---
id: change/bcquality/100
type: change
title: "#100 Add P0 integration and control add-in runtime guidance"
summary: Adds guidance and code samples for linking API parts on SystemId with Multiplicity set, webhook eligibility and validationToken renewal, credentialed AJAX loading of packaged control add-in resources, and throttling AL calls and payload size from control add-ins. The web-services and UI review skills were extended to match.
tier: official
language: en
tags:
  - feature
  - main
system: integration
review:
  state: reviewed
  by: opus
  at: "2026-10-08T02:12:50.333Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-change: 1
  input_hash: 0bb1065bc3666faa876d1d3170363b1286fed0b7
evidence:
  - kind: code
    url: https://github.com/microsoft/BCQuality/pull/100
    title: "microsoft/BCQuality#100: Add P0 integration and control add-in runtime guidance"
    date: "2026-07-14"
    commit: 0bb1065bc3666faa876d1d3170363b1286fed0b7
    t: null
    quote: add atomic guidance and focused samples for SystemId API-part links/multiplicity and webhook eligibility/lifecycle handshakes
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes: []
number: 100
repo: microsoft/BCQuality
source_id: bcquality-prs
url: https://github.com/microsoft/BCQuality/pull/100
kind: pr
base_branch: main
major: null
merged_at: "2026-07-14T10:53:27Z"
author: JesperSchulz
author_type: User
community_contribution: false
labels: []
change_class: code
change_kind: feature
behavior_change: false
breaking: false
files:
  count: 16
  additions: 526
  deletions: 12
  al: 16
apps: []
objects_touched: []
objects_unjoined:
  - path: microsoft/knowledge/ui/control-addin-package-resource-ajax-needs-withcredentials.bad.js
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/ui/control-addin-package-resource-ajax-needs-withcredentials.good.js
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/ui/control-addin-package-resource-ajax-needs-withcredentials.md
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/ui/control-addin-throttle-al-calls-and-payload-size.bad.js
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/ui/control-addin-throttle-al-calls-and-payload-size.good.js
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/ui/control-addin-throttle-al-calls-and-payload-size.md
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/link-api-parts-on-systemid-and-set-multiplicity.bad.al
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/link-api-parts-on-systemid-and-set-multiplicity.good.al
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/link-api-parts-on-systemid-and-set-multiplicity.md
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.bad.al
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.bad.js
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.good.al
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.good.js
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.md
    status: added
    reason: not-in-snapshot
  - path: microsoft/skills/review/al-ui-review.md
    status: modified
    reason: not-in-snapshot
  - path: microsoft/skills/review/al-web-services-review.md
    status: modified
    reason: not-in-snapshot
obsoletions: []
backports: []
fixes_issues: []
work_items: []
systems:
  - integration
  - development
quote: add atomic guidance and focused samples for SystemId API-part links/multiplicity and webhook eligibility/lifecycle handshakes
joined_against:
  major: null
  commit: null
---

# #100 Add P0 integration and control add-in runtime guidance

> Adds guidance and code samples for linking API parts on SystemId with Multiplicity set, webhook eligibility and validationToken renewal, credentialed AJAX loading of packaged control add-in resources, and throttling AL calls and payload size from control add-ins. The web-services and UI review skills were extended to match.

[Pull request](https://github.com/microsoft/BCQuality/pull/100) · merged into `main` on 2026-07-14 by JesperSchulz · 16 files (+526 -12), 16 AL · feature · tier official · reviewed (checked by Opus)

## What changed

- Guidance and AL samples for linking API parts on SystemId and setting Multiplicity
- Webhook eligibility and validationToken renewal patterns with AL and JS samples
- Control add-in AJAX requests for packaged resources need withCredentials
- Control add-in calls to AL should be serialized and kept within a byte limit
- Web-services and UI review skills gained new tokens, worklist cues and detection boundaries

## AL objects touched

- `microsoft/knowledge/ui/control-addin-package-resource-ajax-needs-withcredentials.bad.js`: added, not in the BC? snapshot yet
- `microsoft/knowledge/ui/control-addin-package-resource-ajax-needs-withcredentials.good.js`: added, not in the BC? snapshot yet
- `microsoft/knowledge/ui/control-addin-package-resource-ajax-needs-withcredentials.md`: added, not in the BC? snapshot yet
- `microsoft/knowledge/ui/control-addin-throttle-al-calls-and-payload-size.bad.js`: added, not in the BC? snapshot yet
- `microsoft/knowledge/ui/control-addin-throttle-al-calls-and-payload-size.good.js`: added, not in the BC? snapshot yet
- `microsoft/knowledge/ui/control-addin-throttle-al-calls-and-payload-size.md`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/link-api-parts-on-systemid-and-set-multiplicity.bad.al`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/link-api-parts-on-systemid-and-set-multiplicity.good.al`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/link-api-parts-on-systemid-and-set-multiplicity.md`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.bad.al`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.bad.js`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.good.al`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.good.js`: added, not in the BC? snapshot yet
- `microsoft/knowledge/web-services/webhook-eligibility-and-validationtoken-renewal.md`: added, not in the BC? snapshot yet
- `microsoft/skills/review/al-ui-review.md`: modified, not in the BC? snapshot
- `microsoft/skills/review/al-web-services-review.md`: modified, not in the BC? snapshot

## Context

- Systems: integration, development
- From the description: "add atomic guidance and focused samples for SystemId API-part links/multiplicity and webhook eligibility/lifecycle handshakes"

Source: metadata of a merged pull request in microsoft/BCQuality (bcquality): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).