v0.3.15-pre.008

crates/ksp-app-raw-transaction-ingest-desk/tests/desktop_security.rs

@@ -110,3 +110,19 @@ fn pre_007_start_request_and_acknowledgement_are_logical_only_and_resource_free(
     assert!(!route_start.contains("with_context(\"endpoint\""));
     assert!(!route_start.contains("with_context(\"provider\""));
 }
+
+#[test]
+fn pre_008_runtime_acknowledgement_and_frontend_tracing_remain_secret_and_handle_free() {
+    let dto = read_text(app_root().join("src/dto_route.rs").as_path());
+    assert!(dto.contains("RawIngestRouteRuntimeDto"));
+    for forbidden in ["worker_id", "worker_handle", "endpoint_url", "connection_uri", "api_key", "source_key"] {
+        assert!(!dto.contains(forbidden), "runtime DTO exposes forbidden marker {forbidden}");
+    }
+    let main = read_text(app_root().join("frontend/ts/main.ts").as_path());
+    for required in ["profileId", "routeId", "commitment", "state"] {
+        assert!(main.contains(required), "missing safe runtime trace marker {required}");
+    }
+    for forbidden in ["endpointUrl", "connectionUri", "workerId", "sourceKey", "x-token", "rawTransaction"] {
+        assert!(!main.contains(forbidden), "frontend runtime trace exposes forbidden marker {forbidden}");
+    }
+}