fix(reports): correct the Security & Compliance Posture report#2518

Merged

ToddHebebrand merged 46 commits into

mainfrom

ToddHebebrand/Security-Compliance-Posture-report

Jul 16, 2026

Commits on Jul 16, 2026

docs(reports): design posture report corrections
Todd Hebebrand
committed
docs(reports): plan posture report corrections
Todd Hebebrand
committed
fix(reports): load vulnerability counts across RLS contexts
Todd Hebebrand
committed
fix(reports): count posture vulnerabilities accurately
Todd Hebebrand
committed
fix(reports): include all detected security products
Todd Hebebrand
committed
test(reports): cover multi-device product aggregation
Todd Hebebrand
committed
feat(reports): make backup a posture report requirement
Todd Hebebrand
committed
test(reports): verify neutral backup metric status
Todd Hebebrand
committed
feat(reports): configure posture backup requirement
Todd Hebebrand
committed
fix(reports): continue posture products across PDF pages
Todd Hebebrand
committed
test(reports): verify multi-page posture products
Todd Hebebrand
committed
docs(reports): explain posture backup requirements
Todd Hebebrand
committed
fix(reports): bound vulnerability catalog lookups
Todd Hebebrand
committed
fix(reports): correct posture report wording
Todd Hebebrand
committed
docs(test): plan API suite stabilization
Todd Hebebrand
committed
test(api): move validator import guard to eslint
Todd Hebebrand
committed
test(api): lighten metrics route initialization
Todd Hebebrand
committed
test(api): reset metrics state without module reloads
Todd Hebebrand
committed
test(api): reset sentinelone metric snapshots
Todd Hebebrand
committed
test(api): stabilize oauth interaction route setup
Todd Hebebrand
committed
test(api): reuse mcp bootstrap route graph
Todd Hebebrand
committed
test(api): reuse mcp authorization route graphs
Todd Hebebrand
committed
docs(test): extend API stability plan
Todd Hebebrand
committed
test(api): stabilize oauth route setup
Todd Hebebrand
committed
test(api): stabilize mcp transport route setup
Todd Hebebrand
committed
fix(api): clean up aborted mcp SSE sessions
Todd Hebebrand
committed
test(api): stabilize encrypted column registry setup
Todd Hebebrand
committed
docs(test): plan final API stability fixes
Todd Hebebrand
committed
test(api): stabilize oauth security harnesses
Todd Hebebrand
committed
test(api): isolate migration ordering contract
Todd Hebebrand
committed
test(api): type oauth harness delegates
Todd Hebebrand
committed
docs(test): plan API worker cap
Todd Hebebrand
committed
test(api): bound vitest worker parallelism
Todd Hebebrand
committed
docs(test): plan final cold-path fixes
Todd Hebebrand
committed
test(api): stabilize final cold-path harnesses
Todd Hebebrand
committed
test(api): preload partner org-scope routes
Todd Hebebrand
committed
docs(test): plan bootstrap parity isolation
Todd Hebebrand
committed
test(api): isolate bootstrap permission parity
Todd Hebebrand
committed
fix(reports): preserve report config through builder edits

Todd Hebebrand
and
claude
committed
fix(reports): retry and surface failed scheduled runs

Todd Hebebrand
and
claude
committed
fix(reports): harden posture product inventory guards

Todd Hebebrand
and
claude
committed
test(reports): pin posture config schema parity

Todd Hebebrand
and
claude
committed
fix(reports): restore em-dash punctuation in the posture PDF

Todd Hebebrand
and
claude
committed
docs(reports): restore posture config defaults

Todd Hebebrand
and
claude
committed
docs(reports): park third-party backup evidence design

Todd Hebebrand
and
claude
committed
fix(test): give mcpServer.bootstrapCarveout's authed-key fixture SR2-15 baseline perms

Todd Hebebrand
and
claude
committed