feat(security): AclRevalidationTimer — clock-driven monitored-item revalidation (archreview 03/S19)

This commit is contained in:
Joseph Doherty
2026-08-20 09:46:56 -04:00
parent 39a10a277a
commit bd80ff96ca
5 changed files with 267 additions and 5 deletions
@@ -421,11 +421,11 @@ public sealed class BoundedApiKeyStoreTests
/// <summary>Collects <c>otopcua.opcua.apikey_store.bounded</c> measurements by their outcome tag.</summary>
/// <remarks>
/// ⚠️ Filtered by instrument name only, which is normally the metrics-test leak (a listener sees
/// a PARALLEL test's measurements too). It is safe HERE for a checkable reason:
/// a PARALLEL test's measurements too). It is safe HERE for two checkable reasons:
/// <see cref="BoundedApiKeyStore"/> is the only thing in the product that writes this instrument,
/// and this class is the only one in the assembly that constructs one — and xUnit never runs two
/// tests of the same class in parallel. Adding a class that exercises the decorator means adding
/// a discriminating tag here.
/// and this assembly declares <c>CollectionBehavior(DisableTestParallelization = true)</c> in
/// <c>AssemblyInfo.cs</c>, so there is no parallel test to leak from. Removing that attribute
/// means adding a discriminating tag here.
/// </remarks>
private sealed class MeterRecorder : IDisposable
{