Risk model
Test what the business cannot afford to break
Authentication, checkout, bidding, form submission, file upload, lead capture, payment, permissions, and reporting should receive stronger test coverage than decorative UI. Test investment should follow consequence.
- List workflows by revenue, trust, compliance, and operational risk.
- Write tests around acceptance behavior, not implementation detail.
- Add regression tests when a real bug reveals an unprotected assumption.
