleanup: No product mutation was performed; no cleanup beyond feature-flag restoration was required.
Suggested owner: HQ API workspace meeting-room policy owner

Coverage

Behavior	Status	Linked bug	Reason
BEH-NAV-01	verified
BEH-NAV-02	intentional-difference		Approved migration design: legacy Calendar and Meeting Reservations become Calendar and Table views inside one OC-2 domain; a separate OC-2 sidebar entry is intentionally not required.
BEH-NAV-03	verified
BEH-TABLE-01	verified
BEH-TABLE-02	verified
BEH-TABLE-03	verified
BEH-CAL-01	verified
BEH-CAL-02	verified
BEH-CAL-03	verified
BEH-CREATE-01	verified
BEH-CREATE-02	verified
BEH-CREATE-03	environment-blocked		No captured SMTP or access-control side-effect sink for guarded creation and cancellation.
BEH-DETAIL-01	verified
BEH-DETAIL-02	environment-blocked		No safely created run-owned reservation for mutation lifecycle.
BEH-PEOPLE-01	environment-blocked		Requires a run-owned reservation fixture.
BEH-PEOPLE-02	environment-blocked		Requires run-owned reservation and attachment fixtures.
BEH-COMM-01	verified
BEH-COMM-02	environment-blocked		Mail and billing side effects are not captured.
BEH-ADV-01	environment-blocked		No run-owned eligible swap fixture.
BEH-ADV-02	environment-blocked		No run-owned recurring-series fixture.
BEH-PERM-01	environment-blocked		No approved restricted-role identity.
BEH-PERM-02	environment-blocked		No approved tenant identity.
BEH-HYGIENE-01	bug	BUG-MR-001

Intentional differences

BEH-NAV-02: Approved migration design: legacy Calendar and Meeting Reservations become Calendar and Table views inside one OC-2 domain; a separate OC-2 sidebar entry is intentionally not required.

Environment and harness limitations

SCN-OWNED-LIFECYCLE: environment-blocked — The confirmation path explicitly sends reservation mail, cancellation forces mail, SMTP capture was not listening on localhost:1025, and access-control side effects were not captured. The guarded submit was therefore not authorized.
SCN-DETAIL-COLLAB: environment-blocked — Attendee, visitor, comment, and attachment mutations require a safely created run-owned reservation; none was created because notification and access side effects were not captured.
SCN-COMMERCIAL: environment-blocked — Approval, quote, invoice, and send actions require run-owned state plus captured mail and billing side effects, which this local stack did not provide.
SCN-ADVANCED: environment-blocked — Swap and series combine/separate require owned eligible reservation and occurrence fixtures; safe creation was blocked by uncaptured side effects.
SCN-PERMISSIONS: environment-blocked — Only the strongest approved operator-admin identity was available and proven; no approved restricted-role or tenant identity was available for an ACL matrix.

Cleanup

All required cleanup is verified.