{
  "generatedAt": "2026-11-10T08:21:30.561Z",
  "startedAt": "2026-11-10T08:20:48.354Z",
  "environment": "linux/x64; Node v24.22.2; PostgreSQL 18.6 (Debian 18.6-1.pgdg12+2) on x86_64-pc-linux-gnu, compiled by gcc (Debian 12.2.0-14+deb12u1) 12.2.0, 64-bit",
  "commit": "50a6fda3b425dfe8a71878f92b1ab1d274f7f2f5",
  "dirty": false,
  "sourceHash": "141cca215aac090af334f6e1f0745881c93495fab8368dd28cee1fc3f7de78de",
  "ciUrl": "https://github.com/Hadezu/operations-desk-reliability/actions/runs/42781798451",
  "sourceUrl": "https://github.com/Hadezu/operations-desk-reliability/blob/50a6fda3b425dfe8a71878f92b1ab1d274f7f2f5",
  "checks": [
    {
      "name": "TypeScript",
      "expected": "Node and web strict type checks pass",
      "source": "tsconfig.json",
      "status": "passed",
      "observed": "Process exit 0; completed successfully.",
      "durationMs": 636
    },
    {
      "name": "Cloudflare types",
      "expected": "Edge client and generated bindings type check",
      "source": "apps/cloudflare/tsconfig.json",
      "status": "passed",
      "observed": "Process exit 0; completed successfully.",
      "durationMs": 166
    },
    {
      "name": "Prisma adapter tenant and session boundaries ADMISSION: concurrent visitors cannot exceed the daily workspace quota",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 47.49169900000004
    },
    {
      "name": "Prisma adapter tenant and session boundaries TENANT: blocks foreign read, edit, delete and audit",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 35.26082400000007
    },
    {
      "name": "Prisma adapter tenant and session boundaries TENANT: ignores no client tenant override; rejects unknown properties",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 3.091323999999986
    },
    {
      "name": "Prisma adapter tenant and session boundaries SESSION: cannot switch to another visitor identity",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 4.849550000000022
    },
    {
      "name": "Prisma adapter tenant and session boundaries CSRF: rejects absent token and foreign origin",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 2.985051999999996
    },
    {
      "name": "Prisma adapter tenant and session boundaries SESSION: stores a hash, expires and revokes sessions",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 33.44464700000003
    },
    {
      "name": "Prisma adapter authorization and commands RBAC: employee cannot approve; observer cannot create or submit",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 23.005042000000003
    },
    {
      "name": "Prisma adapter authorization and commands IDEMPOTENCY: concurrent identical commands persist one entity and replay result",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 10.337079000000017
    },
    {
      "name": "Prisma adapter authorization and commands IDEMPOTENCY: same key is isolated between tenants",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 10.120047
    },
    {
      "name": "Prisma adapter authorization and commands CONCURRENCY: one decision wins; the loser receives 409",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 26.392439999999965
    },
    {
      "name": "Prisma adapter authorization and commands RBAC: managers cannot approve their own requests",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 19.15373299999999
    },
    {
      "name": "Prisma adapter authorization and commands VALIDATION: rejects invalid amounts, stale draft updates and invalid transitions",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 17.056198999999992
    },
    {
      "name": "Prisma adapter database guarantees and contracts DELETE: stale deletion conflicts; successful deletion retains one audit entry",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 8.002617999999984
    },
    {
      "name": "Prisma adapter database guarantees and contracts OUTBOX: database failure rolls back decision, audit and intent",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 27.202128000000016
    },
    {
      "name": "Prisma adapter database guarantees and contracts DATABASE: composite FK rejects an owner from a different tenant",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 7.988697000000002
    },
    {
      "name": "Prisma adapter database guarantees and contracts DATABASE: approved records require a non-null decision comment",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 9.17223899999999
    },
    {
      "name": "Prisma adapter database guarantees and contracts RETENTION: runtime cannot forge expiry; purge only removes expired workspaces",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 49.08739200000002
    },
    {
      "name": "Prisma adapter database guarantees and contracts AUDIT: runtime role cannot update, delete or truncate audit events",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 31.455295999999976
    },
    {
      "name": "Prisma adapter database guarantees and contracts CONTRACT: implementation responses match the published schemas",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 18.794850999999994
    },
    {
      "name": "Prisma adapter database guarantees and contracts PAGINATION: deterministic cursor pages do not repeat records",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 12.086293000000069
    },
    {
      "name": "edge SQL adapter tenant and session boundaries ADMISSION: concurrent visitors cannot exceed the daily workspace quota",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 20.239561999999978
    },
    {
      "name": "edge SQL adapter tenant and session boundaries TENANT: blocks foreign read, edit, delete and audit",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 16.319657000000007
    },
    {
      "name": "edge SQL adapter tenant and session boundaries TENANT: ignores no client tenant override; rejects unknown properties",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 1.2892920000000458
    },
    {
      "name": "edge SQL adapter tenant and session boundaries SESSION: cannot switch to another visitor identity",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 2.4844170000000076
    },
    {
      "name": "edge SQL adapter tenant and session boundaries CSRF: rejects absent token and foreign origin",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 1.4661119999999528
    },
    {
      "name": "edge SQL adapter tenant and session boundaries SESSION: stores a hash, expires and revokes sessions",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 17.47952500000008
    },
    {
      "name": "edge SQL adapter authorization and commands RBAC: employee cannot approve; observer cannot create or submit",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 11.526401000000078
    },
    {
      "name": "edge SQL adapter authorization and commands IDEMPOTENCY: concurrent identical commands persist one entity and replay result",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 6.649721999999997
    },
    {
      "name": "edge SQL adapter authorization and commands IDEMPOTENCY: same key is isolated between tenants",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 2.935068000000001
    },
    {
      "name": "edge SQL adapter authorization and commands CONCURRENCY: one decision wins; the loser receives 409",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 31.35272699999996
    },
    {
      "name": "edge SQL adapter authorization and commands RBAC: managers cannot approve their own requests",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 10.498440999999957
    },
    {
      "name": "edge SQL adapter authorization and commands VALIDATION: rejects invalid amounts, stale draft updates and invalid transitions",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 9.966069999999945
    },
    {
      "name": "edge SQL adapter database guarantees and contracts DELETE: stale deletion conflicts; successful deletion retains one audit entry",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 5.8950139999999465
    },
    {
      "name": "edge SQL adapter database guarantees and contracts OUTBOX: database failure rolls back decision, audit and intent",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 13.626524000000018
    },
    {
      "name": "edge SQL adapter database guarantees and contracts DATABASE: composite FK rejects an owner from a different tenant",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 2.854695999999876
    },
    {
      "name": "edge SQL adapter database guarantees and contracts DATABASE: approved records require a non-null decision comment",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 6.855123000000049
    },
    {
      "name": "edge SQL adapter database guarantees and contracts RETENTION: runtime cannot forge expiry; purge only removes expired workspaces",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 25.263932999999952
    },
    {
      "name": "edge SQL adapter database guarantees and contracts AUDIT: runtime role cannot update, delete or truncate audit events",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 25.511866000000055
    },
    {
      "name": "edge SQL adapter database guarantees and contracts CONTRACT: implementation responses match the published schemas",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 12.416652999999997
    },
    {
      "name": "edge SQL adapter database guarantees and contracts PAGINATION: deterministic cursor pages do not repeat records",
      "expected": "Assertion set passes against real PostgreSQL with the restricted application role.",
      "observed": "All assertions passed.",
      "status": "passed",
      "source": "tests/api.test.ts",
      "durationMs": 4.019680999999991
    },
    {
      "name": "Outbox publication recovery",
      "status": "passed",
      "durationMs": 816,
      "observed": "Durable intent recovered; duplicate enqueue kept one job and one report.",
      "expected": "Failure injection recovers without duplicate persisted results.",
      "source": "tests/worker-recovery.ts"
    },
    {
      "name": "Worker termination and restart",
      "status": "passed",
      "durationMs": 2912,
      "observed": "OS-killed a RUNNING worker; restart recovered the stalled job, one result, INTERRUPTED attempt retained.",
      "expected": "Failure injection recovers without duplicate persisted results.",
      "source": "tests/worker-recovery.ts"
    },
    {
      "name": "Crash after result commit",
      "status": "passed",
      "durationMs": 3197,
      "observed": "Process exited after PostgreSQL commit, before queue acknowledgement; restart retained one report and one completion audit.",
      "expected": "Failure injection recovers without duplicate persisted results.",
      "source": "tests/worker-recovery.ts"
    },
    {
      "name": "Bounded failure and controlled replay",
      "status": "passed",
      "durationMs": 4489,
      "observed": "Three failed attempts with backoff; observer denied; manager replay audited once; generation 1 produced one report.",
      "expected": "Failure injection recovers without duplicate persisted results.",
      "source": "tests/worker-recovery.ts"
    },
    {
      "name": "Missing queue record reconciliation",
      "status": "passed",
      "durationMs": 632,
      "observed": "Removed a published queue record; reconciliation republished durable intent and produced one report.",
      "expected": "Failure injection recovers without duplicate persisted results.",
      "source": "tests/worker-recovery.ts"
    },
    {
      "name": "Next.js production build",
      "expected": "Static export compiles and type checks",
      "source": "apps/web/next.config.mjs",
      "status": "passed",
      "observed": "Process exit 0; completed successfully.",
      "durationMs": 13532
    },
    {
      "name": "Browser workflow",
      "expected": "Employee → manager → observer journey passes on desktop and mobile",
      "source": "tests/browser/journey.spec.ts",
      "status": "passed",
      "observed": "2 passed; 0 failed; desktop and mobile Chromium.",
      "durationMs": 9355
    },
    {
      "name": "Cloudflare bundle",
      "expected": "Worker and static assets produce a deployment bundle without publishing",
      "source": "wrangler.jsonc",
      "status": "passed",
      "observed": "Process exit 0; completed successfully.",
      "durationMs": 939
    },
    {
      "name": "Cloudflare local runtime",
      "expected": "Approval flow runs in workerd against real PostgreSQL, with no absent-worker jobs",
      "source": "tests/cloudflare-smoke.ts",
      "status": "passed",
      "observed": "Process exit 0; completed successfully.",
      "durationMs": 2238
    },
    {
      "name": "Docker Compose execution",
      "status": "passed",
      "expected": "Build images, bootstrap a clean database and complete the browser workflow with a running report worker.",
      "observed": "GitHub containers job built images, bootstrapped a clean PostgreSQL database and passed desktop/mobile approval journeys, including a persisted report from the real BullMQ worker.",
      "source": ".github/workflows/verify.yml",
      "durationMs": 18415.761000000002
    },
    {
      "name": "Public Cloudflare deployment",
      "status": "unverified",
      "expected": "Free managed database, restricted role, deployed URL, runtime CPU and browser smoke checks.",
      "observed": "Deployment has not been verified. A dry-run build is not a public deployment.",
      "source": "docs/DEPLOYMENT.md"
    },
    {
      "name": "Restricted database credentials",
      "status": "passed",
      "expected": "Application authenticates separately and PostgreSQL denies audit mutation and schema administration.",
      "observed": "Runtime authenticates as a distinct restricted desk_app role; Runtime has no inherited roles or owned application tables; Application CRUD and bounded cleanup available; schema creation denied; Atomic command function runs with caller privileges, without owner elevation; Audit mutation, workspace expiry manipulation and migration metadata access denied by PostgreSQL",
      "source": "scripts/verify-database-access.ts"
    }
  ],
  "assembledAt": "2026-11-10T08:22:43.615Z"
}