feat(admin): add safe processing monitor and operation correlation

tools/summarizer/tests/test_app.py

@@ -60,6 +60,24 @@ def load_app_module(
     return importlib.reload(module)
 
 
+@pytest.mark.parametrize("value,expected", [
+    ("11111111-1111-4111-8111-111111111111", "11111111-1111-4111-8111-111111111111"),
+    ("AAAAAAAA-AAAA-4AAA-8AAA-AAAAAAAAAAAA", "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"),
+    ("SECRET_document_content", None),
+    ("00000000-0000-0000-0000-000000000000", None),
+    ("x" * 128, None),
+])
+def test_operation_correlation_echoes_only_a_nonempty_bounded_uuid(monkeypatch, value, expected):
+    module = load_app_module(monkeypatch, service_token="synthetic-token")
+    client = TestClient(module.app)
+    response = client.post("/cv/rewrite", json={}, headers={"X-Ai-Service-Token": "synthetic-token", "X-Operation-Id": value})
+    assert response.status_code == 422  # Schema rejection exercises middleware without inference.
+    assert response.headers.get("X-Operation-Id") == expected
+    denied = client.post("/cv/rewrite", json={}, headers={"X-Operation-Id": value})
+    assert denied.status_code == 401
+    assert "X-Operation-Id" not in denied.headers
+
+
 def test_health_reports_runtime_without_ollama_and_without_forcing_model_load(monkeypatch):
     module = load_app_module(monkeypatch)
     client = TestClient(module.app)