Commit Graph
6 Commits
Author SHA1 Message Date
patrick b8b74b5ddc QA-14: gofmt der geaenderten Testdateien
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (push) Canceled after 0s
2026-09-22 01:32:05 +02:00
patrick fabc86732c QA-14: Mehrinstanz-Tests nutzen Sibling-Pools auf dasselbe Testschema; testdb.Schema/Open
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
2026-09-22 01:03:03 +02:00
patrickandClaude Sonnet 5 581f1aff32 QA-14: Core-Tests auf eigene Schemas (testdb) und eindeutige Datenbanknamen umgestellt (Zwischenstand)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-22 00:50:43 +02:00
patrickandClaude Sonnet 5 f23318943b Gesamtprojekt: Handschemata von tenants in loadtest/tenantadmin-Tests um Lifecycle-/Retention-Spalten ergaenzt
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-21 14:26:43 +02:00
sysopsandClaude Sonnet 5 d8d5aaf3bc QA-05: abnahme-compliance-pruefung-core
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Voller Merge der 15 verbleibenden Vorbedingungen (QA-07/QA-08/TEN-08/AUD-02/
API-04/OPS-03/API-06/AUD-05/API-07/LIC-05/OPS-04/OPS-05/OPS-06/IAM-15 plus
QA-03) auf den bereits gemergten Staenden von QA-02/QA-04/QA-09. Konsolidiert
alle sechs vorgelagerten Pruefgates (QA-02/03/04/07/08/09) - widerspruchsfrei,
Akzeptanzkriterium 1 erfuellt.

Echter, substanzieller Befund beim Audit-Log-Stichprobenabgleich (Pruefung
1): internal/policy.Store.Grant/Revoke, Tenant-Lifecycle-Uebergaenge,
Lockout und KEK-Rotation rufen internal/audit.Log.Record nirgends auf - der
zentrale, unveraenderliche Audit-Log (AUD-01/02) existiert und ist getestet,
wird aber von keinem Produktions-Handler tatsaechlich befuellt. Bewusst
NICHT in dieser Kachel behoben (waere Umbau vieler bestehender Pakete,
kein punktueller Fix) - dokumentiert mit Begruendung und Auflage vor QA-06.
Pruefung 2 (Vier-Augen-Gegenlesen) mangels zweiter Person nicht durchgefuehrt,
ebenfalls als Auflage vermerkt. Siehe docs/QA-05-ABNAHME-COMPLIANCE-PRUEFUNG.md.

Zwei reale Testinfrastruktur-Fehler gefunden und behoben (kein Produktions-
code): fehlender PG-Fehlercode 42723 (duplicate_function, AUD-02s
CREATE FUNCTION bei zweiter Migrationsanwendung) in der Toleranzliste der
E2E-/Pentest-Testhelfer; internal/loadtest wiederholte die aus QA-04
bekannte defer-vor-t.Cleanup-Reihenfolge-Fehlerklasse (200 liegen
gebliebene synthetische Tenant-Zeilen verfaelschten internal/migrate).
51/51 Pakete gruen auf 192.168.1.131.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HhgFcLS8tYMhDJpP74C6AQ
2026-08-29 17:16:08 +02:00
sysops 14516b4adf QA-08: last-leistungstest (jwt-verifikation, connection-pooling, rate-limiting unter mehrmodul-last) 2026-08-28 10:54:05 +02:00