TenantAtlas/app
ahmido ec71c2d4e7 feat: harden findings workflow and audit backstop (#181)
## Summary
- harden finding lifecycle changes behind the canonical `FindingWorkflowService` gateway
- route automated resolve and reopen flows through the same audited workflow path
- tighten tenant and workspace scope checks on finding actions and audit visibility
- add focused spec artifacts, workflow regression coverage, automation coverage, and audit visibility tests
- update legacy finding model tests to use the workflow service after direct lifecycle mutators were removed

## Testing
- `vendor/bin/sail bin pint --dirty --format agent`
- focused findings and audit slices passed during implementation
- `vendor/bin/sail artisan test --compact tests/Feature/Models/FindingResolvedTest.php`
- full repository suite passed: `2757 passed`, `8 skipped`, `14448 assertions`

## Notes
- Livewire v4.0+ compliance preserved
- no new Filament assets or panel providers introduced; provider registration remains in `bootstrap/providers.php`
- findings stay on existing Filament action surfaces, with destructive actions still confirmation-gated
- no global search behavior was changed for findings resources

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #181
2026-03-18 12:57:23 +00:00
..
Console/Commands feat: standardize platform provider identity (#166) 2026-03-13 16:29:08 +00:00
Contracts/Hardening feat: provider access hardening (RBAC write gate) (#132) 2026-02-23 00:49:37 +00:00
Exceptions feat: add onboarding lifecycle checkpoints and locking (#169) 2026-03-14 11:02:29 +00:00
Filament feat: harden findings workflow and audit backstop (#181) 2026-03-18 12:57:23 +00:00
Http feat: central tenant operability policy (#177) 2026-03-17 11:48:55 +00:00
Jobs feat: harden findings workflow and audit backstop (#181) 2026-03-18 12:57:23 +00:00
Listeners 085-tenant-operate-hub (#103) 2026-02-11 13:02:03 +00:00
Livewire feat: add resolved reference presentation layer (#161) 2026-03-10 18:52:52 +00:00
Models feat: harden findings workflow and audit backstop (#181) 2026-03-18 12:57:23 +00:00
Notifications feat: harden queued execution legitimacy (#179) 2026-03-17 21:52:40 +00:00
Observers feat: standardize platform provider identity (#166) 2026-03-13 16:29:08 +00:00
Policies feat: harden findings workflow and audit backstop (#181) 2026-03-18 12:57:23 +00:00
Providers feat: harden queued execution legitimacy (#179) 2026-03-17 21:52:40 +00:00
Rules feat/049-backup-restore-job-orchestration (#56) 2026-01-11 15:59:06 +00:00
Services feat: harden findings workflow and audit backstop (#181) 2026-03-18 12:57:23 +00:00
Support feat: harden findings workflow and audit backstop (#181) 2026-03-18 12:57:23 +00:00