TenantAtlas/tests/Unit/Findings/FindingExceptionEvidenceReferenceTest.php
ahmido b1e1e06861 feat: implement finding risk acceptance lifecycle (#184)
## Summary
- add a first-class finding exception domain with request, approval, rejection, renewal, and revocation lifecycle support
- add tenant-scoped exception register, finding governance surfaces, and a canonical workspace approval queue in Filament
- add audit, badge, evidence, and review-pack integrations plus focused Pest coverage for workflow, authorization, and governance validity

## Validation
- vendor/bin/sail bin pint --dirty --format agent
- CI=1 vendor/bin/sail artisan test --compact
- manual integrated-browser smoke test for the request-exception happy path, tenant register visibility, and canonical queue visibility

## Notes
- Filament implementation remains on v5 with Livewire v4-compatible surfaces
- canonical queue lives in the admin panel; provider registration stays in bootstrap/providers.php
- finding exceptions stay out of global search in this rollout

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #184
2026-03-20 01:07:55 +00:00

47 lines
1.9 KiB
PHP

<?php
declare(strict_types=1);
use App\Models\Finding;
use App\Models\FindingException;
use App\Models\FindingExceptionEvidenceReference;
use Illuminate\Foundation\Testing\RefreshDatabase;
uses(RefreshDatabase::class);
it('casts evidence reference summary payload and measured timestamp', function (): void {
[$user, $tenant] = createUserWithTenant(role: 'owner');
$finding = Finding::factory()->for($tenant)->create();
$exception = FindingException::query()->create([
'tenant_id' => (int) $tenant->getKey(),
'finding_id' => (int) $finding->getKey(),
'requested_by_user_id' => (int) $user->getKey(),
'owner_user_id' => (int) $user->getKey(),
'status' => FindingException::STATUS_PENDING,
'current_validity_state' => FindingException::VALIDITY_MISSING_SUPPORT,
'request_reason' => 'Temporary exception request',
'requested_at' => now(),
'review_due_at' => now()->addWeek(),
'evidence_summary' => ['reference_count' => 1],
]);
$reference = $exception->evidenceReferences()->create([
'tenant_id' => (int) $tenant->getKey(),
'source_type' => 'evidence_snapshot',
'source_id' => 'snapshot-001',
'source_fingerprint' => 'fp-001',
'label' => 'Snapshot summary',
'summary_payload' => ['summary' => 'Intelligible even if the live evidence disappears'],
'measured_at' => now()->subHour(),
]);
$freshReference = $reference->fresh();
expect($freshReference)->toBeInstanceOf(FindingExceptionEvidenceReference::class)
->and($freshReference?->summary_payload)->toBe(['summary' => 'Intelligible even if the live evidence disappears'])
->and($freshReference?->measured_at)->not->toBeNull()
->and($freshReference?->exception)->toBeInstanceOf(FindingException::class)
->and($freshReference?->tenant)->toBeInstanceOf(\App\Models\Tenant::class);
});