viettranx f1e71ee8fe test(integration): cover RBAC role bypass + non-bypass for file_writer permission ...

- A.10 AdminRoleBypass (3 sub-cases): admin, operator, owner roles in
  ctx allow write_file and cron in group context even when SenderID is
  empty (the bypass short-circuits before the synthetic-sender check).
- A.11 ViewerRoleDoesNotBypass (2 sub-cases): viewer and empty roles
  still hit the DENY path, guarding against the RBAC bypass leaking to
  unprivileged roles.

Integration suite 11 fixtures, all passing on pgvector pg18.

2026-04-16 14:17:48 +07:00

..

contracts

test(contracts): complete P1 contract tests with schemas and policy

2026-04-12 21:52:29 +07:00

integration

test(integration): cover RBAC role bypass + non-bypass for file_writer permission

2026-04-16 14:17:48 +07:00

invariants

fix(vault): include shared docs in agent read paths (#917)

2026-04-16 14:17:48 +07:00

scenarios

test(scenarios): add P2 end-to-end scenario tests

2026-04-12 21:54:02 +07:00

zalo_e2e

fix(zalo): address PR #62 review findings — security, reliability, modularity

2026-03-06 23:21:16 +07:00