TenantAtlas/app/Filament
ahmido 5ec62cd117 feat: harden livewire trusted state boundaries (#182)
## Summary
- add the shared trusted-state model and resolver helpers for first-slice Livewire and Filament surfaces
- harden managed tenant onboarding, tenant required permissions, and system runbooks against forged or stale public state
- add focused Pest guard and regression coverage plus the complete spec 152 artifact set

## Validation
- `vendor/bin/sail artisan test --compact`
- manual smoke validated on `/admin/onboarding/{onboardingDraft}`
- manual smoke validated on `/admin/tenants/{tenant}/required-permissions`
- manual smoke validated on `/system/ops/runbooks`

## Notes
- Livewire v4.0+ / Filament v5 stack unchanged
- no new panels, routes, assets, or global-search changes
- provider registration remains in `bootstrap/providers.php`

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #182
2026-03-18 23:01:14 +00:00
..
Clusters feat: complete admin canonical tenant rollout (#165) 2026-03-13 08:09:20 +00:00
Concerns feat: harden livewire trusted state boundaries (#182) 2026-03-18 23:01:14 +00:00
Pages feat: harden livewire trusted state boundaries (#182) 2026-03-18 23:01:14 +00:00
Resources feat: harden findings workflow and audit backstop (#181) 2026-03-18 12:57:23 +00:00
Support Spec 120: harden secret redaction integrity (#146) 2026-03-07 16:43:01 +00:00
System feat: harden livewire trusted state boundaries (#182) 2026-03-18 23:01:14 +00:00
Widgets feat: implement spec 147 tenant context enforcement (#176) 2026-03-16 22:52:58 +00:00