0.3.15-pre.010-fix.001

crates/ksp-app-raw-transaction-ingest-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-raw-transaction-ingest-desk/tests/desktop_security.rs
-// version: 5
+// version: 7
 
 //! Desktop security canaries for the Raw Transaction Ingest Desk scaffold.
 
@@ -126,3 +126,37 @@ fn pre_008_runtime_acknowledgement_and_frontend_tracing_remain_secret_and_handle
         assert!(!main.contains(forbidden), "frontend runtime trace exposes forbidden marker {forbidden}");
     }
 }
+
+#[test]
+fn pre_010_monitoring_projection_is_source_neutral_payload_free_and_javascript_exact() {
+    let monitoring = read_text(app_root().join("src/route_monitoring.rs").as_path());
+    for required in [
+        "sequence: String",
+        "processing_frontier_slot: std::option::Option<String>",
+        "continuity_frontier_slot: std::option::Option<String>",
+        "fault_domain",
+        "fault_code",
+        "gaps: std::vec::Vec<crate::RawIngestRouteGapDto>",
+    ] {
+        assert!(monitoring.contains(required), "missing pre.010 safe monitoring marker {required}");
+    }
+    for forbidden in ["endpoint_url", "connection_uri", "api_key", "source_key", "worker_id", "x-token"] {
+        assert!(!monitoring.contains(forbidden), "monitoring projection exposes forbidden physical marker {forbidden}");
+    }
+    let dto_start = monitoring.find("pub(crate) struct RawIngestRouteMonitoringDto");
+    assert!(dto_start.is_some(), "monitoring DTO declaration is missing");
+    let dto_start = match dto_start {
+        std::option::Option::Some(value) => value,
+        std::option::Option::None => return,
+    };
+    let dto_end = monitoring[dto_start..].find("/// Projects one complete concrete Worker snapshot");
+    assert!(dto_end.is_some(), "monitoring DTO declaration boundary is missing");
+    let dto_end = match dto_end {
+        std::option::Option::Some(value) => dto_start + value,
+        std::option::Option::None => return,
+    };
+    let dto_surface = &monitoring[dto_start..dto_end];
+    for forbidden in ["raw_transaction", "signature", "payload", "canonical_bytes", "wire_bytes", "transaction_bytes"] {
+        assert!(!dto_surface.contains(forbidden), "monitoring DTO exposes forbidden RAW marker {forbidden}");
+    }
+}