Files
jobtrackingapp/docs/audits/2026-09-07/validation/evidence/b02-observations.json
T
cesnimda 0954876295 fix(security): enforce audited account, network and resource boundaries
Implement B01-B06 with regression coverage and retained validation evidence. Preserve the production ingress preflight; F04 runtime verification remains open.
2026-09-09 18:21:47 +02:00

10 lines
539 B
JSON

{
"ticket": "B02",
"date": "2026-09-08",
"scenario": "Retain A profile request, logout, sign in as B, submit with B cookies/fresh CSRF and retained request context",
"before": { "status": 200, "a": "Private A", "b": "A draft must never enter B" },
"after": { "status": 409, "a": "Private A", "b": "Private B" },
"fixtures": "Permanent Playwright API tests against actual API, Identity/session checks and isolated SQLite; synthetic accounts only",
"historicalEvidenceUnchanged": ["probes.mjs", "evidence/observations.json"]
}