CUT-03: Tenant- und User-Mapping final freigeben #282

Merged
patrick merged 2 commits from feature/cut-03-tenant-user-mapping-freigabe into main 2026-10-15 10:19:17 +02:00
Owner

Finale Gesamt-Freigabe fuer tenant_migration_map/user_migration_map (internal/finalmigrationapproval), Guard verhindert weitere Tenant-/User-Entscheidungen nach Freigabe ohne Revoke, Stichprobe gegen CUT-02-Generalprobe-Snapshot.

🤖 Generated with Claude Code

Finale Gesamt-Freigabe fuer tenant_migration_map/user_migration_map (internal/finalmigrationapproval), Guard verhindert weitere Tenant-/User-Entscheidungen nach Freigabe ohne Revoke, Stichprobe gegen CUT-02-Generalprobe-Snapshot. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 1 commit 2026-10-15 10:04:06 +02:00
CUT-03: finale Gesamt-Freigabe fuer Tenant- und User-Migration-Map
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
dd829351f8
Neues Paket internal/finalmigrationapproval dokumentiert eine einzige
finale Freigabe-Entscheidung fuer die gesamte tenant_migration_map +
user_migration_map (Zeitstempel, freigebende Person), getrennt von den
Pro-Eintrag-Freigaben aus MAP-02/MAP-04. Ein Guard (FinalGuard) in
tenantapproval/usermigrationapproval sperrt Approve/Reject, solange eine
finale Freigabe aktiv ist, bis sie widerrufen wird (erneuter
Freigabeprozess). Zusaetzlich: Stichprobe (SampleCheck), die den
aktuellen Map-Stand gegen den zuletzt dokumentierten CUT-02-Generalprobe-
Lauf vergleicht und Abweichungen meldet.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick added 1 commit 2026-10-15 10:16:18 +02:00
CUT-03: FinalGuard produktiv verdrahten, Correct() sperren, Hash haertenn
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
681d736018
Behebt zwei von unabhaengiger Verifikation gefundene Luecken: SetFinalGuard
war nur im Testcode verdrahtet (jetzt am einzigen realen Aufrufer,
cutoverorchestrator map02), und Correct() konnte die finale Sperre umgehen
weil weder der Guard dort pruefte noch der Snapshot-Hash inhaltliche Felder
(slug/name/alt-IDs) einschloss.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick merged commit 50068ee0c3 into main 2026-10-15 10:19:17 +02:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#282