ahmido 22214f22d6 feat(ui): implement customer auditor surface safety pass (#443 )

Applied customer/auditor safety layout changes to CustomerReviewWorkspace, EnvironmentReviewResource, EvidenceSnapshotResource, ReviewPackResource, and StoredReportResource as per Spec 372.

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #443

2026-06-12 15:51:30 +00:00

1.5 KiB

Raw Blame History

UI-048 Stored Report Detail

Field	Value
Route	`/admin/workspaces/{workspace}/environments/{environment}/stored-reports/{record}`
Source	`StoredReportResource::view`
Area / scope	Evidence / audit
Archetype	Evidence / Audit
Design depth	Strategic Surface
Repo truth	browser-verified in Spec 372
Screenshot	`specs/372-customer-auditor-surface-safety-pass/artifacts/screenshots/004-stored-report-view-after.png`
Browser status	Reached through Spec 372 smoke-login fixture.

First Five Seconds

The page should answer what report this is, which environment it belongs to, when it was measured, and which summary matters before exposing source descriptors or raw payload.

Productization Review

Report-first: Report scope and readiness now follows the outcome summary.
Evidence-first: permission posture and Entra admin role summaries appear before technical report metadata.
Customer/auditor safety: artifact reference, source family/kind/target, control/detector/provider keys, integrity anchors, and raw payload are collapsed/demoted.
Diagnostics: raw payload remains available but not default framing.

Dangerous Actions

No destructive action is expected on this detail page. Existing current-report navigation remains read-only and capability-aware.

Spec 372 Follow-up

Stored Report is no longer unresolved for this fixture.
Browser smoke verified summary before technical details/raw payload and no JavaScript errors or console logs.

1.5 KiB Raw Blame History