Check register / Errors-Validation-Security

VAL-001

A requirement the spck.dev suite checks on UCP servers. The quoted text is the normative requirement; the citation links to the exact line of the pinned spec source it was taken from.

When an out-of-stock item is added to a checkout session, the server MUST return a 400 Bad Request error indicating insufficient stock.
Keyword
MUST
Area
Errors-Validation-Security
Versions
2026-01-11 2026-01-23
Testability
testable
Spec source
ucp:docs/specification/overview.md#L951 2026-01-11
ucp:docs/specification/overview.md#L1032-L1033 2026-01-23

How this is graded

A deviation on a MUST fails the run and shows the requirement next to the actual response. Checks the suite cannot validate soundly are reported inconclusive or not-tested — never a silent pass. The full verdict semantics are on the grading rubric.

Run it against your store

The hosted check covers the read-only surface; the CLI and GitHub Action run the full suite, including this check when your store declares the capability it belongs to.