44 lines
2.4 KiB
Markdown
44 lines
2.4 KiB
Markdown
# Spec 340 Findings
|
|
|
|
## Severity Definitions
|
|
|
|
- `P1`: Critical scope, authorization, credential-adjacent, or cross-environment ambiguity that blocks new feature work.
|
|
- `P2`: Confirmed scope-contract drift that should be fixed before adjacent work compounds it, but without immediate credential/security risk.
|
|
- `P3`: Bounded polish or clarity issue that does not block go/no-go.
|
|
- `backlog`: Non-blocking productization or broader follow-up outside this verification gate.
|
|
- `blocked`: Missing route, data, auth, or tooling prevented proof and must not be treated as pass.
|
|
- `not-applicable`: Surface is not reachable or not relevant to the active contract in current repo truth.
|
|
|
|
## P1 Findings
|
|
|
|
None confirmed.
|
|
|
|
## P2 Findings
|
|
|
|
None confirmed.
|
|
|
|
## P3 Findings
|
|
|
|
None confirmed.
|
|
|
|
## Backlog Findings
|
|
|
|
### B-340-001 Evidence Overview topbar wording should be reviewed in a future copy/productization pass
|
|
|
|
- **Surface**: Evidence Overview helper copy.
|
|
- **Evidence**: `apps/platform/app/Filament/Pages/Monitoring/EvidenceOverview.php` contains the helper text `Use the Environment scope control in the top bar to choose an authorized environment.`
|
|
- **Classification**: backlog, not P1/P2.
|
|
- **Reason**: Browser evidence confirms clean Workspace Hubs do not silently consume remembered environment state and filtered hubs use explicit `environment_id`; this wording does not itself apply a hidden filter. It can still be reviewed later because it may blur the distinction between topbar environment context and local hub filtering.
|
|
- **Smallest next action**: handle in a future Evidence Overview copy/productization spec if product review wants stricter local-filter language.
|
|
- **Why not fixed here**: Spec 340 is verification-only with `No UI surface impact`; changing runtime UI copy would exceed the no-runtime-change posture without P1/P2 browser drift.
|
|
|
|
## Blocked Checks
|
|
|
|
None currently blocked. The implementation uses the existing Spec 322 browser harness to create deterministic workspace, environment, provider connection, evidence, alert, audit, review, decision, and operation records.
|
|
|
|
## Notes
|
|
|
|
- No screenshots containing credential-adjacent or sensitive payload data were captured.
|
|
- Destructive or external-provider actions were not executed.
|
|
- Search for topbar/local-filter copy found no instruction that the topbar acts as a local hub filter; `B-340-001` is a non-blocking wording follow-up only.
|