{
  "version": 1,
  "base_sha": "1807ab294cc53d397fb8b9e7ab1b8a3d3bca8137",
  "verified_at": "2026-08-04T09:47:19Z",
  "result": "passed",
  "changed_paths": [
    "frontend-modern/src/components/Settings/SecurityOverviewPanel.tsx"
  ],
  "content_sha256": {
    "frontend-modern/src/components/Settings/SecurityOverviewPanel.tsx": "05d38e5a9b7235804dd388b893f58b79818fbae50c90244edc077c6cbcb6c8b4"
  },
  "routes": [
    "/settings/security-overview"
  ],
  "viewports": [
    {
      "width": 1280,
      "height": 720
    },
    {
      "width": 390,
      "height": 844
    }
  ],
  "states": [
    "Security Overview against the live dev backend as the local admin, a privileged /api/security/status caller, showing the real posture score of 60% Moderate with all seven posture cards populated from actual payload values",
    "Recommended hardening steps callout rendered below the posture summary for the privileged session",
    "Narrow 390x844 layout with the posture header and stacked posture cards rendering without horizontal document overflow"
  ],
  "interactions": [
    "Fetched /api/security/status from the page session and confirmed detailLevel is privileged with hasHTTPS false, exportProtected true, hasAuditLogging false, apiTokenConfigured true, each matching the rendered card states, so privileged rendering is unchanged by the new gate",
    "Confirmed the new admin-session callout is absent for the privileged session and the posture summary still renders",
    "Read console messages filtered to errors on both viewports and found none",
    "The truncated authenticated-level branch, which now renders the admin-session explanation instead of false negatives, cannot be reached on this instance because a non-admin RBAC session requires Pro SSO role mappings; that branch is proven by the new unit tests in SecurityOverviewPanel.test.tsx which assert the callout appears and the posture score and hardening sections stay hidden"
  ]
}