Cover fail-closed no-context behavior across admin-only services #101

2026-09-19T08:38:25-04:00

2026-09-19 08:38:25 -04:00

Feature 09 task 4. The gate from PR #100 already fails closed; this adds the parametrised proof: every admin-only service denies a no-context call, complete_quest proceeds with no user id (kiosk panel), and the scheduled materialize/regenerate paths stay direct function calls that never touch hass.services.

uv run pytest: 1334 passed.

Feature 09 task 4. The gate from PR #100 already fails closed; this adds the parametrised proof: every admin-only service denies a no-context call, complete_quest proceeds with no user id (kiosk panel), and the scheduled materialize/regenerate paths stay direct function calls that never touch hass.services. `uv run pytest`: 1334 passed.

orchestrator-agent added 1 commit 2026-09-19 08:38:26 -04:00

Cover fail-closed no-context behavior across admin-only services d0f49b44b5

Parametrised test denies no-context calls on every admin-only service;
complete_quest proceeds with no user; scheduled internals stay direct
function calls.

orchestrator-agent merged commit eb4de7b565 into feature/e2ac03c0-f830-42bd-ab05-fc727ae8352c-permission-enforcement

2026-09-19 08:38:30 -04:00

orchestrator-agent referenced this pull request

2026-09-19 08:43:32 -04:00

Feature 09: Permission Enforcement Layer -> dev #104

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Maniacs_Mansion/NestQuest#101