The sandbox
A club that is nobody’s, with synthetic people in it, for your application to test against. It is a real club — the same API, the same permissions, the same isolation — and nothing in it is anybody’s.
Two worlds, kept apart
An application is registered as sandbox or live, and a grant is the one row that connects an application to a club. A sandbox application can be granted access to a sandbox club and to nothing else; a live application can be granted access to real clubs and never to a sandbox. That rule is enforced at the grant, where it cannot be reasoned around, so a test integration cannot be pointed at a customer by mistake and a production one cannot be pointed at invented data and believe it.
Getting one
El Lobo Labs provisions a sandbox for your developer organization once. Ask for it. From then on:
GET /v1/developer-organizations/{developerOrganizationId}/sandbox
{
"environment": "sandbox",
"tenantId": "…", // the club to name in X-Lobo-Context-Id
"tenantSlug": "sandbox-…",
"status": "active",
"seededAt": "…"
}Register a sandbox application, grant it access to that club — your developer organization may do that itself for its own sandbox — and call the API with the sandbox club as your context. Everything you can do in a real club, you can do there, with the same scopes.
What is in it
Twelve members in four households, always the same twelve, with sequential member numbers from 1001 and addresses at a sink domain. Deterministic on purpose: an integration test that expects “Ana Ferreira, member 1001” will find her after every reset. Bookings, orders and payments you create there are yours to create.
Resetting
A reset provisions a fresh club with the same roll and carries your active grants across, so your applications keep working. The old club is retired, unreachable through any grant. Resets are done by El Lobo Labs on request, or by a platform administrator.
What the sandbox shares with real clubs is the machinery. What it never shares is a row: the data isolation between a sandbox club and a customer’s club is the same row level security that separates two customers, which is stronger than a flag and cheaper than a second database. Email sent from a sandbox stops at a sink; nothing reaches a real inbox.