KEP-3926: Add beta requirements

Author: ibihim

keps/sig-auth/3926-handling-undecryptable-resources/README.md

@@ -626,6 +626,35 @@ in back-to-back releases.
 
 #### Beta
 
+- Feature enabled by default
+- Dry-run support for unsafe corrupt object deletion
+  ([#134037](https://github.com/kubernetes/kubernetes/pull/134037) - open)
+- Comprehensive test coverage as outlined below
+
+##### Testing Requirements
+
+The following PRs and integration tests are required:
+
+- Test to verify list error aggregation
+  ([#129129](https://github.com/kubernetes/kubernetes/pull/129129) - open)
+- Test the delete handler with unsafe deletion flow
+  ([#128726](https://github.com/kubernetes/kubernetes/pull/128726) - open)
+
+Additional integration tests must be added:
+
+- **Deserialization failure via bit-flip**: Simulate data corruption (not just
+  encryption failure) to verify the feature handles general deserialization
+  errors.
+
+- **Deletion works for CRDs**: Verify that corrupt custom resource instances
+  can be deleted using the same mechanism as built-in resources.
+
+- **KAS health recovery**: After deleting all corrupt objects, verify that:
+  - Corrupt objects are removed from storage
+  - kube-apiserver returns to a healthy state
+  - Re-list operations eventually succeed
+  - Informers return to steady-state
+
 ### Upgrade / Downgrade Strategy
 
 <!--