TenantAtlas/app/Support/Rbac
ahmido bda1d90fc4 Spec 094: Assignment ops observability hardening (#113)
Implements spec 094 (assignment fetch/restore observability hardening):

- Adds OperationRun tracking for assignment fetch (during backup) and assignment restore (during restore execution)
- Normalizes failure codes/reason_code and sanitizes failure messages
- Ensures exactly one audit log entry per assignment restore execution
- Enforces correct guard/membership vs capability semantics on affected admin surfaces
- Switches assignment Graph services to depend on GraphClientInterface

Also includes Postgres-only FK defense-in-depth check and a discoverable `composer test:pgsql` runner (scoped to the FK constraint test).

Tests:
- `vendor/bin/sail artisan test --compact` (passed)
- `vendor/bin/sail composer test:pgsql` (passed)

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #113
2026-02-15 14:08:14 +00:00
..
TenantAccessContext.php 066-rbac-ui-enforcement-helper (#81) 2026-01-30 16:58:02 +00:00
UiEnforcement.php Spec 094: Assignment ops observability hardening (#113) 2026-02-15 14:08:14 +00:00
UiTooltips.php feat: RBAC troubleshooting & tenant UI bugfix pack (spec 067) (#84) 2026-01-31 20:09:25 +00:00
WorkspaceAccessContext.php feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00
WorkspaceUiEnforcement.php feat: workspace-first managed tenants + RBAC membership UI fixes (072) (#87) 2026-02-02 23:54:22 +00:00