13.19The important negative assertion
Sometimes the best test assertion is:
This should never happen.
For invalid request:
Verify Salesforce Upsert = 0 calls
That's often more valuable than merely asserting:
status = 400
because maybe flow returns 400 after already modifying Salesforce.