feat(security): AclRevalidationTimer — clock-driven monitored-item revalidation (archreview 03/S19)

2026-08-20 09:46:56 -04:00
parent 39a10a277a
commit bd80ff96ca
5 changed files with 267 additions and 5 deletions
@@ -657,3 +657,15 @@ for the orchestrator.
  remark is now qualified by node role and points at the bound, and `ConfigDbApiKeyStore` records both
  that it is wrapped in production and that "revocation on the next request" is **activation**-scoped.
 - Host.Tests: 123 green (was 106 at base).
+
+### T6 — `AclRevalidationTimer`
+
+- **RED observed:** `error CS0246: The type or namespace name 'AclRevalidationTimer' could not be found`.
+- **DEVIATION (visibility):** the plan declares the class `internal sealed`. `ZB.MOM.WW.OtOpcUa.Host` has
+  **no `InternalsVisibleTo`**, so the tests could not reach it. Made `public sealed`, matching
+  `BoundedApiKeyStore` and every other type in `Host/OpcUa/`.
+- Added beyond the plan's list: `A_tick_runs_the_pass` — the control for the two "nothing happened" cases
+  (a `Tick()` that silently did nothing would satisfy the throwing-pass and dispose cases on its own).
+- 5 tests, green. Also corrected the T4 `MeterRecorder` remark: the assembly declares
+  `CollectionBehavior(DisableTestParallelization = true)`, which is a stronger and simpler reason the
+  name-only filter is safe than the one first written.
@@ -43,7 +43,7 @@
    {
      "id": "T6",
      "subject": "AclRevalidationTimer (pure, TimeProvider-driven, non-throwing tick) + unit tests (03/S19)",
-      "status": "pending",
+      "status": "done",
      "blockedBy": [
        "T1"
      ]