From 98a85946dd39222775bd1c86645b857ecf3aae5d Mon Sep 17 00:00:00 2001
From: Elliot Hallam <20362314+ehallam@users.noreply.github.com>
Date: Mon, 27 Apr 2026 13:25:23 +0100
Subject: [PATCH 1/3] NPA-6620: updated proxy flows

---
 .../policies/FlowCallout.ValidateIDAssuranceLevel.xml     | 7 +++++++
 proxies/live/apiproxy/proxies/default.xml                 | 4 ++++
 .../policies/FlowCallout.ValidateIDAssuranceLevel.xml     | 7 +++++++
 proxies/sandbox/apiproxy/proxies/default.xml              | 8 ++++++++
 4 files changed, 26 insertions(+)
 create mode 100644 proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
 create mode 100644 proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml

diff --git a/proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml b/proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
new file mode 100644
index 00000000..654a0afe
--- /dev/null
+++ b/proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<FlowCallout async="false" continueOnError="false" enabled="true" name="FlowCallout.ValidateIDAssuranceLevel">
+    <DisplayName>FlowCallout.ValidateIDAssuranceLevel</DisplayName>
+    <FaultRules/>
+    <Properties/>
+    <SharedFlowBundle>ValidateIDAssuranceLevel</SharedFlowBundle>
+</FlowCallout>
diff --git a/proxies/live/apiproxy/proxies/default.xml b/proxies/live/apiproxy/proxies/default.xml
index 3e8b5ea2..e7390927 100644
--- a/proxies/live/apiproxy/proxies/default.xml
+++ b/proxies/live/apiproxy/proxies/default.xml
@@ -4,6 +4,10 @@
       <Step>
         <Name>FlowCallout.GetEnvironmentKeyValueMapData</Name>
       </Step>
+      <Step>
+        <Name>FlowCallout.ValidateIDAssuranceLevel</Name>
+        <Condition>!(proxy.pathsuffix = "/_ping" OR proxy.pathsuffix = "/_status")</Condition>
+      </Step>
     </Request>
   </PreFlow>
 
diff --git a/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml b/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
new file mode 100644
index 00000000..654a0afe
--- /dev/null
+++ b/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<FlowCallout async="false" continueOnError="false" enabled="true" name="FlowCallout.ValidateIDAssuranceLevel">
+    <DisplayName>FlowCallout.ValidateIDAssuranceLevel</DisplayName>
+    <FaultRules/>
+    <Properties/>
+    <SharedFlowBundle>ValidateIDAssuranceLevel</SharedFlowBundle>
+</FlowCallout>
diff --git a/proxies/sandbox/apiproxy/proxies/default.xml b/proxies/sandbox/apiproxy/proxies/default.xml
index 164b5143..f3517927 100644
--- a/proxies/sandbox/apiproxy/proxies/default.xml
+++ b/proxies/sandbox/apiproxy/proxies/default.xml
@@ -40,6 +40,14 @@
     </Flow>
   </Flows>
   <PreFlow/>
+    <PreFlow>
+      <Request>
+        <Step>
+          <Name>FlowCallout.ValidateIDAssuranceLevel</Name>
+          <Condition>!(proxy.pathsuffix = "/_ping" OR proxy.pathsuffix = "/_status")</Condition>
+        </Step>
+      </Request>
+    </PreFlow>
   <PostClientFlow name="PostClientFlow">
     <Response>
       <Step>

From 4a060d5041c1701baab8545b59627c451ccbc85a Mon Sep 17 00:00:00 2001
From: Elliot Hallam <20362314+ehallam@users.noreply.github.com>
Date: Fri, 8 May 2026 09:54:30 +0100
Subject: [PATCH 2/3] NPA-6620: remove from sandbox

---
 .../policies/FlowCallout.ValidateIDAssuranceLevel.xml    | 7 -------
 proxies/sandbox/apiproxy/proxies/default.xml             | 9 ---------
 2 files changed, 16 deletions(-)
 delete mode 100644 proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml

diff --git a/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml b/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
deleted file mode 100644
index 654a0afe..00000000
--- a/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
+++ /dev/null
@@ -1,7 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<FlowCallout async="false" continueOnError="false" enabled="true" name="FlowCallout.ValidateIDAssuranceLevel">
-    <DisplayName>FlowCallout.ValidateIDAssuranceLevel</DisplayName>
-    <FaultRules/>
-    <Properties/>
-    <SharedFlowBundle>ValidateIDAssuranceLevel</SharedFlowBundle>
-</FlowCallout>
diff --git a/proxies/sandbox/apiproxy/proxies/default.xml b/proxies/sandbox/apiproxy/proxies/default.xml
index f3517927..d904692c 100644
--- a/proxies/sandbox/apiproxy/proxies/default.xml
+++ b/proxies/sandbox/apiproxy/proxies/default.xml
@@ -39,15 +39,6 @@
       </Condition>
     </Flow>
   </Flows>
-  <PreFlow/>
-    <PreFlow>
-      <Request>
-        <Step>
-          <Name>FlowCallout.ValidateIDAssuranceLevel</Name>
-          <Condition>!(proxy.pathsuffix = "/_ping" OR proxy.pathsuffix = "/_status")</Condition>
-        </Step>
-      </Request>
-    </PreFlow>
   <PostClientFlow name="PostClientFlow">
     <Response>
       <Step>

From 5811407a4634288c4fe7e239d4fe1c199816bf0e Mon Sep 17 00:00:00 2001
From: Elliot Hallam <20362314+ehallam@users.noreply.github.com>
Date: Fri, 8 May 2026 09:57:00 +0100
Subject: [PATCH 3/3] NPA-6620: fix accidental deletion

---
 proxies/sandbox/apiproxy/proxies/default.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/proxies/sandbox/apiproxy/proxies/default.xml b/proxies/sandbox/apiproxy/proxies/default.xml
index d904692c..164b5143 100644
--- a/proxies/sandbox/apiproxy/proxies/default.xml
+++ b/proxies/sandbox/apiproxy/proxies/default.xml
@@ -39,6 +39,7 @@
       </Condition>
     </Flow>
   </Flows>
+  <PreFlow/>
   <PostClientFlow name="PostClientFlow">
     <Response>
       <Step>