Integration, regression and security test suite #52

New Issue

2026-10-10T22:23:50Z

keith commented

2026-10-10 22:23:50 +00:00

Context

Implement this MVP work package under M8 - Hardening & Release, following the managed-storage decision in #1.

Acceptance criteria

Select and pin PHP test tooling during implementation; run against real PostgreSQL and isolated filesystem fixtures.
Exercise import through search/download, multipart metadata, folder moves, catalog removal and all health resolutions.
Cover disk-full, crashes, duplicate decisions, traversal/symlinks, upload spoofing, SQL injection, XSS and CSRF.
Document single-user trusted-network deployment or external authentication; do not expose unauthenticated app publicly.
Use repeatable seed data and agreed representative-library performance budget; verify bounded memory and restore consistency.

Blocked by: #41, #43, #45, #47, #48, #50, #51

## Context Implement this MVP work package under M8 - Hardening & Release, following the managed-storage decision in #1. ## Acceptance criteria - [ ] Select and pin PHP test tooling during implementation; run against real PostgreSQL and isolated filesystem fixtures. - [ ] Exercise import through search/download, multipart metadata, folder moves, catalog removal and all health resolutions. - [ ] Cover disk-full, crashes, duplicate decisions, traversal/symlinks, upload spoofing, SQL injection, XSS and CSRF. - [ ] Document single-user trusted-network deployment or external authentication; do not expose unauthenticated app publicly. - [ ] Use repeatable seed data and agreed representative-library performance budget; verify bounded memory and restore consistency. Blocked by: #41, #43, #45, #47, #48, #50, #51

keith added this to the M8 - Hardening & Release milestone 2026-10-10 22:23:50 +00:00

keith added the area:backend type:feature priority:medium labels 2026-10-10 22:23:50 +00:00

keith referenced this issue

2026-10-10 22:23:52 +00:00

Continuous integration pipeline #53

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: keith/MeshVault#52