ahmido
be314c577f
## Summary - rebuild the public Tenantial homepage around an evidence-first Microsoft tenant governance narrative - replace the old hero visual with a new static dashboard preview and add dedicated Trust Bar and Feature Pillars sections - update the shared public shell, navigation, footer, dark design tokens, assets, and homepage content to match the new brand direction - align website smoke coverage and Spec 400 artifacts with the rebuilt homepage ## Testing - not run in this pass - updated website smoke specs under apps/website/tests/smoke ## Note - `website-dev` was pushed to `origin` so the requested PR base exists remotely - the remote `website-dev` branch is an ancestor of `origin/dev`, so this PR may also show upstream `dev` history relative to that base Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #387
76 lines
2.7 KiB
PHP
76 lines
2.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Support\Governance\Controls\CanonicalControlCatalog;
|
|
use App\Support\Governance\Controls\CanonicalControlResolutionRequest;
|
|
use App\Support\Governance\Controls\CanonicalControlResolver;
|
|
|
|
it('lists seeded canonical controls in the logical contract shape', function (): void {
|
|
$payload = [
|
|
'controls' => app(CanonicalControlCatalog::class)->listPayload(),
|
|
];
|
|
|
|
expect($payload['controls'])->not->toBeEmpty();
|
|
|
|
foreach ($payload['controls'] as $control) {
|
|
expect($control)->toHaveKeys([
|
|
'control_key',
|
|
'name',
|
|
'domain_key',
|
|
'subdomain_key',
|
|
'control_class',
|
|
'summary',
|
|
'operator_description',
|
|
'detectability_class',
|
|
'evaluation_strategy',
|
|
'evidence_archetypes',
|
|
'artifact_suitability',
|
|
'historical_status',
|
|
])->and($control['artifact_suitability'])->toHaveKeys([
|
|
'baseline',
|
|
'drift',
|
|
'finding',
|
|
'exception',
|
|
'evidence',
|
|
'review',
|
|
'report',
|
|
]);
|
|
}
|
|
});
|
|
|
|
it('returns resolved, unresolved, and ambiguous resolution shapes without guessing', function (): void {
|
|
$resolver = app(CanonicalControlResolver::class);
|
|
|
|
$resolved = $resolver->resolve(new CanonicalControlResolutionRequest(
|
|
provider: 'microsoft',
|
|
consumerContext: 'review',
|
|
subjectFamilyKey: 'entra_admin_roles',
|
|
workload: 'entra',
|
|
signalKey: 'entra_admin_roles.global_admin_assignment',
|
|
))->toArray();
|
|
$unresolved = $resolver->resolve(new CanonicalControlResolutionRequest(
|
|
provider: 'microsoft',
|
|
consumerContext: 'review',
|
|
subjectFamilyKey: 'not_bound',
|
|
))->toArray();
|
|
$ambiguous = $resolver->resolve(new CanonicalControlResolutionRequest(
|
|
provider: 'microsoft',
|
|
consumerContext: 'review',
|
|
subjectFamilyKey: 'conditional_access_policy',
|
|
workload: 'entra',
|
|
))->toArray();
|
|
|
|
expect($resolved)->toHaveKeys(['status', 'control'])
|
|
->and($resolved['status'])->toBe('resolved')
|
|
->and($resolved['control']['control_key'])->toBe('privileged_access_governance')
|
|
->and($unresolved)->toHaveKeys(['status', 'reason_code', 'binding_context'])
|
|
->and($unresolved['reason_code'])->toBe('missing_binding')
|
|
->and($ambiguous)->toHaveKeys(['status', 'reason_code', 'candidate_control_keys', 'binding_context'])
|
|
->and($ambiguous['status'])->toBe('ambiguous')
|
|
->and($ambiguous['candidate_control_keys'])->toEqualCanonicalizing([
|
|
'conditional_access_enforcement',
|
|
'strong_authentication',
|
|
]);
|
|
});
|