ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Add operational controls for high-risk runtime actions #286

Closed
ahmido wants to merge 2 commits from 242-operational-controls into dev
pull from: 242-operational-controls
merge into: ahmido:dev
Conversation 0 Commits 2 Files Changed 6 +1011 -39
ahmido commented 2026-04-27 12:55:22 +00:00
Owner
Copy Link

Summary

  • add a bounded operational controls surface for high-risk runtime actions with audited pause, resume, scope preview, and history behavior
  • cover the first-slice controls for findings.lifecycle.backfill and restore.execute, including evaluator, catalog, gating, and system-page actions
  • update the related operational control tests to reflect the current control catalog and merged dev baseline

Testing

  • cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Restore/OperationalControlRestoreExecutionGateTest.php tests/Feature/Findings/OperationalControlFindingsBackfillGateTest.php tests/Unit/Support/OperationalControls/OperationalControlEvaluatorTest.php tests/Unit/Support/OperationalControls/OperationalControlScopeResolutionTest.php tests/Unit/Support/OperationalControls/OperationalControlCatalogTest.php tests/Feature/System/OpsControls/OperationalControlManagementTest.php tests/Feature/System/OpsRunbooks/OperationalControlRunbookGateTest.php tests/Feature/OperationalControls/OperationalControlAuthorizationSemanticsTest.php tests/Feature/OperationalControls/NoAdHocOperationalControlBypassTest.php

Notes

  • this PR supersedes the earlier session-branch PR opened from 242-operational-controls-session-1777207571
## Summary - add a bounded operational controls surface for high-risk runtime actions with audited pause, resume, scope preview, and history behavior - cover the first-slice controls for `findings.lifecycle.backfill` and `restore.execute`, including evaluator, catalog, gating, and system-page actions - update the related operational control tests to reflect the current control catalog and merged `dev` baseline ## Testing - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Restore/OperationalControlRestoreExecutionGateTest.php tests/Feature/Findings/OperationalControlFindingsBackfillGateTest.php tests/Unit/Support/OperationalControls/OperationalControlEvaluatorTest.php tests/Unit/Support/OperationalControls/OperationalControlScopeResolutionTest.php tests/Unit/Support/OperationalControls/OperationalControlCatalogTest.php tests/Feature/System/OpsControls/OperationalControlManagementTest.php tests/Feature/System/OpsRunbooks/OperationalControlRunbookGateTest.php tests/Feature/OperationalControls/OperationalControlAuthorizationSemanticsTest.php tests/Feature/OperationalControls/NoAdHocOperationalControlBypassTest.php` ## Notes - this PR supersedes the earlier session-branch PR opened from `242-operational-controls-session-1777207571`
ahmido added 2 commits 2026-04-27 12:55:23 +00:00
chore: commit workspace changes (session: 242-operational-controls-session-1777207571)
Some checks failed
PR Fast Feedback / fast-feedback (pull_request) Failing after 4m58s
Details
dcf70b6df8
Merge remote-tracking branch 'origin/dev' into 242-operational-controls-session-1777207571
Some checks failed
PR Fast Feedback / fast-feedback (pull_request) Failing after 1m21s
Details
a4139559a4 
# Conflicts:
#	apps/platform/app/Filament/System/Pages/Ops/Controls.php
#	apps/platform/app/Support/OperationalControls/OperationalControlCatalog.php
#	apps/platform/tests/Feature/System/OpsControls/OperationalControlManagementTest.php
#	apps/platform/tests/Unit/Support/OperationalControls/OperationalControlCatalogTest.php
#	apps/platform/tests/Unit/Support/OperationalControls/OperationalControlScopeResolutionTest.php
ahmido closed this pull request 2026-04-27 13:00:57 +00:00
Some checks failed
PR Fast Feedback / fast-feedback (pull_request) Failing after 1m21s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: ahmido/TenantAtlas#286
No description provided.
Delete Branch "242-operational-controls"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?