v0.3.7-pre.003

crates/ksp-app-backfill-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-backfill-desk/tests/desktop_security.rs
-// version: 1
+// version: 2
 
 //! Security and dependency-boundary checks for the Backfill Desk scaffold.
 
@@ -113,3 +113,17 @@ fn pre_002_frontend_instrumentation_avoids_business_or_secret_payloads() {
         assert!(!main.contains(forbidden));
     }
 }
+
+#[test]
+fn pre_003_keeps_config_only_composition_boundary() {
+    let root = app_root();
+    let manifest = read_text(root.join("Cargo.toml").as_path());
+    assert!(manifest.contains("ksp-config-lib.workspace = true"));
+    for forbidden in ["ksp-job-backfill-lib", "ksp-onchain-transport-lib", "ksp-store-lib", "ksp-store-api", "ksp-store-postgres-lib"] {
+        assert!(!manifest.contains(forbidden), "pre.003 opens a later-layer dependency: {forbidden}");
+    }
+    let bootstrap = read_text(root.join("src/bootstrap.rs").as_path());
+    assert!(bootstrap.contains("LogFilterLevel::Trace"));
+    assert!(!bootstrap.contains("HttpTransportPool"));
+    assert!(!bootstrap.contains("Store::open"));
+}