refactor(siteruntime): M3.3 ValidateTrustModel delegates to shared ScriptAnalysis + compile-surface parity test

2026-06-16 19:37:50 -04:00
parent 14bd25196a
commit 64d6ac7288
6 changed files with 195 additions and 185 deletions
@@ -8,6 +8,12 @@ namespace ZB.MOM.WW.ScadaBridge.SiteRuntime.Tests.Scripts;
 /// The previous implementation was a raw substring scan of the source text — it both
 /// missed forbidden APIs (no literal namespace string) and raised false positives on
 /// the namespace string appearing in comments, string literals or unrelated identifiers.
+///
+/// As of M3.3, <c>ValidateTrustModel</c> delegates to the shared authoritative
+/// <c>ScriptAnalysis.ScriptTrustValidator</c>, which retains this same Roslyn
+/// semantic-symbol analysis (plus reflection-gateway hardening), so these bypass /
+/// false-positive / allowed-exception regressions continue to hold through the
+/// delegating service.
 /// </summary>
 public class TrustModelSemanticTests
 {