Testing uses customer-authorized developer or non-production access where currently available. Any production test requires explicit scope, representative records, approval, stop criteria, and reconciliation. Monitoring and disable behavior remain bounded by API visibility and queued actions.