# SkillScriptGrantContract
> Tracon documentation. Tracon is a .NET package family that adds a control
> plane on Microsoft Agent Framework, published as NuGet packages that run
> inside your own ASP.NET Core application.
>
> Page: https://tracon.dev/api/tracon.testing.contracts.storage.skillscriptgrantcontract/
> Summary: SkillScriptGrantContract: Behavior tests for the ISkillScriptGrantStore contract.
Behavior tests for the [ISkillScriptGrantStore](/api/tracon.iskillscriptgrantstore/) contract.
```csharp
public abstract class SkillScriptGrantContract : TenantIsolationContract, IAsyncLifetime, IAsyncDisposable
```
## Remarks
Every implementation must pass the same scenarios; in particular, the
"the narrower grant wins over the broader one" rule and the fact that a
revoked grant never comes back must behave identically.
## Constructors
### SkillScriptGrantContract\(\)
```csharp
protected SkillScriptGrantContract()
```
## Methods
### Content\_hash\_round\_trips\(\)
A grant pins the content it authorizes; every read returns the pinned hash.
```csharp
[Fact]
public Task Content_hash_round_trips()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### CountAsync\(string, CancellationToken\)
Reports how many records the given tenant sees through the listing endpoint.
```csharp
protected override ValueTask CountAsync(string tenantId, CancellationToken cancellationToken)
```
#### Parameters
`tenantId` [string](https://learn.microsoft.com/dotnet/api/system.string)
The reading tenant.
`cancellationToken` [CancellationToken](https://learn.microsoft.com/dotnet/api/system.threading.cancellationtoken)
The token every store call inside the hook must be handed; see
[TenantIsolationContract.SeedAsync](/api/tracon.testing.contracts.storage/).
#### Returns
[ValueTask](https://learn.microsoft.com/dotnet/api/system.threading.tasks.valuetask\-1)<[int](https://learn.microsoft.com/dotnet/api/system.int32)\>
The number of records seen.
### ExistsAsync\(string, object\)
Reports whether the record is visible from the given tenant's viewpoint.
```csharp
protected override ValueTask ExistsAsync(string tenantId, object key)
```
#### Parameters
`tenantId` [string](https://learn.microsoft.com/dotnet/api/system.string)
The reading tenant.
`key` [object](https://learn.microsoft.com/dotnet/api/system.object)
The key returned by [TenantIsolationContract.SeedAsync](/api/tracon.testing.contracts.storage/).
#### Returns
[ValueTask](https://learn.microsoft.com/dotnet/api/system.threading.tasks.valuetask\-1)<[bool](https://learn.microsoft.com/dotnet/api/system.boolean)\>
[true](https://learn.microsoft.com/dotnet/csharp/language-reference/builtin-types/bool) if the record is visible.
### Expired\_grant\_is\_not\_returned\(\)
```csharp
[Fact]
public Task Expired_grant_is_not_returned()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Grant\_does\_not\_leak\_across\_tenants\(\)
```csharp
[Fact]
public Task Grant_does_not_leak_across_tenants()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Granting\_again\_replaces\_the\_content\_hash\(\)
Granting the same skill and script again pins the new content. An upsert whose
update branch forgot the hash would keep authorizing the previous content.
```csharp
[Fact]
public Task Granting_again_replaces_the_content_hash()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Granting\_the\_same\_grant\_twice\_leaves\_a\_single\_record\(\)
```csharp
[Fact]
public Task Granting_the_same_grant_twice_leaves_a_single_record()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Null\_content\_hash\_round\_trips\(\)
A grant that pins nothing stays that way: it authorizes scripts on disk only,
and a store must not invent a value for it.
```csharp
[Fact]
public Task Null_content_hash_round_trips()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Racing\_grants\_and\_revocations\_leave\_one\_record\_for\_the\_key\(\)
Grants and revocations of one key racing each other never leave two records
for the key, and a grant written after the race is the one in force.
```csharp
[Fact]
public Task Racing_grants_and_revocations_leave_one_record_for_the_key()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Revoked\_grant\_can\_be\_granted\_again\(\)
```csharp
[Fact]
public Task Revoked_grant_can_be_granted_again()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Revoked\_grant\_is\_invalid\(\)
```csharp
[Fact]
public Task Revoked_grant_is_invalid()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Revoked\_grant\_stays\_listed\(\)
A grant is never deleted: revoking stamps the revocation time and the record
stays listed, so who granted what and when it was withdrawn stays answerable.
```csharp
[Fact]
public Task Revoked_grant_stays_listed()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### Script\_specific\_grant\_wins\_over\_the\_skill\_wide\_grant\(\)
```csharp
[Fact]
public Task Script_specific_grant_wins_over_the_skill_wide_grant()
```
#### Returns
[Task](https://learn.microsoft.com/dotnet/api/system.threading.tasks.task)
### SeedAsync\(string, string, CancellationToken\)
Writes a sample record for the given tenant.
```csharp
protected override ValueTask