Testing Checklist

DNS CNAMEs point to TS clusters (trading. and trade.) and serve HTTPS.

• Step‑1 GET returns an Authenticated Link only after Step‑2 returns status:"Ok".

• iFrame loads and user is logged in anonymously.

• getbalance called before opentrade.

• opentrade debits/holds correctly and is idempotent.

• closetrade settles correctly for win/loss/tie and is idempotent.

• postMessage switching works for Turbo ↔ High/Low (targetOrigin validated).

• Switching to/from 1000x triggers a new authorization cycle and iFrame URL.

• Digest validation passes under clock skew (±1h).

• Error paths verified (insufficient funds, invalid token, invalid digest).