ahmido
69d4ecbbd2
Implements the bounded Spec 421 Entra comparable/renderable pack on the existing Coverage v2 operator surface. - Adds typed Conditional Access normalization, comparison, and render summaries - Keeps Security Defaults and other optional Entra types deferred until evidence-backed - Preserves the existing Coverage v2 surface with claim-guard and redaction hardening - Includes focused unit, feature, and browser coverage already recorded in the implementation report Validation is documented in `specs/421-entra-core-comparable-renderable-pack/implementation-report.md`. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #488
26 lines
986 B
PHP
26 lines
986 B
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Services\TenantConfiguration\ClaimGuard;
|
|
use App\Support\TenantConfiguration\ClaimState;
|
|
|
|
it('Spec421 allows scoped internal Entra comparable and renderable wording only as internal operator truth', function (string $claim): void {
|
|
expect(app(ClaimGuard::class)->evaluateStatement($claim, internalOperatorOnly: true))
|
|
->toBe(ClaimState::InternalOnly);
|
|
})->with([
|
|
'Selected Entra resources are comparable for internal operator review',
|
|
'Selected Entra resources are renderable for internal review',
|
|
]);
|
|
|
|
it('Spec421 blocks unsafe Entra and M365 overclaims', function (string $claim): void {
|
|
expect(app(ClaimGuard::class)->evaluateStatement($claim, internalOperatorOnly: true))
|
|
->toBe(ClaimState::ClaimBlocked);
|
|
})->with([
|
|
'Entra certified coverage',
|
|
'Entra restore-ready coverage',
|
|
'All Entra resources are supported',
|
|
'100 percent Entra coverage',
|
|
'Microsoft 365 customer-ready evidence',
|
|
]);
|