From 85afb678cd0e7b337bee0bc66cb665956fa9ef48 Mon Sep 17 00:00:00 2001
From: Joseph Doherty <dohejw01@gmail.com>
Date: Fri, 19 Jun 2026 02:22:41 -0400
Subject: [PATCH] docs(test): mark the audit builder-vs-wiring coverage
 boundary explicit

Code-review nit: Item C asserts BuildWriteFailureAuditEvent in isolation; the
single in-lock call-site wiring is covered by inspection + the production-proven
path (bb59fd4e). Documented as a deliberate boundary with a promote-if-second-
call-site note.
---
 .../NodeManagerWriteRevertTests.cs                         | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.Tests/NodeManagerWriteRevertTests.cs b/tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.Tests/NodeManagerWriteRevertTests.cs
index 66057efa..264a67dd 100644
--- a/tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.Tests/NodeManagerWriteRevertTests.cs
+++ b/tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.Tests/NodeManagerWriteRevertTests.cs
@@ -23,6 +23,13 @@ namespace ZB.MOM.WW.OtOpcUa.OpcUaServer.Tests;
 ///         the device Reason in its Message. (The end-to-end <c>Server.ReportEvent</c> dispatch needs a
 ///         subscribed event monitored-item to observe — the nearest deterministic seam is the builder.)</item>
 ///     </list>
+///     <para>
+///         Coverage boundary (deliberate): Item C asserts the audit-event <i>builder</i> in isolation,
+///         not its single call-site wiring inside <see cref="OtOpcUaNodeManager.RevertOptimisticWriteIfNeeded"/>
+///         (line ~1107). Observing that wiring end-to-end would require a subscribed event monitored-item;
+///         the one in-lock builder call is covered by inspection + the production-proven path (shipped
+///         <c>bb59fd4e</c>). If a second audit call-site is ever added, promote this to an observed-event test.
+///     </para>
 /// </summary>
 public sealed class NodeManagerWriteRevertTests : IDisposable
 {