v0.3.7-pre.009

crates/ksp-app-backfill-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-backfill-desk/tests/desktop_security.rs
-// version: 9
+// version: 10
 
 //! Security and dependency-boundary checks for the Backfill Desk scaffold.
 
@@ -104,7 +104,7 @@ fn pre_002_tauri_commands_remain_centralized() {
             assert_eq!(count, 0, "{} declares a Tauri command outside tauri.rs", path.display());
         }
     }
-    assert_eq!(command_count, 6);
+    assert_eq!(command_count, 7);
 }
 
 #[test]
@@ -239,3 +239,16 @@ fn pre_008_start_surface_keeps_payload_and_physical_resources_backend_owned() {
         assert!(!start_source.contains(forbidden), "Start tracing includes forbidden request payload marker {forbidden}");
     }
 }
+
+#[test]
+fn pre_009_monitoring_projection_exposes_counters_and_codes_without_checkpoint_or_business_payloads() {
+    let root = workspace_root();
+    let status = read(root.join("crates/ksp-app-backfill-desk/src/backfill_status.rs"));
+    let dto = struct_source(status.as_str(), "BackfillRunStatusDto");
+    for required in ["checkpoint_present", "contiguous_completed", "failure_code", "failure_domain", "sequence", "scope_kind"] {
+        assert!(dto.contains(required), "monitoring DTO missing required safe marker {required}");
+    }
+    for forbidden in ["address", "signature", "endpoint", "provider", "credential", "token", "checkpoint:", "payload", "raw_transaction"] {
+        assert!(!dto.contains(forbidden), "monitoring DTO leaks forbidden marker {forbidden}");
+    }
+}