patrickandClaude Sonnet 5
1562016371
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Archive-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (push) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
AUD-07 ist bereits auf main umgesetzt (Commit 6866845: Migration
migrations/0010_audit_events_role_enforcement.{up,down}.sql entzieht der
Rolle nexarch_app UPDATE/DELETE auf audit_events, Trigger
audit_events_prevent_mutation() protokolliert und lehnt Aenderungsversuche
ab; internal/audit/append_only_test.go deckt alle drei Akzeptanzkriterien
ab). Es fehlte bislang nur das Pruefprotokoll.
Auf frischem Checkout (Host 192.168.1.204) real nachgeprueft:
- go test ./internal/audit/... -v -p 1 -count=1: alle 24 Tests PASS,
inkl. TestAppendOnly_AppRoleHasNoUpdateOrDeletePrivilege (permission
denied statt Trigger-Fehler), TestAppendOnly_TamperAttemptIsLogged
(RAISE-WARNING-Notice mit Akteur-/Session-Kontext) und
TestAppendOnly_NormalWriteAndReadStillWork (Regression).
- Manuelle Stichprobe gegen isolierte Testtabelle: UPDATE/DELETE werden
vom Trigger abgelehnt und vorher per RAISE WARNING protokolliert;
normaler INSERT/SELECT bleibt unveraendert nutzbar.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>