PASS connection-check UI performs no login or card operation
PASS QR keyboard scanner does not redirect embedded card digits
PASS source fixture member and consumption projects shown without eye clicks
PASS replacement records independently paginated
PASS recharge amount gift points and method shown in place
PASS replacement layout fits desktop and mobile widths
PASS new-card scanner stays in replacement field
PASS recorded operator comes from authenticated ledger identity
PASS unchecked identity verification cannot create a pending case
PASS changed source balance stops case creation and replacement
PASS read-only mode blocks combined replacement action
PASS same new and old card cannot create a case
PASS combined verified case creation goes straight to final confirmation
PASS cancel after pending registration does not alter source card
PASS IC-only replacement reconciles fixture balances and persists verified operators
PASS lost completion receipt is recovered with GET without duplicate swap
PASS completed operation and audit are queryable through unchanged ledger
PASS unmatched old card cannot reuse previous customer review
PASS source history failure clears review and blocks replacement
PASS wrong old-card registration with no source member exposes safe exit and list actions
PASS pending exit actions stay visible and fit desktop, tablet and phone
PASS cancel leaving preserves selected pending record and recovery pointer
PASS failed readback preserves current pending case without any retry or new writes
PASS leaving clears only page state and active recovery pointer; pending registration and audit stay on host
PASS next customer lookup works immediately after leaving invalid pending case
PASS return to ledger list retains discoverable pending case for later resumption
PASS wrong-card correction retains audit and invalidates source review before explicit re-read
PASS explicit source not-sent receipt clears only its proof and allows safe deferral
PASS unknown source outcome cannot be cleared or bypassed to serve another customer
PASS verified source swap with unfinished ledger completion cannot be deferred or forgotten
PASS after successful original-case completion next customer is available and proof is cleared once
PASS photo QR resolves through authenticated ledger and locks the associated applicant fields
PASS pending registration binds intake ID and photo receipt without silently swapping the card
PASS retained photo can be viewed after reopening a pending case
PASS next applicant does not inherit the previous photo or persist image bytes in session storage
