Workhuman Contract and Fixture CI

Overview

Turn customer-authorized Workhuman behavior into deterministic, secret-free merge gates and isolate any live tenant probe behind trusted approval.

Prerequisites

• A pinned contract or mapping digest, typed adapter, and sanitized synthetic fixtures
• CI threat model covering forks, artifacts, logs, caches, and secret exposure
• Named owners for tenant access, contract updates, failures, and live-test approval

Tool Discipline

Use Read, Glob, and Grep to inspect workflows and test assets, WebFetch to re-check authoritative context, and Write or Edit for CI, tests, fixtures, and redacted receipts.

Current Contract

Workhuman publicly confirms open-API and managed-integration capabilities without publishing universal routes or schemas. CI must pin the customer's authorized artifacts and fail on drift rather than embedding assumptions from the former pack.