feat(admin): migrate audit presentation and protect pending actions

2026-10-20 15:26:49 +02:00
parent 4760fd102c
commit f9e1d06bf7
12 changed files with 636 additions and 48 deletions
@@ -0,0 +1,104 @@
+{
+  "schemaVersion": 1,
+  "checkpoint": "p7-10",
+  "status": "PASS",
+  "checkedUtc": "2026-10-20T13:26:37.561220+00:00",
+  "commands": [
+    {
+      "name": "secret-scan",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:\\Users\\Connor\\AppData\\Local\\Programs\\Python\\Python312\\python.exe",
+        "-X",
+        "utf8",
+        "scripts/supply-chain.py",
+        "scan-secrets"
+      ],
+      "startedUtc": "2026-10-20T13:26:33.986812+00:00",
+      "finishedUtc": "2026-10-20T13:26:36.708184+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261020T132633Z/secret-scan.log",
+      "logSha256Raw": "be5119e6057287d397e87759f855c91e634e3bfac61c8be7584d05592ba2dfcd"
+    },
+    {
+      "name": "working-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check"
+      ],
+      "startedUtc": "2026-10-20T13:26:36.708184+00:00",
+      "finishedUtc": "2026-10-20T13:26:36.811807+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261020T132633Z/working-whitespace.log",
+      "logSha256Raw": "3a1889bb3f9660d6e0f7bcf9d41ea52f9b3b845c85f2847257728d2388fc0290"
+    },
+    {
+      "name": "staged-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--cached",
+        "--check"
+      ],
+      "startedUtc": "2026-10-20T13:26:36.811807+00:00",
+      "finishedUtc": "2026-10-20T13:26:36.906524+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261020T132633Z/staged-whitespace.log",
+      "logSha256Raw": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "name": "phase7-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check",
+        "b5319981ad3d1bd635daff861453d23c0de5320b"
+      ],
+      "startedUtc": "2026-10-20T13:26:36.907534+00:00",
+      "finishedUtc": "2026-10-20T13:26:37.105504+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261020T132633Z/phase7-whitespace.log",
+      "logSha256Raw": "3a1889bb3f9660d6e0f7bcf9d41ea52f9b3b845c85f2847257728d2388fc0290"
+    }
+  ],
+  "untrackedSecretScan": {
+    "files": 0,
+    "findings": 0
+  },
+  "documentation": {
+    "files": 33,
+    "relativeLinks": 631,
+    "errors": []
+  },
+  "preservation": {
+    "groups": 57,
+    "statuses": {
+      "PARTIAL": 56,
+      "PASS": 0,
+      "FAIL": 0,
+      "DEFERRED": 1
+    },
+    "originalRoutesPreserved": true,
+    "currentConcreteRoutes": 33
+  },
+  "production": {
+    "main": "d1fcd2308755dfc112a2bd6a736dd763bbc895f9",
+    "originMain": "d1fcd2308755dfc112a2bd6a736dd763bbc895f9",
+    "status": "NO-GO",
+    "qualification": "Local fetched refs; direct push observation recorded separately."
+  },
+  "hashPolicy": "Portable JSON UTF8 LF; raw log hashes measure exact saved bytes.",
+  "limits": [
+    "Pattern scanner skips binary and files over2MiB; not historical Git/production secrets.",
+    "Local links check target existence, not URL/heading anchors.",
+    "Static evidence is not runtime/manual/device/provider/production acceptance."
+  ]
+}