0.3.15-pre.011

crates/ksp-app-raw-transaction-ingest-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-raw-transaction-ingest-desk/tests/desktop_security.rs
-// version: 7
+// version: 8
 
 //! Desktop security canaries for the Raw Transaction Ingest Desk scaffold.
 
@@ -160,3 +160,38 @@ fn pre_010_monitoring_projection_is_source_neutral_payload_free_and_javascript_e
         assert!(!dto_surface.contains(forbidden), "monitoring DTO exposes forbidden RAW marker {forbidden}");
     }
 }
+
+#[test]
+fn pre_011_frontend_monitoring_tracing_is_source_neutral_and_does_not_log_raw_material() {
+    let main = read_text(app_root().join("frontend/ts/main.ts").as_path());
+    for required in [
+        "route supervision selected",
+        "route monitoring latest value applied",
+        "route monitoring resynchronization requested",
+        "route monitoring refresh button clicked",
+        "commitment selection changed",
+        "routeId",
+        "sequence",
+        "statusCount",
+    ] {
+        assert!(main.contains(required), "missing pre.011 safe tracing marker {required}");
+    }
+    for forbidden in [
+        "endpointUrl",
+        "connectionUri",
+        "apiKey",
+        "sourceKey",
+        "workerId",
+        "x-token",
+        "rawTransaction",
+        "transactionPayload",
+        "canonicalBytes",
+        "wireBytes",
+        "transactionBytes",
+        "signature",
+    ] {
+        assert!(!main.contains(forbidden), "pre.011 frontend exposes forbidden marker {forbidden}");
+    }
+    assert!(!main.contains("frontendTrace(\"main\", \"Raw Transaction Ingest Desk route monitoring latest value applied\", status"));
+    assert!(!main.contains("frontendDebug(\"main\", \"Raw Transaction Ingest Desk route monitoring resynchronization completed\", statuses"));
+}