One test tracks a full factory run plus the publish steps — NAT, public IP, DNS, certificate — each as a checkpoint with evidence. Verification re-probes DNS (via dns.google), the served TLS certificate, the HTTP→HTTPS redirect, /health and the login gate. Standards live in the Design Guide.