TenantAtlas/specs/318-admin-surface-scope-shell-context-audit/artifacts/state-captures/direct--stored-report-view.json
ahmido 1c27af4f5f spec: add admin surface scope shell context audit (#373)
## Summary
- add Spec 318 audit artifacts for admin surface scope and shell context consistency after Specs 314-317
- document browser-backed findings for workspace hubs, environment-scoped pages, filtered workspace hubs, and mismatch cases
- capture recommended follow-up specs for baseline compare, baseline ownership, alerts/audit filter contracts, classifier regression coverage, and sidebar scope declarations

## Testing
- not run; analysis-only spec artifacts with no runtime or test code changes

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #373
2026-05-16 18:32:11 +00:00

277 lines
22 KiB
JSON

{
"slug": "direct--stored-report-view",
"origin": "direct_extra",
"expectedClassification": "environment-page",
"screenshotPath": "/Users/ahmeddarrazi/Documents/projects/wt-plattform/specs/318-admin-surface-scope-shell-context-audit/artifacts/screenshots/direct--stored-report-view.png",
"statePath": "/Users/ahmeddarrazi/Documents/projects/wt-plattform/specs/318-admin-surface-scope-shell-context-audit/artifacts/state-captures/direct--stored-report-view.json",
"notes": {
"classComponent": "App\\Filament\\Resources\\StoredReportResource\\Pages\\ViewStoredReport"
},
"capturedAt": "2026-05-16T17:17:43.975Z",
"state": {
"activeSidebarLinks": [],
"breadcrumbs": [
"Stored Reports View View Stored Report Open current report",
"Stored Reports View",
"Stored Reports View",
"Stored Reports",
"Stored Reports",
"View",
"View"
],
"chips": [
"wp YPTW2 (DEV) EN TenantPilot Global search 7",
"wp YPTW2 (DEV) EN TenantPilot Global search 7",
"wp YPTW2 (DEV) EN",
"YPTW2 (DEV)",
"YPTW2 (DEV)",
"YPTW2 (DEV)",
"YPTW2 (DEV)",
"Settings Manage workspaces Integrations Settings",
"Manage workspaces Integrations Settings",
"Manage workspaces",
"Manage workspaces",
"Manage workspaces",
"Artifact source Source family Stored Report Source kind Stored Report Source target Managed Environment Control Strong Authentication Detect",
"Artifact source Source family Stored Report Source kind Stored Report Source target Managed Environment Control Strong Authentication Detect",
"Artifact source Source family Stored Report Source kind Stored Report Source target Managed Environment Control Strong Authentication Detect",
"Artifact source Source family Stored Report Source kind Stored Report Source target Managed Environment Control Strong Authentication Detect",
"Source family Stored Report Source kind Stored Report Source target Managed Environment Control Strong Authentication Detector permission_po",
"Source family Stored Report Source kind Stored Report Source target Managed Environment Control Strong Authentication Detector permission_po",
"Source target Managed Environment",
"Source target Managed Environment",
"Source target Managed Environment",
"Managed Environment",
"Managed Environment",
"Managed Environment",
"Managed Environment",
"Copied Copy JSON Show JSON { \"checked_at\": \"2026-05-14T20:42:37+00:00\", \"permissions\": [ { \"key\": \"DeviceManagementConfiguration.ReadWrite.A",
"Copied Copy JSON Show JSON { \"checked_at\": \"2026-05-14T20:42:37+00:00\", \"permissions\": [ { \"key\": \"DeviceManagementConfiguration.ReadWrite.A",
"Copied Copy JSON Show JSON { \"checked_at\": \"2026-05-14T20:42:37+00:00\", \"permissions\": [ { \"key\": \"DeviceManagementConfiguration.ReadWrite.A",
"Copied Copy JSON Show JSON { \"checked_at\": \"2026-05-14T20:42:37+00:00\", \"permissions\": [ { \"key\": \"DeviceManagementConfiguration.ReadWrite.A",
"Copied Copy JSON Show JSON { \"checked_at\": \"2026-05-14T20:42:37+00:00\", \"permissions\": [ { \"key\": \"DeviceManagementConfiguration.ReadWrite.A"
],
"documentTitle": "View Stored Report - TenantPilot",
"headings": [
{
"level": "h1",
"text": "View Stored Report"
},
{
"level": "h2",
"text": "Outcome summary"
},
{
"level": "h2",
"text": "Artifact source"
},
{
"level": "h2",
"text": "Stored report"
},
{
"level": "h2",
"text": "Permission posture summary"
},
{
"level": "h2",
"text": "Raw payload"
}
],
"mainLinks": [
{
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports",
"text": "Stored Reports"
},
{
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports/2",
"text": "Open current report"
}
],
"mainText": "OPERATION UPDATES Recent operation updates that may need review. Acknowledge Provider connection check Blocked by prerequisite Terminal follow-up Completed · 1 day ago Next step: Review the provider connection before retrying. Provider connection check Blocked by prerequisite Terminal follow-up Completed · 1 day ago Next step: Review the provider connection before retrying. Provider connection check Blocked by prerequisite Terminal follow-up Completed · 1 day ago Next step: Review the provider connection before retrying. Stored Reports View View Stored Report Open current report Outcome summary Historical Historical This report remains readable as retained history, but a newer report is the current record. NEXT STEP No action needed ARTIFACT REFERENCE Stored report #1 (Permission Posture report) LIFECYCLE Historical RETENTION Retained RESULT MEANING Result unavailable RESULT TRUST Limited confidence Artifact source Source family Stored Report Source kind Stored Report Source target Managed Environment Control Strong Authentication Detector permission_posture.required_graph_permission Provider Microsoft Stored report Artifact reference Stored report #1 (Permission Posture report) Provider report type Permission posture report Measured at May 14, 2026 20:42:37 Lifecycle Historical Retention Retained Integrity anchor — Previous fingerprint — Permission posture summary Posture score 100 Required permissions 15 Granted permissions 15 Missing permissions 0 Missing or at-risk permission context No missing or at-risk permissions in the stored payload. Raw payload",
"path": "/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports/1",
"queryParams": {},
"shellEnvironment": "YPTW2 (DEV)",
"shellWorkspace": "wp",
"sidebarLinks": [
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin",
"text": "Overview"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory",
"text": "Items"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policies",
"text": "Policies"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policy-versions",
"text": "Policy Versions"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory/inventory-coverage",
"text": "Coverage"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/finding-exceptions/queue",
"text": "Finding exceptions"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/operations",
"text": "Operations"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/alerts",
"text": "Alerts"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/audit-log",
"text": "Audit Log"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/environment-reviews",
"text": "Reviews"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/reviews/workspace",
"text": "Customer reviews"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports",
"text": "Stored reports"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/review-packs",
"text": "Review Packs"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces",
"text": "Manage workspaces"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/provider-connections",
"text": "Integrations"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/settings/workspace",
"text": "Settings"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-schedules",
"text": "Backup Schedules"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-sets",
"text": "Backup Sets"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/restore-runs",
"text": "Restore Runs"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/entra-groups",
"text": "Groups"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/findings",
"text": "Findings"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/baseline-profiles",
"text": "Baselines"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/baseline-snapshots",
"text": "Baseline Snapshots"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/governance/inbox",
"text": "Governance inbox"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/governance/decisions",
"text": "Decision register"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/baseline-compare-landing",
"text": "Baseline Compare"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/evidence",
"text": "Evidence"
},
{
"ariaCurrent": null,
"className": "fi-sidebar-item-btn",
"href": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/finding-exceptions",
"text": "Risk exceptions"
}
],
"sidebarText": "Overview Inventory Items Policies Policy Versions Coverage Monitoring Finding exceptions Operations Alerts Audit Log Reporting Reviews Customer reviews Stored reports Review Packs Settings Manage workspaces Integrations Settings Backups & Restore Backup Schedules Backup Sets Restore Runs Directory Groups Governance Findings Baselines Baseline Snapshots Governance inbox Decision register Baseline Compare Evidence Risk exceptions",
"statusText": "wp YPTW2 (DEV) EN TenantPilot Global search 7 Overview Inventory Items Policies Policy Versions Coverage Monitoring Finding exceptions Operations Alerts Audit Log Reporting Reviews Customer reviews Stored reports Review Packs Settings Manage workspaces Integrations Settings Backups & Restore Backup Schedules Backup Sets Restore Runs Directory Groups Governance Findings Baselines Baseline Snapshots Governance inbox Decision register Baseline Compare Evidence Risk exceptions OPERATION UPDATES Recent operation updates that may need review. Acknowledge Provider connection check Blocked by prerequisite Terminal follow-up Completed · 1 day ago Next step: Review the provider connection before retrying. Provider connection check Blocked by prerequisite Terminal follow-up Completed · 1 day ago Next step: Review the provider connection before retrying. Provider connection check Blocked by prerequisite Terminal follow-up Completed · 1 day ago Next step: Review the provider connection before retrying. Stored Reports View View Stored Report Open current report Outcome summary Historical Historical This report remains readable as retained history, but a newer report is the current record. NEXT S",
"topNavigationText": "wp YPTW2 (DEV) EN TenantPilot Global search 7",
"url": "http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports/1",
"visibleButtons": [
"Acknowledge",
"Copy JSON",
"Show JSON"
]
},
"snapshot": "- navigation:\n - link \"wp\":\n - /url: http://localhost/admin\n - text: wp\n - button \"Environment scope\":\n - generic: YPTW2 (DEV)\n - button \"Language\":\n - generic: EN\n - link \"TenantPilot\":\n - /url: http://localhost/admin\n - generic: TenantPilot\n - generic: Global search\n - searchbox \"Global search\"\n - button \"Notifications\":\n - generic: \"7\"\n - button \"User menu\":\n - img \"Avatar of Ahmed Darrazi\"\n- complementary:\n - navigation:\n - list:\n - list:\n - link \"Overview\":\n - /url: http://localhost/admin\n - generic: Overview\n - generic: Inventory\n - button \"Inventory\" [expanded]:\n - list:\n - link \"Items\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory\n - generic: Items\n - link \"Policies\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policies\n - generic: Policies\n - link \"Policy Versions\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/policy-versions\n - generic: Policy Versions\n - link \"Coverage\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/inventory/inventory-coverage\n - generic: Coverage\n - generic: Monitoring\n - button \"Monitoring\" [expanded]:\n - list:\n - link \"Finding exceptions\":\n - /url: http://localhost/admin/finding-exceptions/queue\n - generic: Finding exceptions\n - link \"Operations\":\n - /url: http://localhost/admin/workspaces/3/operations\n - generic: Operations\n - link \"Alerts\":\n - /url: http://localhost/admin/alerts\n - generic: Alerts\n - link \"Audit Log\":\n - /url: http://localhost/admin/audit-log\n - generic: Audit Log\n - generic: Reporting\n - button \"Reporting\" [expanded]:\n - list:\n - link \"Reviews\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/environment-reviews\n - generic: Reviews\n - link \"Customer reviews\":\n - /url: http://localhost/admin/reviews/workspace\n - generic: Customer reviews\n - link \"Stored reports\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports\n - generic: Stored reports\n - link \"Review Packs\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/review-packs\n - generic: Review Packs\n - generic: Settings\n - button \"Settings\" [expanded]:\n - list:\n - link \"Manage workspaces\":\n - /url: http://localhost/admin/workspaces\n - generic: Manage workspaces\n - link \"Integrations\":\n - /url: http://localhost/admin/provider-connections\n - generic: Integrations\n - link \"Settings\":\n - /url: http://localhost/admin/settings/workspace\n - generic: Settings\n - generic: Backups & Restore\n - button \"Backups & Restore\" [expanded]:\n - list:\n - link \"Backup Schedules\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-schedules\n - generic: Backup Schedules\n - link \"Backup Sets\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/backup-sets\n - generic: Backup Sets\n - link \"Restore Runs\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/restore-runs\n - generic: Restore Runs\n - generic: Directory\n - button \"Directory\" [expanded]:\n - list:\n - link \"Groups\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/entra-groups\n - generic: Groups\n - generic: Governance\n - button \"Governance\" [expanded]:\n - list:\n - link \"Findings\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/findings\n - generic: Findings\n - link \"Baselines\":\n - /url: http://localhost/admin/baseline-profiles\n - generic: Baselines\n - link \"Baseline Snapshots\":\n - /url: http://localhost/admin/baseline-snapshots\n - generic: Baseline Snapshots\n - link \"Governance inbox\":\n - /url: http://localhost/admin/governance/inbox\n - generic: Governance inbox\n - link \"Decision register\":\n - /url: http://localhost/admin/governance/decisions\n - generic: Decision register\n - link \"Baseline Compare\":\n - /url: http://localhost/admin/baseline-compare-landing\n - generic: Baseline Compare\n - link \"Evidence\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/evidence\n - generic: Evidence\n - link \"Risk exceptions\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/finding-exceptions\n - generic: Risk exceptions\n- main:\n - paragraph: Operation updates\n - paragraph: Recent operation updates that may need review.\n - button \"Acknowledge\"\n - heading \"Provider connection check\" [level=4]\n - generic: Blocked by prerequisite\n - generic: Terminal follow-up\n - paragraph: Completed · 1 day ago\n - paragraph: \"Next step: Review the provider connection before retrying.\"\n - heading \"Provider connection check\" [level=4]\n - generic: Blocked by prerequisite\n - generic: Terminal follow-up\n - paragraph: Completed · 1 day ago\n - paragraph: \"Next step: Review the provider connection before retrying.\"\n - heading \"Provider connection check\" [level=4]\n - generic: Blocked by prerequisite\n - generic: Terminal follow-up\n - paragraph: Completed · 1 day ago\n - paragraph: \"Next step: Review the provider connection before retrying.\"\n - navigation:\n - list:\n - link \"Stored Reports\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports\n - generic: View\n - heading \"View Stored Report\" [level=1]\n - link \"Open current report\":\n - /url: http://localhost/admin/workspaces/3/environments/b0091e5d-944f-4a34-bcd9-12cbfb7b75cf/stored-reports/2\n - text: Open current report\n - heading \"Outcome summary\" [level=2]\n - generic: Historical\n - generic: Historical\n - paragraph: This report remains readable as retained history, but a newer report is the current record.\n - term: Next step\n - definition: No action needed\n - term: Artifact reference\n - definition: \"Stored report #1 (Permission Posture report)\"\n - term: Lifecycle\n - definition:\n - generic: Historical\n - term: Retention\n - definition:\n - generic: Retained\n - term: Result meaning\n - definition:\n - generic: Result unavailable\n - term: Result trust\n - definition:\n - generic: Limited confidence\n - heading \"Artifact source\" [level=2]\n - term: Source family\n - definition:\n - generic: Stored Report\n - term: Source kind\n - definition:\n - generic: Stored Report\n - term: Source target\n - definition:\n - generic: Managed Environment\n - term: Control\n - definition:\n - generic: Strong Authentication\n - term: Detector\n - definition:\n - generic: permission_posture.required_graph_permission\n - term: Provider\n - definition:\n - generic: Microsoft\n - heading \"Stored report\" [level=2]\n - term: Artifact reference\n - definition:\n - generic: \"Stored report #1 (Permission Posture report)\"\n - term: Provider report type\n - definition:\n - generic: Permission posture report\n - term: Measured at\n - definition:\n - generic: May 14, 2026 20:42:37\n - term: Lifecycle\n - definition:\n - text: Historical\n - term: Retention\n - definition:\n - text: Retained\n - term: Integrity anchor\n - definition:\n - paragraph: —\n - term: Previous fingerprint\n - definition:\n - paragraph: —\n - heading \"Permission posture summary\" [level=2]\n - term: Posture score\n - definition:\n - generic: \"100\"\n - term: Required permissions\n - definition:\n - generic: \"15\"\n - term: Granted permissions\n - definition:\n - generic: \"15\"\n - term: Missing permissions\n - definition:\n - generic: \"0\"\n - term: Missing or at-risk permission context\n - definition:\n - paragraph: No missing or at-risk permissions in the stored payload.\n - heading \"Raw payload\" [level=2]\n - button:\n- status"
}