 Oleksandr Bezdieniezhnykh
|
98cdcd17c1
|
[AZ-487] [AZ-488] docs: cycle 2 test-spec sync
Append cycle 2 entries to test-spec artifacts (cycle-update mode):
* security-tests.md: SEC-05..SEC-09 (AZ-487 JWT 401/403/parity)
+ SEC-10..SEC-11 (AZ-488 permission + reject-detail leak hygiene).
* blackbox-tests.md: BT-13..BT-17 (UAV happy / mixed / multi-source
coexistence / same-source UPSERT / rule-ordering) + BT-18 (existing
endpoints parity with Bearer token).
* resource-limit-tests.md: RL-05..RL-07 (MaxBatchSize, per-item MaxBytes,
Kestrel/Form envelope cap).
* performance-tests.md: untouched (PT-08 already landed with AZ-488 as
Deferred — see _docs/_process_leftovers/2026-05-11_perf-pt07-harness).
* traceability-matrix.md: append AC rows for AZ-487 AC-1..AC-8 and
AZ-488 AC-1..AC-10 + AC-7a..AC-7e; annotate "No authentication"
restriction as superseded by AZ-487+AZ-488; add NFR rows (perf,
security, reliability, compatibility) for both tasks; refresh totals
(78 tests; 47/47 ACs; 8/8 restrictions).
Coverage shape: AZ-487 AC-7 (Swagger Authorize) and the perf NFRs are
recorded but not actively measured this commit (manual UI smoke +
deferred PT-08 harness, respectively).
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-05-12 00:00:14 +03:00 |
|
|
Oleksandr Bezdieniezhnykh
|
51b572108a
|
[AZ-484] Cycle 1 Steps 12-16: docs, security, perf, deploy report
ci/woodpecker/push/01-test Pipeline was successful
ci/woodpecker/push/02-build-push Pipeline was successful
Captures the post-implementation autodev gates for AZ-484 multi-source
tile storage:
- Step 12 (Test-Spec Sync): added 7 AC rows (AZ-484 AC-1..AC-7) and a
PT-07 NFR row to traceability-matrix.md; added PT-07 scenario to
performance-tests.md.
- Step 13 (Update Docs): refreshed data_model.md (tiles columns +
indexes + selection rule + UPSERT contract + migrations 012/013),
module-layout.md (Common/Enums section with L-001 guidance,
DataAccess imports-from now lists 6 sites), 6 module / component
docs to reflect the new repo signatures, source/captured_at fields,
and Dapper enum bypass workaround. ripple_log_cycle1.md records
zero out-of-scope ripple.
- Step 14 (Security Audit): PASS_WITH_WARNINGS - 0 Critical, 0 High,
5 Medium, 5 Low. AZ-484 itself added zero new findings. Hardening
items (Postgres default creds, .env in build context, GMaps key
rotation, ASP.NET Core 8.0.21 -> 8.0.25, rate limiter) recorded
for separate tickets.
- Step 15 (Performance Test): all PT-01..PT-07 scenarios Unverified
(non-blocking); PT-07 baseline-comparison harness deferred to a
leftover for next cycle.
- Step 16 (Deploy): cycle deploy report covering migration safety,
rollback path, post-deploy verification, security caveats.
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-05-11 10:03:05 +03:00 |
|
|
Oleksandr Bezdieniezhnykh
|
b0fffa6d42
|
[AZ-284] Autodev baseline + testability refactor
Phase A baseline outputs from /autodev (Steps 1-5):
- Problem & solution docs (_docs/00_problem, _docs/01_solution)
- Codebase documentation (_docs/02_document) incl. architecture,
module-layout, glossary, system-flows, baseline compliance scan
- Test specs (blackbox, performance, resilience, security, resource,
traceability matrix)
- Test task decomposition (_docs/02_tasks/todo): AZ-285..AZ-290
- Testability refactor (_docs/04_refactoring/01-testability-refactoring):
- TC-01 Move DownloadedTileInfoV2 + new ExistingTileInfo to Common.DTO
- TC-02 Replace dead ISatelliteDownloader API with real signatures
- TC-03 GoogleMapsDownloaderV2 implements ISatelliteDownloader
- TC-04 TileService depends on ISatelliteDownloader (mockable)
- TC-05 DI + endpoints use ISatelliteDownloader
- Test runner scripts (scripts/run-tests.sh, run-performance-tests.sh)
- Autodev state pointer (_docs/_autodev_state.md)
Prepares the codebase for AZ-285..AZ-290 unit/integration test work.
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-05-10 04:44:08 +03:00 |
|