ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
codex/322-post-319-validation-note
TenantAtlas/specs/318-admin-surface-scope-shell-context-audit/artifacts/state-captures/direct--onboarding.json
ahmido 1c27af4f5f spec: add admin surface scope shell context audit (#373) 
## Summary
- add Spec 318 audit artifacts for admin surface scope and shell context consistency after Specs 314-317
- document browser-backed findings for workspace hubs, environment-scoped pages, filtered workspace hubs, and mismatch cases
- capture recommended follow-up specs for baseline compare, baseline ownership, alerts/audit filter contracts, classifier regression coverage, and sidebar scope declarations

## Testing
- not run; analysis-only spec artifacts with no runtime or test code changes

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #373
2026-05-16 18:32:11 +00:00

258 lines
23 KiB
JSON
Raw Permalink Blame History

{
"slug": "direct--onboarding",
"origin": "direct_extra",
"expectedClassification": "onboarding-workflow",
"screenshotPath": "/Users/ahmeddarrazi/Documents/projects/wt-plattform/specs/318-admin-surface-scope-shell-context-audit/artifacts/screenshots/direct--onboarding.png",
"statePath": "/Users/ahmeddarrazi/Documents/projects/wt-plattform/specs/318-admin-surface-scope-shell-context-audit/artifacts/state-captures/direct--onboarding.json",
"notes": {
"classComponent": "App\\Filament\\Pages\\Workspaces\\ManagedEnvironmentOnboardingWizard"
},
"capturedAt": "2026-05-16T17:17:54.980Z",
"state": {
"activeSidebarLinks": [],
"breadcrumbs": [],
"chips": [
"Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft Onboarding draft Onboarding readiness Provider c",
"Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft Onboarding draft Onboarding readiness Provider c",
"Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft Onboarding draft Onboarding readiness Provider c",
"Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft Onboarding draft Onboarding readiness Provider c",
"Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft Onboarding draft Onboarding readiness Provider c",
"Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft",
"Managed environment onboarding",
"Managed environment onboarding",
"Back to workspace View environment (Onboarding) Cancel draft",
"Back to workspace View environment (Onboarding) Cancel draft",
"Back to workspace",
"View environment (Onboarding)",
"ManagedEnvironment YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842) Current stage Verify access Started by Ahmed Darrazi Last updated by Ahmed D",
"ManagedEnvironment YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842) Current stage Verify access Started by Ahmed Darrazi Last updated by Ahmed D",
"ManagedEnvironment",
"ManagedEnvironment",
"ManagedEnvironment",
"YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Onboarding readiness Provider consent required Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36",
"Onboarding readiness Provider consent required Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36",
"Onboarding readiness Provider consent required Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36",
"Onboarding readiness Provider consent required Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36",
"Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842) Freshness P",
"Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842) Freshness P",
"Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Identify managed environment Create or resume a managed environment in this workspace. Provider connection Select an existing connection or ",
"Identify managed environment Create or resume a managed environment in this workspace. Provider connection Select an existing connection or ",
"Identify managed environment Create or resume a managed environment in this workspace. Provider connection Select an existing connection or ",
"Identify managed environment Create or resume a managed environment in this workspace. Provider connection Select an existing connection or ",
"Identify managed environment Create or resume a managed environment in this workspace.",
"Identify managed environment Create or resume a managed environment in this workspace.",
"Identify managed environment Create or resume a managed environment in this workspace.",
"Identify managed environment",
"Create or resume a managed environment in this workspace.",
"05 Complete Review configuration and complete onboarding for this environment.",
"05 Complete Review configuration and complete onboarding for this environment.",
"Complete Review configuration and complete onboarding for this environment.",
"Review configuration and complete onboarding for this environment.",
"Managed environment Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain ",
"Managed environment Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain ",
"Managed environment Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain ",
"Managed environment Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain ",
"Managed environment Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain ",
"Managed environment Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain ",
"Managed environment",
"Managed environment",
"Managed environment",
"Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain (optional) Notes (op",
"Entra tenant ID (GUID)* Environment* Select an option Production Staging Development Other Display name* Primary domain (optional) Notes (op",
"Environment* Select an option Production Staging Development Other",
"Environment* Select an option Production Staging Development Other",
"Environment* Select an option Production Staging Development Other",
"Environment*",
"Environment*",
"Environment*",
"Environment*",
"Select an option Production Staging Development Other",
"Select an option Production Staging Development Other",
"Select an option Production Staging Development Other",
"Select an option Production Staging Development Other",
"Connection Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 ",
"Connection Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 ",
"Connection Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 ",
"Connection Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 ",
"Connection Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 ",
"Connection Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 ",
"Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 (36252883-1",
"Mode* Use existing connection Create new connection Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 (36252883-1",
"Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Provider connection* Edit selected connection Select an option YPTW2 — YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Select an option YPTW2 — YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Select an option YPTW2 — YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)",
"Select an option YPTW2 — YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)"
],
"documentTitle": "Managed environment onboarding - TenantPilot",
"headings": [
{
"level": "h1",
"text": "Managed environment onboarding"
},
{
"level": "h2",
"text": "Onboarding draft"
},
{
"level": "h2",
"text": "Onboarding readiness"
},
{
"level": "h2",
"text": "Supporting evidence"
},
{
"level": "h2",
"text": "Managed environment"
},
{
"level": "h2",
"text": "Connection"
},
{
"level": "h2",
"text": "Verification"
},
{
"level": "h2",
"text": "Stored verification details"
},
{
"level": "h2",
"text": "Bootstrap"
},
{
"level": "h2",
"text": "Review & Complete onboarding"
},
{
"level": "h3",
"text": "Onboarding summary"
}
],
"mainLinks": [
{
"href": "http://localhost/admin",
"text": "Back to workspace"
},
{
"href": "http://localhost/admin/workspaces/3/environments/36252883-18f8-44f9-a2a4-0bdaaf810842",
"text": "View environment (Onboarding)"
},
{
"href": "https://login.microsoftonline.com/36252883-18f8-44f9-a2a4-0bdaaf810842/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C3",
"text": "Grant admin consent"
},
{
"href": "http://localhost/admin/workspaces/3/operations/2",
"text": "Open operation"
},
{
"href": "http://localhost/admin/workspaces/3/environments/36252883-18f8-44f9-a2a4-0bdaaf810842/required-permissions",
"text": "View required permissions"
},
{
"href": "http://localhost/admin/workspaces/3/operations/2",
"text": "Open operation"
},
{
"href": "https://login.microsoftonline.com/36252883-18f8-44f9-a2a4-0bdaaf810842/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C3",
"text": "Grant admin consent"
},
{
"href": "https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent",
"text": "Admin consent guide"
}
],
"mainText": "Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft Onboarding draft Onboarding readiness Provider consent required Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842) Freshness Permission check has not run yet. Primary next action Grant admin consent Supporting evidence Open canonical operation detail or secondary permission evidence when deeper diagnostics are needed. Open operation View required permissions Identify managed environment Create or resume a managed environment in this workspace. Provider connection Select an existing connection or create a new one. 03 Verify access Run a queued verification check (Operation). 04 Bootstrap (optional) Optionally start inventory and compliance operations. 05 Complete Review configuration and complete onboarding for this environment. Verification Status: Blocked Start verification Verification report Stored verification details Completed: 2026-05-14 20:21 Open operation Technical details Contextual help Admin consent required The provider connection cannot continue until admin consent is granted. Safe next action Grant admin consent and re-run verification. Grant admin consent for the current provider connection. Re-run verification or reopen support diagnostics after consent completes. Grant admin consent Admin consent guide Blocked 1 total 0 pass 1 fail 0 warn 0 skip 0 running No changes since previous verification Read-only: this view uses stored data and makes no external calls. Issues Passed Blockers Provider connection preflight Provider connection requires admin consent before use. Blocker Critical Fail Acknowledge NEXT STEPS Grant admin consent Open in assist Review platform connection Open in assist Back Next",
"path": "/admin/onboarding/1",
"queryParams": {},
"shellEnvironment": "",
"shellWorkspace": "",
"sidebarLinks": [
{
"ariaCurrent": null,
"className": "fi-btn fi-size-md fi-ac-btn-action",
"href": "http://localhost/admin",
"text": "Back to workspace"
},
{
"ariaCurrent": null,
"className": "fi-btn fi-size-md fi-ac-btn-action",
"href": "http://localhost/admin/workspaces/3/environments/36252883-18f8-44f9-a2a4-0bdaaf810842",
"text": "View environment (Onboarding)"
},
{
"ariaCurrent": null,
"className": "fi-color fi-color-warning fi-bg-color-400 hover:fi-bg-color-300 dark:fi-bg-color-600 dark:hover:fi-bg-color-500 fi-text-color-900 hover:fi-text-color-800 dark:fi-text-color-950 dark:hover:fi-text-color-950 fi-btn fi-size-md fi-ac-btn-action",
"href": "https://login.microsoftonline.com/36252883-18f8-44f9-a2a4-0bdaaf810842/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C3",
"text": "Grant admin consent"
},
{
"ariaCurrent": null,
"className": "fi-btn fi-size-md fi-ac-btn-action",
"href": "http://localhost/admin/workspaces/3/operations/2",
"text": "Open operation"
},
{
"ariaCurrent": null,
"className": "fi-btn fi-size-md fi-ac-btn-action",
"href": "http://localhost/admin/workspaces/3/environments/36252883-18f8-44f9-a2a4-0bdaaf810842/required-permissions",
"text": "View required permissions"
},
{
"ariaCurrent": null,
"className": "fi-color fi-color-primary fi-bg-color-600 hover:fi-bg-color-500 dark:fi-bg-color-600 dark:hover:fi-bg-color-500 fi-text-color-0 hover:fi-text-color-0 dark:fi-text-color-0 dark:hover:fi-text-color-0 fi-btn fi-size-sm",
"href": "http://localhost/admin/workspaces/3/operations/2",
"text": "Open operation"
},
{
"ariaCurrent": null,
"className": "fi-color fi-color-primary fi-bg-color-600 hover:fi-bg-color-500 dark:fi-bg-color-600 dark:hover:fi-bg-color-500 fi-text-color-0 hover:fi-text-color-0 dark:fi-text-color-0 dark:hover:fi-text-color-0 fi-btn fi-size-sm",
"href": "https://login.microsoftonline.com/36252883-18f8-44f9-a2a4-0bdaaf810842/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C3",
"text": "Grant admin consent"
},
{
"ariaCurrent": null,
"className": "fi-color fi-color-primary fi-bg-color-600 hover:fi-bg-color-500 dark:fi-bg-color-600 dark:hover:fi-bg-color-500 fi-text-color-0 hover:fi-text-color-0 dark:fi-text-color-0 dark:hover:fi-text-color-0 fi-btn fi-size-sm",
"href": "https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent",
"text": "Admin consent guide"
}
],
"sidebarText": "",
"statusText": "Managed environment onboarding Back to workspace View environment (Onboarding) Cancel draft Onboarding draft Onboarding readiness Provider consent required Step Verify access Lifecycle Action required Provider connection Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842) Freshness Permission check has not run yet. Primary next action Grant admin consent Supporting evidence Open canonical operation detail or secondary permission evidence when deeper diagnostics are needed. Open operation View required permissions Identify managed environment Create or resume a managed environment in this workspace. Provider connection Select an existing connection or create a new one. 03 Verify access Run a queued verification check (Operation). 04 Bootstrap (optional) Optionally start inventory and compliance operations. 05 Complete Review configuration and complete onboarding for this environment. Verification Status: Blocked Start verification Verification report Stored verification details Completed: 2026-05-14 20:21 Open operation Technical details Contextual help Admin consent required The provider connection cannot continue until admin consent is granted. Safe next action Grant a",
"topNavigationText": "Issues Passed",
"url": "http://localhost/admin/onboarding/1",
"visibleButtons": [
"Cancel draft",
"Identify managed environment Create or resume a managed environment in this workspace.",
"Provider connection Select an existing connection or create a new one.",
"03 Verify access Run a queued verification check (Operation).",
"04 Bootstrap (optional) Optionally start inventory and compliance operations.",
"05 Complete Review configuration and complete onboarding for this environment.",
"Edit selected connection",
"Start verification",
"Technical details",
"Issues",
"Passed",
"Acknowledge",
"Grant admin consent Open in assist",
"Review platform connection Open in assist",
"Start bootstrap",
"Complete onboarding",
"Back",
"Next"
]
},
"snapshot": "- main:\n - heading \"Managed environment onboarding\" [level=1]\n - link \"Back to workspace\":\n - /url: http://localhost/admin\n - link \"View environment (Onboarding)\":\n - /url: http://localhost/admin/workspaces/3/environments/36252883-18f8-44f9-a2a4-0bdaaf810842\n - button \"Cancel draft\"\n - heading \"Onboarding draft\" [level=2]\n - button:\n - heading \"Onboarding readiness\" [level=2]\n - paragraph: Provider consent required\n - generic: Step\n - generic: Verify access\n - generic: Lifecycle\n - generic: Action required\n - generic: Provider connection\n - generic: Consent required - YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)\n - generic: Freshness\n - generic: Permission check has not run yet.\n - generic: Primary next action\n - link \"Grant admin consent\":\n - /url: https://login.microsoftonline.com/36252883-18f8-44f9-a2a4-0bdaaf810842/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C3\n - heading \"Supporting evidence\" [level=2]\n - paragraph: Open canonical operation detail or secondary permission evidence when deeper diagnostics are needed.\n - link \"Open operation\":\n - /url: http://localhost/admin/workspaces/3/operations/2\n - link \"View required permissions\":\n - /url: http://localhost/admin/workspaces/3/environments/36252883-18f8-44f9-a2a4-0bdaaf810842/required-permissions\n - list:\n - button \"Identify managed environment Create or resume a managed environment in this workspace.\":\n - generic: Identify managed environment\n - generic: Create or resume a managed environment in this workspace.\n - button \"Provider connection Select an existing connection or create a new one.\":\n - generic: Provider connection\n - generic: Select an existing connection or create a new one.\n - button \"03 Verify access Run a queued verification check (Operation).\" [disabled]:\n - generic: \"03\"\n - generic: Verify access\n - generic: Run a queued verification check (Operation).\n - button \"04 Bootstrap (optional) Optionally start inventory and compliance operations.\" [disabled]:\n - generic: \"04\"\n - generic: Bootstrap (optional)\n - generic: Optionally start inventory and compliance operations.\n - button \"05 Complete Review configuration and complete onboarding for this environment.\" [disabled]:\n - generic: \"05\"\n - generic: Complete\n - generic: Review configuration and complete onboarding for this environment.\n - option \"Select an option\"\n - option \"Production\"\n - option \"Staging\"\n - option \"Development\" [selected]\n - option \"Other\"\n - option \"Select an option\"\n - option \"YPTW2 — YPTW2 (36252883-18f8-44f9-a2a4-0bdaaf810842)\" [selected]\n - tabpanel:\n - heading \"Verification\" [level=2]\n - generic: \"Status: Blocked\"\n - button \"Start verification\"\n - generic: Verification report\n - heading \"Stored verification details\" [level=2]\n - paragraph: \"Completed: 2026-05-14 20:21\"\n - link \"Open operation\":\n - /url: http://localhost/admin/workspaces/3/operations/2\n - button \"Technical details\"\n - generic: Contextual help\n - generic: Admin consent required\n - generic: The provider connection cannot continue until admin consent is granted.\n - heading \"Safe next action\" [level=4]\n - paragraph: Grant admin consent and re-run verification.\n - list:\n - listitem: Grant admin consent for the current provider connection.\n - listitem: Re-run verification or reopen support diagnostics after consent completes.\n - link \"Grant admin consent\":\n - /url: https://login.microsoftonline.com/36252883-18f8-44f9-a2a4-0bdaaf810842/v2.0/adminconsent?client_id=c9110351-1e46-43fe-865d-8a1ce896cc47&redirect_uri=http%3A%2F%2Flocalhost%2Fadmin%2Fconsent%2Fcallback&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&state=tenantpilot%7C3\n - link \"Admin consent guide\":\n - /url: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent\n - generic: Blocked\n - generic: 1 total\n - generic: 0 pass\n - generic: 1 fail\n - generic: 0 warn\n - generic: 0 skip\n - generic: 0 running\n - generic: No changes since previous verification\n - generic: \"Read-only: this view uses stored data and makes no external calls.\"\n - tablist \"Verification report tabs\":\n - tab \"Issues\":\n - generic: Issues\n - tab \"Passed\":\n - generic: Passed\n - generic: Blockers\n - generic: Provider connection preflight\n - generic: Provider connection requires admin consent before use.\n - generic: Blocker\n - generic: Critical\n - generic: Fail\n - button \"Acknowledge\"\n - generic: Next steps\n - list:\n - button \"Grant admin consent Open in assist\":\n - generic: Grant admin consent\n - generic: Open in assist\n - button \"Review platform connection Open in assist\":\n - generic: Review platform connection\n - generic: Open in assist\n - button \"Back\"\n - button \"Next\"\n- status"
}
Reference in New Issue View Git Blame Copy Permalink