active()->create([ 'workspace_id' => (int) $tenant->workspace_id, ]); $snapshot = BaselineSnapshot::factory()->create([ 'workspace_id' => (int) $tenant->workspace_id, 'baseline_profile_id' => (int) $profile->getKey(), ]); $profile->update(['active_snapshot_id' => (int) $snapshot->getKey()]); BaselineTenantAssignment::factory()->create([ 'workspace_id' => (int) $tenant->workspace_id, 'tenant_id' => (int) $tenant->getKey(), 'baseline_profile_id' => (int) $profile->getKey(), ]); return [$tenant, $profile, $snapshot]; } it('marks trustworthy no-drift results as positive and eligible for an aligned claim', function (): void { [$tenant, $profile, $snapshot] = createAssignedBaselineTenant(); OperationRun::factory()->create([ 'tenant_id' => (int) $tenant->getKey(), 'workspace_id' => (int) $tenant->workspace_id, 'type' => OperationRunType::BaselineCompare->value, 'status' => OperationRunStatus::Completed->value, 'outcome' => OperationRunOutcome::Succeeded->value, 'completed_at' => now(), 'context' => [ 'baseline_profile_id' => (int) $profile->getKey(), 'baseline_snapshot_id' => (int) $snapshot->getKey(), 'baseline_compare' => [ 'reason_code' => BaselineCompareReasonCode::NoDriftDetected->value, 'coverage' => [ 'effective_types' => ['deviceConfiguration'], 'covered_types' => ['deviceConfiguration'], 'uncovered_types' => [], 'proof' => true, ], ], ], ]); $assessment = BaselineCompareStats::forTenant($tenant)->summaryAssessment(); expect($assessment->stateFamily)->toBe(BaselineCompareSummaryAssessment::STATE_POSITIVE) ->and($assessment->positiveClaimAllowed)->toBeTrue() ->and($assessment->evaluationResult)->toBe('no_result') ->and($assessment->headline)->toBe('No confirmed drift in the latest baseline compare.'); }); it('keeps limited-confidence zero findings in a cautionary state', function (): void { [$tenant, $profile, $snapshot] = createAssignedBaselineTenant(); OperationRun::factory()->create([ 'tenant_id' => (int) $tenant->getKey(), 'workspace_id' => (int) $tenant->workspace_id, 'type' => OperationRunType::BaselineCompare->value, 'status' => OperationRunStatus::Completed->value, 'outcome' => OperationRunOutcome::PartiallySucceeded->value, 'completed_at' => now(), 'context' => [ 'baseline_profile_id' => (int) $profile->getKey(), 'baseline_snapshot_id' => (int) $snapshot->getKey(), 'baseline_compare' => [ 'reason_code' => BaselineCompareReasonCode::CoverageUnproven->value, 'coverage' => [ 'effective_types' => ['deviceConfiguration', 'deviceCompliancePolicy'], 'covered_types' => ['deviceConfiguration'], 'uncovered_types' => ['deviceCompliancePolicy'], 'proof' => false, ], ], ], ]); $assessment = BaselineCompareStats::forTenant($tenant)->summaryAssessment(); expect($assessment->stateFamily)->toBe(BaselineCompareSummaryAssessment::STATE_CAUTION) ->and($assessment->positiveClaimAllowed)->toBeFalse() ->and($assessment->evaluationResult)->toBe('suppressed_result') ->and($assessment->nextActionTarget())->toBe(BaselineCompareSummaryAssessment::NEXT_TARGET_RUN); }); it('treats failed compare runs as action required with a failed-result semantic', function (): void { [$tenant, $profile, $snapshot] = createAssignedBaselineTenant(); OperationRun::factory()->create([ 'tenant_id' => (int) $tenant->getKey(), 'workspace_id' => (int) $tenant->workspace_id, 'type' => OperationRunType::BaselineCompare->value, 'status' => OperationRunStatus::Completed->value, 'outcome' => OperationRunOutcome::Failed->value, 'completed_at' => now(), 'context' => [ 'baseline_profile_id' => (int) $profile->getKey(), 'baseline_snapshot_id' => (int) $snapshot->getKey(), ], ]); $assessment = BaselineCompareStats::forTenant($tenant)->summaryAssessment(); expect($assessment->stateFamily)->toBe(BaselineCompareSummaryAssessment::STATE_ACTION_REQUIRED) ->and($assessment->evaluationResult)->toBe('failed_result') ->and($assessment->nextActionLabel())->toBe('Review the failed run'); }); it('treats stale compare history as a stale summary state instead of positive', function (): void { [$tenant, $profile, $snapshot] = createAssignedBaselineTenant(); OperationRun::factory()->create([ 'tenant_id' => (int) $tenant->getKey(), 'workspace_id' => (int) $tenant->workspace_id, 'type' => OperationRunType::BaselineCompare->value, 'status' => OperationRunStatus::Completed->value, 'outcome' => OperationRunOutcome::Succeeded->value, 'completed_at' => now()->subDays(9), 'context' => [ 'baseline_profile_id' => (int) $profile->getKey(), 'baseline_snapshot_id' => (int) $snapshot->getKey(), 'baseline_compare' => [ 'reason_code' => BaselineCompareReasonCode::NoDriftDetected->value, 'coverage' => [ 'effective_types' => ['deviceConfiguration'], 'covered_types' => ['deviceConfiguration'], 'uncovered_types' => [], 'proof' => true, ], ], ], ]); $assessment = BaselineCompareStats::forTenant($tenant)->summaryAssessment(); expect($assessment->stateFamily)->toBe(BaselineCompareSummaryAssessment::STATE_STALE) ->and($assessment->positiveClaimAllowed)->toBeFalse() ->and($assessment->evidenceImpact)->toBe(BaselineCompareSummaryAssessment::EVIDENCE_STALE_RESULT); }); it('keeps open findings action-required even when compare evidence is otherwise usable', function (): void { [$tenant, $profile, $snapshot] = createAssignedBaselineTenant(); OperationRun::factory()->create([ 'tenant_id' => (int) $tenant->getKey(), 'workspace_id' => (int) $tenant->workspace_id, 'type' => OperationRunType::BaselineCompare->value, 'status' => OperationRunStatus::Completed->value, 'outcome' => OperationRunOutcome::Succeeded->value, 'completed_at' => now(), 'context' => [ 'baseline_profile_id' => (int) $profile->getKey(), 'baseline_snapshot_id' => (int) $snapshot->getKey(), 'baseline_compare' => [ 'coverage' => [ 'effective_types' => ['deviceConfiguration'], 'covered_types' => ['deviceConfiguration'], 'uncovered_types' => [], 'proof' => true, ], ], ], ]); Finding::factory()->create([ 'workspace_id' => (int) $tenant->workspace_id, 'tenant_id' => (int) $tenant->getKey(), 'finding_type' => Finding::FINDING_TYPE_DRIFT, 'source' => 'baseline.compare', 'scope_key' => 'baseline_profile:'.$profile->getKey(), 'severity' => Finding::SEVERITY_HIGH, 'status' => Finding::STATUS_NEW, ]); $assessment = BaselineCompareStats::forTenant($tenant)->summaryAssessment(); expect($assessment->stateFamily)->toBe(BaselineCompareSummaryAssessment::STATE_ACTION_REQUIRED) ->and($assessment->findingsVisibleCount)->toBe(1) ->and($assessment->nextActionTarget())->toBe(BaselineCompareSummaryAssessment::NEXT_TARGET_FINDINGS); });