c125fd48fd
Some checks failed
PR Fast Feedback / fast-feedback (pull_request) Failing after 3m58s
Applied diagnostic surface contract rules to Audit Log inspect modal and Support Diagnostics action context, consolidating raw diagnostic data into safe modals according to Spec 374.
980 lines
50 KiB
PHP
980 lines
50 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Support\Ui\ActionSurface;
|
|
|
|
use App\Filament\Pages\BaselineCompareLanding;
|
|
use App\Filament\Pages\BaselineCompareMatrix;
|
|
use App\Filament\Pages\BreakGlassRecovery;
|
|
use App\Filament\Pages\ChooseEnvironment;
|
|
use App\Filament\Pages\ChooseWorkspace;
|
|
use App\Filament\Pages\EnvironmentDashboard;
|
|
use App\Filament\Pages\EnvironmentDiagnostics;
|
|
use App\Filament\Pages\Monitoring\Alerts;
|
|
use App\Filament\Pages\Monitoring\AuditLog;
|
|
use App\Filament\Pages\Monitoring\EvidenceOverview;
|
|
use App\Filament\Pages\Monitoring\FindingExceptionsQueue;
|
|
use App\Filament\Pages\Monitoring\Operations;
|
|
use App\Filament\Pages\Operations\TenantlessOperationRunViewer;
|
|
use App\Filament\Pages\Reviews\ReviewRegister;
|
|
use App\Filament\Pages\Tenancy\RegisterTenant;
|
|
use App\Filament\Pages\Workspaces\ManagedEnvironmentOnboardingWizard;
|
|
use App\Filament\Pages\Workspaces\ManagedEnvironmentsLanding;
|
|
use App\Filament\Resources\AlertDeliveryResource\Pages\ListAlertDeliveries;
|
|
use App\Filament\Resources\AlertDestinationResource\Pages\ViewAlertDestination;
|
|
use App\Filament\Resources\BackupSetResource\Pages\ViewBackupSet;
|
|
use App\Filament\Resources\BaselineProfileResource\Pages\ViewBaselineProfile;
|
|
use App\Filament\Resources\BaselineSnapshotResource\Pages\ViewBaselineSnapshot;
|
|
use App\Filament\Resources\EnvironmentReviewResource\Pages\ViewEnvironmentReview;
|
|
use App\Filament\Resources\EvidenceSnapshotResource\Pages\ViewEvidenceSnapshot;
|
|
use App\Filament\Resources\FindingExceptionResource\Pages\ViewFindingException;
|
|
use App\Filament\Resources\FindingResource\Pages\ViewFinding;
|
|
use App\Filament\Resources\ManagedEnvironmentResource\Pages\EditManagedEnvironment;
|
|
use App\Filament\Resources\ManagedEnvironmentResource\Pages\ViewManagedEnvironment;
|
|
use App\Filament\Resources\PolicyVersionResource\Pages\ViewPolicyVersion;
|
|
use App\Filament\Resources\ProviderConnectionResource\Pages\ViewProviderConnection;
|
|
use App\Filament\Resources\ReviewPackResource\Pages\ViewReviewPack;
|
|
use App\Filament\Resources\Workspaces\Pages\ViewWorkspace;
|
|
use App\Filament\System\Pages\Dashboard as SystemDashboard;
|
|
use App\Filament\System\Pages\Directory\ViewTenant as SystemDirectoryViewTenant;
|
|
use App\Filament\System\Pages\Directory\ViewWorkspace as SystemDirectoryViewWorkspace;
|
|
use App\Filament\System\Pages\Ops\Controls;
|
|
use App\Filament\System\Pages\Ops\Runbooks;
|
|
use App\Filament\System\Pages\Ops\ViewRun;
|
|
use App\Filament\System\Pages\RepairWorkspaceOwners;
|
|
use App\Support\WorkspaceIsolation\TenantOwnedModelFamilies;
|
|
|
|
final class ActionSurfaceExemptions
|
|
{
|
|
/**
|
|
* @param array<string, string> $componentReasons
|
|
*/
|
|
public function __construct(
|
|
private readonly array $componentReasons,
|
|
) {}
|
|
|
|
public static function baseline(): self
|
|
{
|
|
return new self(array_merge([
|
|
// Baseline allowlist for legacy surfaces. Keep shrinking this list.
|
|
// Declared system table pages are discovered directly; deferred system tooling stays out of scope by not opting in.
|
|
'App\\Filament\\Pages\\Auth\\Login' => 'Auth entry page is out-of-scope for action-surface retrofits in spec 082.',
|
|
'App\\Filament\\Pages\\ChooseEnvironment' => 'ManagedEnvironment chooser has no contract-style table action surface.',
|
|
'App\\Filament\\Pages\\ChooseWorkspace' => 'Workspace chooser has no contract-style table action surface.',
|
|
'App\\Filament\\Pages\\Tenancy\\RegisterTenant' => 'ManagedEnvironment onboarding route is covered by onboarding/RBAC specs.',
|
|
'App\\Filament\\Pages\\EnvironmentDashboard' => 'Dashboard retrofit deferred; widget and summary surfaces are excluded from this contract.',
|
|
'App\\Filament\\Pages\\Workspaces\\ManagedEnvironmentOnboardingWizard' => 'Onboarding wizard has dedicated conformance tests in spec 172 (OnboardingVerificationTest, OnboardingVerificationClustersTest, OnboardingVerificationV1_5UxTest) and remains exempt from blanket discovery.',
|
|
'App\\Filament\\Pages\\Workspaces\\ManagedEnvironmentsLanding' => 'Managed-tenant landing retrofit deferred to workspace feature track.',
|
|
], TenantOwnedModelFamilies::actionSurfaceBaselineExemptions()));
|
|
}
|
|
|
|
/**
|
|
* @return array<string, string>
|
|
*/
|
|
public function all(): array
|
|
{
|
|
return $this->componentReasons;
|
|
}
|
|
|
|
public function reasonForClass(string $className): ?string
|
|
{
|
|
return $this->componentReasons[$className] ?? null;
|
|
}
|
|
|
|
public function hasClass(string $className): bool
|
|
{
|
|
return array_key_exists($className, $this->componentReasons);
|
|
}
|
|
|
|
/**
|
|
* @return array<string, array{
|
|
* surfaceKey: string,
|
|
* classification: string,
|
|
* canonicalNoun: string,
|
|
* panelScope: string,
|
|
* ownerScope: string,
|
|
* routeKind: string,
|
|
* requiresHeaderRemediation: bool,
|
|
* exceptionReason: ?string,
|
|
* maxVisiblePrimaryActions: int,
|
|
* allowsNoPrimaryAction: bool,
|
|
* requiresGroupedSecondaryActions: bool,
|
|
* requiresDangerSeparation: bool,
|
|
* allowsPrimaryNavigation: bool,
|
|
* browserSmokeRequired: bool
|
|
* }>
|
|
*/
|
|
public static function spec192RecordPageInventory(): array
|
|
{
|
|
return [
|
|
ViewBaselineProfile::class => [
|
|
'surfaceKey' => 'baseline_profile_view',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'Baseline profile',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => true,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => false,
|
|
'requiresGroupedSecondaryActions' => true,
|
|
'requiresDangerSeparation' => false,
|
|
'allowsPrimaryNavigation' => false,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewEvidenceSnapshot::class => [
|
|
'surfaceKey' => 'evidence_snapshot_view',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'Evidence snapshot',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => true,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => false,
|
|
'requiresGroupedSecondaryActions' => false,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => false,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewFindingException::class => [
|
|
'surfaceKey' => 'finding_exception_view',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'Finding exception',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => true,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => false,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => false,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewEnvironmentReview::class => [
|
|
'surfaceKey' => 'environment_review_view',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'ManagedEnvironment review',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => true,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => false,
|
|
'requiresGroupedSecondaryActions' => true,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => false,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
EditManagedEnvironment::class => [
|
|
'surfaceKey' => 'tenant_edit',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'ManagedEnvironment',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'edit',
|
|
'requiresHeaderRemediation' => true,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => true,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => false,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewManagedEnvironment::class => [
|
|
'surfaceKey' => 'tenant_view',
|
|
'classification' => 'workflow_heavy_special_type',
|
|
'canonicalNoun' => 'ManagedEnvironment',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => 'ManagedEnvironment detail remains a workflow-heavy hub for external links, verification/setup, and lifecycle operations. It may show one dominant next step, but it must never silently fall back to a flat multi-button strip.',
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => true,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => false,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewProviderConnection::class => [
|
|
'surfaceKey' => 'provider_connection_view',
|
|
'classification' => 'minor_alignment_only',
|
|
'canonicalNoun' => 'Provider connection',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => true,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => false,
|
|
],
|
|
ViewFinding::class => [
|
|
'surfaceKey' => 'finding_view',
|
|
'classification' => 'minor_alignment_only',
|
|
'canonicalNoun' => 'Finding',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => true,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => false,
|
|
],
|
|
ViewReviewPack::class => [
|
|
'surfaceKey' => 'review_pack_view',
|
|
'classification' => 'compliant_reference',
|
|
'canonicalNoun' => 'Review pack',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => false,
|
|
'requiresDangerSeparation' => false,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewAlertDestination::class => [
|
|
'surfaceKey' => 'alert_destination_view',
|
|
'classification' => 'compliant_reference',
|
|
'canonicalNoun' => 'Alert destination',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => false,
|
|
'requiresDangerSeparation' => false,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewPolicyVersion::class => [
|
|
'surfaceKey' => 'policy_version_view',
|
|
'classification' => 'compliant_reference',
|
|
'canonicalNoun' => 'Policy version',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => false,
|
|
'requiresDangerSeparation' => false,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewWorkspace::class => [
|
|
'surfaceKey' => 'workspace_view',
|
|
'classification' => 'compliant_reference',
|
|
'canonicalNoun' => 'Workspace',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => false,
|
|
'requiresDangerSeparation' => false,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewBaselineSnapshot::class => [
|
|
'surfaceKey' => 'baseline_snapshot_view',
|
|
'classification' => 'compliant_reference',
|
|
'canonicalNoun' => 'Baseline snapshot',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => false,
|
|
'requiresDangerSeparation' => false,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ViewBackupSet::class => [
|
|
'surfaceKey' => 'backup_set_view',
|
|
'classification' => 'compliant_reference',
|
|
'canonicalNoun' => 'Backup set',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'routeKind' => 'view',
|
|
'requiresHeaderRemediation' => false,
|
|
'exceptionReason' => null,
|
|
'maxVisiblePrimaryActions' => 1,
|
|
'allowsNoPrimaryAction' => true,
|
|
'requiresGroupedSecondaryActions' => true,
|
|
'requiresDangerSeparation' => true,
|
|
'allowsPrimaryNavigation' => true,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @return array<string, array{
|
|
* surfaceKey: string,
|
|
* classification: string,
|
|
* canonicalNoun: string,
|
|
* panelScope: string,
|
|
* ownerScope: string,
|
|
* surfaceKind: string,
|
|
* primaryInspectModel: string,
|
|
* sharedPattern: string,
|
|
* requiresHeaderRemediation: bool,
|
|
* requiresExplicitDeclaration: bool,
|
|
* exceptionReason: ?string,
|
|
* browserSmokeRequired: bool
|
|
* }>
|
|
*/
|
|
public static function spec193MonitoringSurfaceInventory(): array
|
|
{
|
|
return [
|
|
FindingExceptionsQueue::class => [
|
|
'surfaceKey' => 'finding_exceptions_queue',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'Finding exceptions',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-visible-tenant-owned',
|
|
'surfaceKind' => 'queue_workbench',
|
|
'primaryInspectModel' => 'explicit_inspect_action',
|
|
'sharedPattern' => 'operate_hub_shell',
|
|
'requiresHeaderRemediation' => true,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
TenantlessOperationRunViewer::class => [
|
|
'surfaceKey' => 'tenantless_operation_run_viewer',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'Operation run',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'surfaceKind' => 'monitoring_detail',
|
|
'primaryInspectModel' => 'singleton_detail_surface',
|
|
'sharedPattern' => 'operate_hub_shell',
|
|
'requiresHeaderRemediation' => true,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
Operations::class => [
|
|
'surfaceKey' => 'operations',
|
|
'classification' => 'remediation_required',
|
|
'canonicalNoun' => 'Operations',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'surfaceKind' => 'monitoring_landing',
|
|
'primaryInspectModel' => 'clickable_row',
|
|
'sharedPattern' => 'operate_hub_shell',
|
|
'requiresHeaderRemediation' => true,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
Alerts::class => [
|
|
'surfaceKey' => 'alerts',
|
|
'classification' => 'minor_alignment_only',
|
|
'canonicalNoun' => 'Alerts',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'surfaceKind' => 'monitoring_landing',
|
|
'primaryInspectModel' => 'page_level_overview',
|
|
'sharedPattern' => 'cluster_entry',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => false,
|
|
],
|
|
AuditLog::class => [
|
|
'surfaceKey' => 'audit_log',
|
|
'classification' => 'minor_alignment_only',
|
|
'canonicalNoun' => 'Audit log',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-visible-tenant-owned',
|
|
'surfaceKind' => 'read_only_report',
|
|
'primaryInspectModel' => 'explicit_inspect_action',
|
|
'sharedPattern' => 'operate_hub_shell',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => false,
|
|
],
|
|
ListAlertDeliveries::class => [
|
|
'surfaceKey' => 'alert_deliveries',
|
|
'classification' => 'minor_alignment_only',
|
|
'canonicalNoun' => 'Alert deliveries',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-owned',
|
|
'surfaceKind' => 'read_only_report',
|
|
'primaryInspectModel' => 'clickable_row',
|
|
'sharedPattern' => 'operate_hub_shell',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => false,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => false,
|
|
],
|
|
EvidenceOverview::class => [
|
|
'surfaceKey' => 'evidence_overview',
|
|
'classification' => 'compliant_no_op',
|
|
'canonicalNoun' => 'Evidence overview',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-visible-tenant-owned',
|
|
'surfaceKind' => 'read_only_report',
|
|
'primaryInspectModel' => 'clickable_row',
|
|
'sharedPattern' => 'none',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
BaselineCompareLanding::class => [
|
|
'surfaceKey' => 'baseline_compare_landing',
|
|
'classification' => 'compliant_no_op',
|
|
'canonicalNoun' => 'Baseline compare',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'surfaceKind' => 'monitoring_landing',
|
|
'primaryInspectModel' => 'page_level_overview',
|
|
'sharedPattern' => 'none',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
BaselineCompareMatrix::class => [
|
|
'surfaceKey' => 'baseline_compare_matrix',
|
|
'classification' => 'compliant_no_op',
|
|
'canonicalNoun' => 'Baseline compare matrix',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'surfaceKind' => 'read_only_report',
|
|
'primaryInspectModel' => 'matrix_itself',
|
|
'sharedPattern' => 'none',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
ReviewRegister::class => [
|
|
'surfaceKey' => 'review_register',
|
|
'classification' => 'compliant_no_op',
|
|
'canonicalNoun' => 'Review register',
|
|
'panelScope' => 'admin',
|
|
'ownerScope' => 'workspace-visible-tenant-owned',
|
|
'surfaceKind' => 'read_only_report',
|
|
'primaryInspectModel' => 'clickable_row',
|
|
'sharedPattern' => 'none',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => null,
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
EnvironmentDiagnostics::class => [
|
|
'surfaceKey' => 'tenant_diagnostics',
|
|
'classification' => 'special_type_acceptable',
|
|
'canonicalNoun' => 'Repair diagnostics',
|
|
'panelScope' => 'tenant',
|
|
'ownerScope' => 'tenant-owned',
|
|
'surfaceKind' => 'diagnostic_exception',
|
|
'primaryInspectModel' => 'singleton_detail_surface',
|
|
'sharedPattern' => 'none',
|
|
'requiresHeaderRemediation' => false,
|
|
'requiresExplicitDeclaration' => true,
|
|
'exceptionReason' => 'Repair diagnostics is the focused membership/access repair surface for the active tenant and may expose repair actions only when a real defect exists.',
|
|
'browserSmokeRequired' => true,
|
|
],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @return array{
|
|
* surfaceKey: string,
|
|
* classification: string,
|
|
* canonicalNoun: string,
|
|
* panelScope: string,
|
|
* ownerScope: string,
|
|
* routeKind: string,
|
|
* requiresHeaderRemediation: bool,
|
|
* exceptionReason: ?string,
|
|
* maxVisiblePrimaryActions: int,
|
|
* allowsNoPrimaryAction: bool,
|
|
* requiresGroupedSecondaryActions: bool,
|
|
* requiresDangerSeparation: bool,
|
|
* allowsPrimaryNavigation: bool,
|
|
* browserSmokeRequired: bool
|
|
* }|null
|
|
*/
|
|
public static function spec192RecordPageSurface(string $className): ?array
|
|
{
|
|
return self::spec192RecordPageInventory()[$className] ?? null;
|
|
}
|
|
|
|
/**
|
|
* @return array{
|
|
* surfaceKey: string,
|
|
* classification: string,
|
|
* canonicalNoun: string,
|
|
* panelScope: string,
|
|
* ownerScope: string,
|
|
* surfaceKind: string,
|
|
* primaryInspectModel: string,
|
|
* sharedPattern: string,
|
|
* requiresHeaderRemediation: bool,
|
|
* requiresExplicitDeclaration: bool,
|
|
* exceptionReason: ?string,
|
|
* browserSmokeRequired: bool
|
|
* }|null
|
|
*/
|
|
public static function spec193MonitoringSurface(string $className): ?array
|
|
{
|
|
return self::spec193MonitoringSurfaceInventory()[$className] ?? null;
|
|
}
|
|
|
|
/**
|
|
* @return array<string, array{
|
|
* surfaceKey: string,
|
|
* surfaceName: string,
|
|
* pageClass: string,
|
|
* panelPlane: string,
|
|
* surfaceKind: string,
|
|
* discoveryState: string,
|
|
* closureDecision: string,
|
|
* reasonCategory: ?string,
|
|
* explicitReason: string,
|
|
* evidence: array<int, array{
|
|
* kind: string,
|
|
* reference: string,
|
|
* proves: string
|
|
* }>,
|
|
* followUpAction: string,
|
|
* mustRemainBaselineExempt: bool,
|
|
* mustNotRemainBaselineExempt: bool
|
|
* }>
|
|
*/
|
|
public static function spec195ResidualSurfaceInventory(): array
|
|
{
|
|
return [
|
|
SystemDashboard::class => [
|
|
'surfaceKey' => 'system_dashboard',
|
|
'surfaceName' => 'System Console Dashboard',
|
|
'pageClass' => SystemDashboard::class,
|
|
'panelPlane' => 'system',
|
|
'surfaceKind' => 'dashboard_shell',
|
|
'discoveryState' => 'outside_primary_discovery',
|
|
'closureDecision' => 'separately_governed',
|
|
'reasonCategory' => 'workflow_specific_governance',
|
|
'explicitReason' => 'The system dashboard keeps its console-window and break-glass controls under dedicated system and recovery tests instead of the generic declaration-backed contract.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/System/Spec114/ControlTowerDashboardTest.php',
|
|
'proves' => 'The control-tower shell keeps its window action and dashboard rendering behavior under focused system coverage.',
|
|
],
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Auth/BreakGlassModeTest.php',
|
|
'proves' => 'Break-glass entry and exit remain confirmed, audited dashboard actions rather than silent utility links.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_guard_only',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
ViewRun::class => [
|
|
'surfaceKey' => 'system_ops_view_run',
|
|
'surfaceName' => 'System Ops View Run',
|
|
'pageClass' => ViewRun::class,
|
|
'panelPlane' => 'system',
|
|
'surfaceKind' => 'system_detail',
|
|
'discoveryState' => 'outside_primary_discovery',
|
|
'closureDecision' => 'separately_governed',
|
|
'reasonCategory' => 'system_triage_surface',
|
|
'explicitReason' => 'Run triage remains a dedicated decision surface with confirmed retry, cancel, and investigate behavior instead of fitting the generic declaration-backed list/detail shape.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/System/Spec114/OpsTriageActionsTest.php',
|
|
'proves' => 'The view-run surface keeps explicit navigation, triage actions, and capability-sensitive visibility.',
|
|
],
|
|
[
|
|
'kind' => 'guard_test',
|
|
'reference' => 'tests/Feature/Guards/Spec194GovernanceActionSemanticsGuardTest.php',
|
|
'proves' => 'The retry, cancel, and investigate actions remain part of the governed system action semantics inventory.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_guard_only',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
Runbooks::class => [
|
|
'surfaceKey' => 'system_ops_runbooks',
|
|
'surfaceName' => 'System Ops Runbooks',
|
|
'pageClass' => Runbooks::class,
|
|
'panelPlane' => 'system',
|
|
'surfaceKind' => 'system_utility',
|
|
'discoveryState' => 'outside_primary_discovery',
|
|
'closureDecision' => 'separately_governed',
|
|
'reasonCategory' => 'workflow_specific_governance',
|
|
'explicitReason' => 'Runbooks remains a system utility shell outside the declaration-backed record or table surface; it currently exposes no supported launch action after lifecycle-backfill removal.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/System/OpsRunbooks/RemoveFindingsLifecycleBackfillRunbookSurfaceTest.php',
|
|
'proves' => 'The runbooks shell stays accessible to authorized platform operators while exposing no findings lifecycle backfill launch action.',
|
|
],
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/System/Spec113/AuthorizationSemanticsTest.php',
|
|
'proves' => 'The system plane still returns 403 when runbook-view capabilities are missing.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_guard_only',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
Controls::class => [
|
|
'surfaceKey' => 'system_ops_controls',
|
|
'surfaceName' => 'System Ops Controls',
|
|
'pageClass' => Controls::class,
|
|
'panelPlane' => 'system',
|
|
'surfaceKind' => 'system_utility',
|
|
'discoveryState' => 'outside_primary_discovery',
|
|
'closureDecision' => 'separately_governed',
|
|
'reasonCategory' => 'workflow_specific_governance',
|
|
'explicitReason' => 'Operational controls is a dedicated system control workbench with confirmation-backed pause, resume, and history actions plus restore-gate coupling, so it remains governed by focused workflow tests instead of the generic declaration-backed contract.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/System/OpsControls/OperationalControlManagementTest.php',
|
|
'proves' => 'The controls page keeps capability-gated operational-control actions, confirmation semantics, scope previews, and audited pause or resume behavior under dedicated coverage.',
|
|
],
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Restore/OperationalControlRestoreExecutionGateTest.php',
|
|
'proves' => 'Restore execution stays coupled to the shared operational-control workflow, including blocked execution and non-retroactive pause behavior after acceptance.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_guard_only',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
RepairWorkspaceOwners::class => [
|
|
'surfaceKey' => 'repair_workspace_owners',
|
|
'surfaceName' => 'Repair Workspace Owners',
|
|
'pageClass' => RepairWorkspaceOwners::class,
|
|
'panelPlane' => 'system',
|
|
'surfaceKind' => 'system_utility',
|
|
'discoveryState' => 'outside_primary_discovery',
|
|
'closureDecision' => 'separately_governed',
|
|
'reasonCategory' => 'break_glass_repair_utility',
|
|
'explicitReason' => 'Emergency owner repair stays under dedicated break-glass and table guard coverage instead of the generic declaration-backed system-table contract.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Auth/BreakGlassWorkspaceOwnerRecoveryTest.php',
|
|
'proves' => 'The repair utility requires break-glass context and records audited recovery behavior.',
|
|
],
|
|
[
|
|
'kind' => 'guard_test',
|
|
'reference' => 'tests/Feature/Guards/FilamentTableStandardsGuardTest.php',
|
|
'proves' => 'The table shell keeps explicit empty-state and table-standard coverage even while remaining outside the primary declaration path.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_guard_only',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
SystemDirectoryViewTenant::class => [
|
|
'surfaceKey' => 'system_directory_view_tenant',
|
|
'surfaceName' => 'System Directory View ManagedEnvironment',
|
|
'pageClass' => SystemDirectoryViewTenant::class,
|
|
'panelPlane' => 'system',
|
|
'surfaceKind' => 'read_mostly_context',
|
|
'discoveryState' => 'outside_primary_discovery',
|
|
'closureDecision' => 'harmless_special_case',
|
|
'reasonCategory' => 'read_mostly_context_detail',
|
|
'explicitReason' => 'The tenant directory detail page is a read-mostly drilldown that links outward to canonical admin and run surfaces without introducing its own mutating controls.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/System/Spec195/SystemDirectoryResidualSurfaceTest.php',
|
|
'proves' => 'The detail page renders contextual connectivity and recent-run information while staying read-mostly and capability-gated.',
|
|
],
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/System/Spec114/DirectoryTenantsTest.php',
|
|
'proves' => 'Directory-view capability remains required before the detail route becomes visible.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_focused_test',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
SystemDirectoryViewWorkspace::class => [
|
|
'surfaceKey' => 'system_directory_view_workspace',
|
|
'surfaceName' => 'System Directory View Workspace',
|
|
'pageClass' => SystemDirectoryViewWorkspace::class,
|
|
'panelPlane' => 'system',
|
|
'surfaceKind' => 'read_mostly_context',
|
|
'discoveryState' => 'outside_primary_discovery',
|
|
'closureDecision' => 'harmless_special_case',
|
|
'reasonCategory' => 'read_mostly_context_detail',
|
|
'explicitReason' => 'The workspace directory detail page is a read-mostly drilldown with one bounded, capability-gated commercial lifecycle mutation added by spec 251; it is still not a declaration-backed mutable system workbench.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/System/Spec195/SystemDirectoryResidualSurfaceTest.php',
|
|
'proves' => 'The workspace detail page stays capability-gated and renders contextual tenant and run links while remaining outside the primary declaration-backed table contract.',
|
|
],
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/System/ViewWorkspaceEntitlementsTest.php',
|
|
'proves' => 'The commercial lifecycle mutation is separately capability-gated, confirmation-protected, rationale-required, and audited.',
|
|
],
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/System/Spec114/DirectoryWorkspacesTest.php',
|
|
'proves' => 'Directory-view capability remains required before workspace directory routes become available.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_focused_test',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
BreakGlassRecovery::class => [
|
|
'surfaceKey' => 'break_glass_recovery',
|
|
'surfaceName' => 'Break Glass Recovery',
|
|
'pageClass' => BreakGlassRecovery::class,
|
|
'panelPlane' => 'admin',
|
|
'surfaceKind' => 'recovery_flow',
|
|
'discoveryState' => 'primary_discovered',
|
|
'closureDecision' => 'retired_no_longer_relevant',
|
|
'reasonCategory' => 'disabled_or_actionless_surface',
|
|
'explicitReason' => 'The page currently denies access and exposes no header actions, so it should not remain a live baseline exemption.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'audit_test',
|
|
'reference' => 'app/Filament/Pages/BreakGlassRecovery.php',
|
|
'proves' => 'The page returns false from canAccess() and exposes no header actions.',
|
|
],
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Auth/BreakGlassWorkspaceOwnerRecoveryTest.php',
|
|
'proves' => 'The active recovery path now lives on the system dashboard and repair utility instead of this retired page shell.',
|
|
],
|
|
],
|
|
'followUpAction' => 'tighten_reason',
|
|
'mustRemainBaselineExempt' => false,
|
|
'mustNotRemainBaselineExempt' => true,
|
|
],
|
|
ChooseWorkspace::class => [
|
|
'surfaceKey' => 'choose_workspace',
|
|
'surfaceName' => 'Choose Workspace',
|
|
'pageClass' => ChooseWorkspace::class,
|
|
'panelPlane' => 'admin',
|
|
'surfaceKind' => 'selector',
|
|
'discoveryState' => 'primary_discovered_baseline_exempt',
|
|
'closureDecision' => 'harmless_special_case',
|
|
'reasonCategory' => 'selector_routing_only',
|
|
'explicitReason' => 'The workspace chooser is a routing-only selector with explicit membership checks and audit logging, not a declaration-backed action table.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Workspaces/ChooseWorkspacePageTest.php',
|
|
'proves' => 'The chooser keeps membership-scoped selection, redirect behavior, and deny-as-not-found semantics.',
|
|
],
|
|
[
|
|
'kind' => 'audit_test',
|
|
'reference' => 'tests/Feature/Workspaces/WorkspaceAuditTrailTest.php',
|
|
'proves' => 'Manual workspace selection remains explicitly audited.',
|
|
],
|
|
],
|
|
'followUpAction' => 'none',
|
|
'mustRemainBaselineExempt' => true,
|
|
'mustNotRemainBaselineExempt' => false,
|
|
],
|
|
ChooseEnvironment::class => [
|
|
'surfaceKey' => 'choose_environment',
|
|
'surfaceName' => 'Choose ManagedEnvironment',
|
|
'pageClass' => ChooseEnvironment::class,
|
|
'panelPlane' => 'tenant',
|
|
'surfaceKind' => 'selector',
|
|
'discoveryState' => 'primary_discovered_baseline_exempt',
|
|
'closureDecision' => 'harmless_special_case',
|
|
'reasonCategory' => 'selector_routing_only',
|
|
'explicitReason' => 'The tenant chooser is a selector-only surface that filters operable tenants and routes to the tenant dashboard without its own contract-style action surface.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Auth/TenantChooserSelectionTest.php',
|
|
'proves' => 'The chooser redirects only for active selectable tenants and rejects non-operable selections with 404.',
|
|
],
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/TenantRBAC/TenantSwitcherScopeTest.php',
|
|
'proves' => 'Selector eligibility remains narrower than global tenant discoverability and stays tenant-scope aware.',
|
|
],
|
|
],
|
|
'followUpAction' => 'none',
|
|
'mustRemainBaselineExempt' => true,
|
|
'mustNotRemainBaselineExempt' => false,
|
|
],
|
|
RegisterTenant::class => [
|
|
'surfaceKey' => 'register_tenant',
|
|
'surfaceName' => 'Register ManagedEnvironment',
|
|
'pageClass' => RegisterTenant::class,
|
|
'panelPlane' => 'admin',
|
|
'surfaceKind' => 'wizard',
|
|
'discoveryState' => 'primary_discovered_baseline_exempt',
|
|
'closureDecision' => 'separately_governed',
|
|
'reasonCategory' => 'registration_form_with_dedicated_rbac',
|
|
'explicitReason' => 'ManagedEnvironment registration is a dedicated creation workflow with its own visibility rules, bootstrap membership side effects, and audit logging.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/Rbac/RegisterTenantAuthorizationTest.php',
|
|
'proves' => 'Registration visibility remains explicitly capability-sensitive for owner versus readonly members.',
|
|
],
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/TenantRBAC/TenantBootstrapAssignTest.php',
|
|
'proves' => 'Registration still bootstraps tenant ownership and audit behavior through the dedicated flow.',
|
|
],
|
|
],
|
|
'followUpAction' => 'none',
|
|
'mustRemainBaselineExempt' => true,
|
|
'mustNotRemainBaselineExempt' => false,
|
|
],
|
|
ManagedEnvironmentOnboardingWizard::class => [
|
|
'surfaceKey' => 'managed_environment_onboarding_wizard',
|
|
'surfaceName' => 'Managed ManagedEnvironment Onboarding Wizard',
|
|
'pageClass' => ManagedEnvironmentOnboardingWizard::class,
|
|
'panelPlane' => 'admin',
|
|
'surfaceKind' => 'wizard',
|
|
'discoveryState' => 'primary_discovered_baseline_exempt',
|
|
'closureDecision' => 'separately_governed',
|
|
'reasonCategory' => 'workflow_specific_governance',
|
|
'explicitReason' => 'The onboarding wizard is a workflow-specific surface with draft continuity, capability-gated steps, confirmations, and dedicated audit coverage.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/Rbac/OnboardingWizardUiEnforcementTest.php',
|
|
'proves' => 'The wizard enforces capability checks on its interactive paths instead of inheriting the generic declaration contract.',
|
|
],
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/Onboarding/OnboardingDraftAccessTest.php',
|
|
'proves' => 'Workspace and tenant continuity for onboarding drafts remains guarded by dedicated 404 and 403 semantics.',
|
|
],
|
|
],
|
|
'followUpAction' => 'none',
|
|
'mustRemainBaselineExempt' => true,
|
|
'mustNotRemainBaselineExempt' => false,
|
|
],
|
|
ManagedEnvironmentsLanding::class => [
|
|
'surfaceKey' => 'managed_environments_landing',
|
|
'surfaceName' => 'Managed Tenants Landing',
|
|
'pageClass' => ManagedEnvironmentsLanding::class,
|
|
'panelPlane' => 'admin',
|
|
'surfaceKind' => 'landing',
|
|
'discoveryState' => 'primary_discovered_baseline_exempt',
|
|
'closureDecision' => 'harmless_special_case',
|
|
'reasonCategory' => 'landing_routing_surface',
|
|
'explicitReason' => 'The managed-tenants landing is a workspace routing shell that keeps discoverability and open-tenant navigation explicit without pretending to be a generic declaration-backed table page.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Workspaces/Spec195ManagedEnvironmentsLandingTest.php',
|
|
'proves' => 'The landing stays membership-scoped, preserves selector routing, and rejects outsider tenant openings.',
|
|
],
|
|
[
|
|
'kind' => 'feature_livewire_test',
|
|
'reference' => 'tests/Feature/Filament/ManagedEnvironmentsLandingLifecycleTest.php',
|
|
'proves' => 'The landing intentionally exposes broader administrative discoverability than the tenant chooser.',
|
|
],
|
|
],
|
|
'followUpAction' => 'add_focused_test',
|
|
'mustRemainBaselineExempt' => true,
|
|
'mustNotRemainBaselineExempt' => false,
|
|
],
|
|
EnvironmentDashboard::class => [
|
|
'surfaceKey' => 'tenant_dashboard',
|
|
'surfaceName' => 'ManagedEnvironment Dashboard',
|
|
'pageClass' => EnvironmentDashboard::class,
|
|
'panelPlane' => 'tenant',
|
|
'surfaceKind' => 'dashboard_shell',
|
|
'discoveryState' => 'primary_discovered_baseline_exempt',
|
|
'closureDecision' => 'harmless_special_case',
|
|
'reasonCategory' => 'dashboard_shell_widget_owned',
|
|
'explicitReason' => 'The tenant dashboard is a widget shell whose meaningful mutations and visibility rules live in its widgets and follow-up routes rather than in page-level generic actions.',
|
|
'evidence' => [
|
|
[
|
|
'kind' => 'db_only_surface_test',
|
|
'reference' => 'tests/Feature/Filament/TenantDashboardDbOnlyTest.php',
|
|
'proves' => 'The dashboard shell renders DB-only and keeps its main behavior in widget rendering rather than page-level actions.',
|
|
],
|
|
[
|
|
'kind' => 'authorization_test',
|
|
'reference' => 'tests/Feature/Rbac/TenantDashboardArrivalContextVisibilityTest.php',
|
|
'proves' => 'Arrival context CTAs remain permission-aware and deny-as-not-found for non-members.',
|
|
],
|
|
],
|
|
'followUpAction' => 'none',
|
|
'mustRemainBaselineExempt' => true,
|
|
'mustNotRemainBaselineExempt' => false,
|
|
],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @return array{
|
|
* surfaceKey: string,
|
|
* surfaceName: string,
|
|
* pageClass: string,
|
|
* panelPlane: string,
|
|
* surfaceKind: string,
|
|
* discoveryState: string,
|
|
* closureDecision: string,
|
|
* reasonCategory: ?string,
|
|
* explicitReason: string,
|
|
* evidence: array<int, array{
|
|
* kind: string,
|
|
* reference: string,
|
|
* proves: string
|
|
* }>,
|
|
* followUpAction: string,
|
|
* mustRemainBaselineExempt: bool,
|
|
* mustNotRemainBaselineExempt: bool
|
|
* }|null
|
|
*/
|
|
public static function spec195ResidualSurface(string $className): ?array
|
|
{
|
|
return self::spec195ResidualSurfaceInventory()[$className] ?? null;
|
|
}
|
|
}
|