Regression suite
The subset of tests rerun on every change to catch what used to work.
Mandatory for 17 of 46 product types. Usually run by a QA engineer.
What it catches
- reintroduced bugs
What it misses
- new bugs in new features
Which product types need it and why
| Product type | Status | Reason or condition |
|---|---|---|
| clinical trial management software | mandatory | Risks: Fine or enforcement by a regulator, Records silently wrong |
| data pipeline | mandatory | Risks: Records silently wrong, Users or operators act on wrong numbers |
| desktop application | mandatory | Risks: Records silently wrong, Personal or sensitive data exposed |
| e-signature service | mandatory | Risks: Fine or enforcement by a regulator, Records silently wrong |
| electronic health record system | mandatory | Risks: Physical or psychological harm to a user |
| email marketing platform | mandatory | Risks: Records silently wrong, Fine or enforcement by a regulator |
| ERP system | mandatory | Risks: Money leaves or fails to arrive, Records silently wrong |
| identity and access management service | mandatory | Risks: Fraud or abuse by users, Personal or sensitive data exposed |
| LLM-based assistant | mandatory | Risks: Users or operators act on wrong numbers |
| machine learning model service | mandatory | Risks: Users or operators act on wrong numbers, Fine or enforcement by a regulator |
| mobile banking app | mandatory | Risks: Personal or sensitive data exposed, Records silently wrong |
| neobank | mandatory | Risks: Fine or enforcement by a regulator, Records silently wrong |
| peer-to-peer payment app | mandatory | Risks: Personal or sensitive data exposed |
| software as a medical device | mandatory | Risks: Physical or psychological harm to a user, Fine or enforcement by a regulator |
| SDK or client library | mandatory | Risks: Third-party dependency fails |
| social network | mandatory | Risks: Fine or enforcement by a regulator |
| video conferencing tool | mandatory | Risks: Fraud or abuse by users, Personal or sensitive data exposed |
| accounting and invoicing SaaS | recommended | Becomes mandatory when tax rules or chart-of-accounts logic change in a release. |
| buy now pay later service | recommended | Becomes mandatory when account or checkout responses are cached at the edge. |
| crypto exchange | recommended | Becomes mandatory when a release has caused a trading halt. |
| dating app | recommended | Becomes mandatory when more than one team ships to the same release. |
| ecommerce store | recommended | Becomes mandatory when the store releases or updates plugins more than once a month. |
| EV charging app | recommended | Becomes mandatory when charger firmware and app release on separate schedules. |
| expense management tool | recommended | Becomes mandatory when customers configure their own approval chains. |
| fleet and logistics tracking | recommended | Becomes mandatory when firmware, driver app and dashboard release separately. |
| insurance app | recommended | Becomes mandatory when rate filings change more than once a year. |
| smart home or IoT app | recommended | Becomes mandatory when firmware and app release on separate schedules. |
| kids app | recommended | Becomes mandatory when an SDK update ships with a release. |
| lending platform | recommended | Becomes mandatory when more than one loan product shares the servicing engine. |
| online marketplace | recommended | Becomes mandatory when fee or payout rules change more than once a quarter. |
| messaging app | recommended | Becomes mandatory when more than one client team ships to the same release. |
| mobile game | recommended | Becomes mandatory when live content ships between client releases. |
| pharmacy delivery app | recommended | Becomes mandatory when the prescription rules change more than once between releases. |
| subscription box service | recommended | Becomes mandatory when billing rules change more than once a quarter. |
| wearable companion app | recommended | Becomes mandatory when firmware and app release on separate schedules. |
| government services portal | optional | May help once releases ship often. |
| grocery delivery app | optional | May help keep fee wording and refund fixes from regressing. |
| language learning app | optional | May help once OS updates break audio between releases. |
| loyalty program app | optional | Optional: helps when promotions change weekly. |
| mental health app | optional | May help once SDK updates and consent changes ship often and old tracking calls reappear. |
| patient portal | optional | May help once portal releases follow the record system's upgrade schedule. |
| ride-hailing app | optional | May help: reruns the fare, cancellation and deactivation cases when fare rules change. |
| telemedicine app | optional | May help once intake, booking and prescribing flows change every release and past fixes start to reappear. |
| event ticketing platform | optional | May help keep onsale fixes from regressing. |
| stock trading app | optional | A regression pack of past order-state defects can catch a reopened bug before release. |
| travel booking app | optional | May help keep fee display and refund fixes from regressing. |
Done conditions used on playbook pages
Each mandatory cell has its own done condition, written for that product type.
- clinical trial management software (Healthcare): Before each release, the validated scripts for edit checks, signatures and audit trail rerun and pass on the release candidate, and the result is filed in the validation package.
- data pipeline (Infrastructure and developer products): Reconciliation and edge-file cases rerun on every change, and any change in sample output totals blocks the merge.
- desktop application (Infrastructure and developer products): Install, update, uninstall and local-port cases rerun before each release, and any new listening port or deleted user file blocks it.
- e-signature service (B2B SaaS): The certificate, consent and tamper cases rerun on every release, and a missing certificate field or a passed tamper case blocks the release.
- electronic health record system (Healthcare): The regression set for ordering, results and medication workflows passes on each build before it reaches a live facility.
- email marketing platform (B2B SaaS): The unsubscribe, suppression and consent-capture cases rerun on every release, and a single failure blocks it.
- ERP system (B2B SaaS): The payroll, posting and period-close cases rerun on every release, and a single difference in totals blocks it.
- identity and access management service (B2B SaaS): On every release, a wrong password through the directory connector is refused, a session revoked in the admin console no longer opens the sample relying app, recovery still asks for the user's enrolled MFA factor, and any failure blocks the release.
- LLM-based assistant (Infrastructure and developer products): A fixed question set with approved answers is rerun after every prompt, model or retrieval change, and a named owner reviews every changed answer.
- machine learning model service (Infrastructure and developer products): Each new model version is scored on the same held-out set as the live one, and a worse result for any group blocks the release.
- mobile banking app (Fintech): Every app update replays the account switch, transaction list and statement download cases, and no screen shows a transaction belonging to another test customer.
- neobank (Fintech): Every release reruns the sign-up screening and ledger posting cases, and none changes outcome against the previous release.
- peer-to-peer payment app (Fintech): After each release, a payment marked private by either party never appears on the public or friends feed of a third test user.
- software as a medical device (Healthcare): The regression set traced to each software requirement passes on the release candidate and the results are filed with the release record.
- SDK or client library (Infrastructure and developer products): The public API surface diff and the crash cases rerun on every release, and a removed or changed public method without a major version bump blocks the release.
- social network (Consumer apps): After each release, privacy defaults for new teen and adult accounts match the approved settings list.
- video conferencing tool (B2B SaaS): The intruder, recording-access and uninstall cases rerun on every release, and any intruder join blocks the release.
Tools
Alphabetical. Not recommendations.
regression suite
- CypressBrowser-based end-to-end testing with a visual runner. webfreemium
- DeepEvalUnit-style evaluation for LLM applications. apiopen-source
- PlaywrightBrowser automation for Chromium, Firefox and WebKit. webopen-source
- PromptfooEvaluation and regression tests for LLM prompts and outputs. apiwebopen-source
- TestRailTest case and run management. webiosandroidapicommercial
- XrayTest management inside Jira. webiosandroidapicommercial