FM / docs

/home/techb158/cosmic-risk.abdallabala.com/docs/

/home/techb158/cosmic-risk.abdallabala.com/docs

Name	Size	Mode	Actions
00-design-study.md	3678	0644	edit dl rm
01-uml-class-diagram.puml	11869	0644	edit dl rm
02-use-case-diagram.puml	3763	0644	edit dl rm
03-sequence-diagrams.puml	9732	0644	edit dl rm
04-database-entity-model.mmd	7051	0644	edit dl rm
05-database-schema.sql	13372	0644	edit dl rm
06-diagram-preview.html	5021	0644	edit dl rm
07-design-checklist.md	3256	0644	edit dl rm
08-step-2-storage-layer.md	5325	0644	edit dl rm
09-step-3-risk-crud-ui.md	3380	0644	edit dl rm
10-step-4-mitigation-workflow.md	3996	0644	edit dl rm
11-step-5-deployment-gate-workflow.md	2292	0644	edit dl rm
12-step-6-multi-pm-integration.md	3770	0644	edit dl rm
13-step-6-1-microsoft-planner-integration.md	2335	0644	edit dl rm
14-step-7-reporting-export.md	4158	0644	edit dl rm
15-step-7-1-oauth-live-connectors.md	4545	0644	edit dl rm
16-step-8-user-roles-access-control.md	3297	0644	edit dl rm
17-step-9-production-deployment-security.md	4228	0644	edit dl rm
18-step-10-final-academic-submission.md	3199	0644	edit dl rm
19-final-report-draft.md	6814	0644	edit dl rm
20-instructor-submission-checklist.md	3639	0644	edit dl rm
21-demo-script.md	3948	0644	edit dl rm
22-traceability-matrix.md	4847	0644	edit dl rm
23-testing-evidence.md	2961	0644	edit dl rm
24-evaluation-rubric-mapping.md	2910	0644	edit dl rm
25-final-deployment-runbook.md	3214	0644	edit dl rm
26-known-limitations-and-future-work.md	2632	0644	edit dl rm
27-final-qa-checklist.md	2893	0644	edit dl rm
28-demo-rehearsal-script.md	3618	0644	edit dl rm
29-submission-freeze-report.md	2769	0644	edit dl rm
30-final-known-issues.md	1876	0644	edit dl rm
31-saas-rebuild-implementation.md	2573	0644	edit dl rm
application-documentation.md	27515	0644	edit dl rm
conversation-log.md	18503	0644	edit dl rm
dashboard-spec.md	3691	0644	edit dl rm
database-guide.md	37826	0644	edit dl rm
development-summary.md	7070	0644	edit dl rm
github-architecture.svg	6288	0644	edit dl rm
integration-pull-push-plan.md	7384	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/docs/23-testing-evidence.md (2961B)

# Testing Evidence Summary

## 1. Test command

Run the full test suite with:

```bash
npm test
```

## 2. Test suites

| Test file | Purpose |
|---|---|
| `tests/risk-engine.test.js` | Verifies risk score, normalized score, and gate logic |
| `tests/storage-layer.test.js` | Verifies JSON storage and repository behavior |
| `tests/api-workflow.test.js` | Verifies main API workflows |
| `tests/mitigation-workflow.test.js` | Verifies mitigation creation, update, evidence, and residual risk behavior |
| `tests/gate-workflow.test.js` | Verifies gate history, reviewer decisions, notes, and audit behavior |
| `tests/integration-workflow.test.js` | Verifies Trello, Jira, Asana, and Microsoft Planner adapter workflows |
| `tests/oauth-live-connectors.test.js` | Verifies OAuth provider configuration and live connector boundaries |
| `tests/reporting-workflow.test.js` | Verifies JSON, HTML, and CSV report generation |
| `tests/access-control.test.js` | Verifies roles, permissions, and protected operations |
| `tests/production-hardening.test.js` | Verifies security headers, readiness, config checks, and backup support |

## 3. Expected output

```text
All COSMIC AI-Risk engine tests passed.
All COSMIC AI-Risk storage layer tests passed.
All COSMIC AI-Risk mitigation workflow tests passed.
All COSMIC AI-Risk gate workflow tests passed.
All COSMIC AI-Risk integration workflow tests passed.
All COSMIC AI-Risk OAuth and live connector tests passed.
All COSMIC AI-Risk reporting workflow tests passed.
All COSMIC AI-Risk access control tests passed.
All COSMIC AI-Risk production hardening tests passed.
All COSMIC AI-Risk API workflow tests passed.
```

## 4. Manual verification checklist

| Check | Expected result |
|---|---|
| Open dashboard | Main dashboard loads |
| Add risk | Risk appears in register and dashboard recalculates |
| Edit risk | Updated fields persist |
| Delete risk | Risk is removed from register |
| Add mitigation | Mitigation appears on Mitigations page |
| Add evidence | Evidence reference is saved |
| Evaluate gate | Gate status and criteria update |
| Add reviewer decision | Decision appears in gate history |
| Run simulated PM sync | Sync run appears in integration history |
| Open reports | Report links work |
| Export CSV | CSV downloads or opens |
| Switch user actor | Permissions change in UI |
| Open readiness endpoint | `/api/ready` returns `ok: true` |
| Run backup | Backup file and manifest are created |

## 5. Testing limitations

The current tests are local prototype tests. They do not perform live calls to Trello, Jira, Asana, or Microsoft Planner unless production credentials and live integration flags are configured. This is intentional because automated submission tests should not depend on external services.

## 6. Recommended instructor demonstration

During the demo, run:

```bash
npm test
npm start
```

Then demonstrate the dashboard, workflows, reports, and access control screen.

# Testing Evidence Summary ## 1. Test command Run the full test suite with: ```bash npm test ``` ## 2. Test suites | Test file | Purpose | |---|---| | `tests/risk-engine.test.js` | Verifies risk score, normalized score, and gate logic | | `tests/storage-layer.test.js` | Verifies JSON storage and repository behavior | | `tests/api-workflow.test.js` | Verifies main API workflows | | `tests/mitigation-workflow.test.js` | Verifies mitigation creation, update, evidence, and residual risk behavior | | `tests/gate-workflow.test.js` | Verifies gate history, reviewer decisions, notes, and audit behavior | | `tests/integration-workflow.test.js` | Verifies Trello, Jira, Asana, and Microsoft Planner adapter workflows | | `tests/oauth-live-connectors.test.js` | Verifies OAuth provider configuration and live connector boundaries | | `tests/reporting-workflow.test.js` | Verifies JSON, HTML, and CSV report generation | | `tests/access-control.test.js` | Verifies roles, permissions, and protected operations | | `tests/production-hardening.test.js` | Verifies security headers, readiness, config checks, and backup support | ## 3. Expected output ```text All COSMIC AI-Risk engine tests passed. All COSMIC AI-Risk storage layer tests passed. All COSMIC AI-Risk mitigation workflow tests passed. All COSMIC AI-Risk gate workflow tests passed. All COSMIC AI-Risk integration workflow tests passed. All COSMIC AI-Risk OAuth and live connector tests passed. All COSMIC AI-Risk reporting workflow tests passed. All COSMIC AI-Risk access control tests passed. All COSMIC AI-Risk production hardening tests passed. All COSMIC AI-Risk API workflow tests passed. ``` ## 4. Manual verification checklist | Check | Expected result | |---|---| | Open dashboard | Main dashboard loads | | Add risk | Risk appears in register and dashboard recalculates | | Edit risk | Updated fields persist | | Delete risk | Risk is removed from register | | Add mitigation | Mitigation appears on Mitigations page | | Add evidence | Evidence reference is saved | | Evaluate gate | Gate status and criteria update | | Add reviewer decision | Decision appears in gate history | | Run simulated PM sync | Sync run appears in integration history | | Open reports | Report links work | | Export CSV | CSV downloads or opens | | Switch user actor | Permissions change in UI | | Open readiness endpoint | `/api/ready` returns `ok: true` | | Run backup | Backup file and manifest are created | ## 5. Testing limitations The current tests are local prototype tests. They do not perform live calls to Trello, Jira, Asana, or Microsoft Planner unless production credentials and live integration flags are configured. This is intentional because automated submission tests should not depend on external services. ## 6. Recommended instructor demonstration During the demo, run: ```bash npm test npm start ``` Then demonstrate the dashboard, workflows, reports, and access control screen.