# Step 26 manual test checklist
- [ ] Apply migration 018 on NEW ResellBD database only.
- [ ] Admin-only access: unauthenticated and non-admin access denied.
- [ ] Add JSON and CSV HTTPS feeds; reject HTTP, localhost, private IP, credentials in URL.
- [ ] Reject redirect response and oversized (>2 MB) feed.
- [ ] Reject malformed JSON / missing CSV header / >2,000 rows.
- [ ] Valid item becomes `validated`; missing key/title, invalid price or invalid stock becomes `rejected`.
- [ ] Re-import same source/external key updates queue row, not duplicate row.
- [ ] Check `products`, `product_variants`, `inventory` remain unchanged after import.
- [ ] Verify `ai_feed_runs` success/warning/error audit data.