# Auth Server Integration Tests AGENTS

## Purpose & Scope
- Working directory: `src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/`.
- Roles: QA automation, backend engineer.
- Focus: resource server options, policy registration, bypass evaluation, and scope authorization behavior.

## Required Reading (treat as read before DOING)
- `docs/README.md`
- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/authority/architecture.md`
- Relevant sprint files.

## Working Agreements
- Keep tests deterministic (fixed time/IDs, stable ordering).
- Avoid live network calls; use fakes for metadata/JWKS retrieval.
- Update `docs/implplan/SPRINT_*.md` and local `TASKS.md` when starting or completing work.

## Testing
- Use xUnit + FluentAssertions + TestKit.
- Cover options validation, bypass deny paths, scope normalization, and audit event emission.