v0.3.7-pre.009-fix.002

crates/ksp-app-backfill-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-backfill-desk/tests/desktop_security.rs
-// version: 11
+// version: 12
 
 //! Security and dependency-boundary checks for the Backfill Desk scaffold.
 
@@ -248,7 +248,17 @@ fn pre_009_monitoring_projection_exposes_counters_and_codes_without_checkpoint_o
     for required in ["checkpoint_present", "contiguous_completed", "failure_code", "failure_domain", "sequence", "scope_kind"] {
         assert!(dto.contains(required), "monitoring DTO missing required safe marker {required}");
     }
-    for forbidden in ["address", "signature", "endpoint", "provider", "credential", "token", "checkpoint:", "payload", "raw_transaction"] {
-        assert!(!dto.contains(forbidden), "monitoring DTO leaks forbidden marker {forbidden}");
+    for forbidden in [
+        "pub(crate) address:",
+        "pub(crate) signature:",
+        "pub(crate) endpoint:",
+        "pub(crate) provider:",
+        "pub(crate) credential:",
+        "pub(crate) token:",
+        "pub(crate) checkpoint:",
+        "pub(crate) payload:",
+        "pub(crate) raw_transaction:",
+    ] {
+        assert!(!dto.contains(forbidden), "monitoring DTO leaks forbidden field marker {forbidden}");
     }
 }