| TC-CRED-001 | Assign credential to student | Positive | High | Credential is assigned | Screenshot or lifecycle record | Not Run |
| TC-CRED-002 | Admin cancels credential | Positive | Critical | Credential is cancelled | Screenshot and lifecycle record | Not Run |
| TC-CRED-003 | School Manager cancels credential | Negative | Critical | Access denied | Screenshot or API 403 response | Not Run |
| TC-CRED-004 | School Manager activates/deactivates credential where configured | Positive | High | Action allowed only within configured permission and assigned scope | Screenshot and permissions evidence | Not Run |
| TC-CRED-005 | Parent activates/deactivates own student credential where configured | Positive | High | Action allowed only for own student scope | Screenshot and permissions evidence | Not Run |
| TC-CRED-006 | Student activates/deactivates own credential where configured | Positive | Medium | Action allowed only for own scope | Screenshot and permissions evidence | Not Run |
| TC-CRED-007 | Credential replacement policy is tested | Review | High | Replacement is Admin-only | Technical decision and test evidence | Confirmed by technical team; Evidence Pending Attachment |