feat: enforce MCP restart class permissions (#663)

2026-07-24 18:10:22 -04:00
parent 870843f999
commit 714190e02a
7 changed files with 721 additions and 18 deletions
@@ -444,6 +444,12 @@ class TestAuditEmission(unittest.TestCase):
        )
        self.assertEqual(record["target"]["namespace"], NAMESPACE)
        self.assertEqual(record["target"]["mode"], "restart")
+        self.assertEqual(
+            record["target"]["restart_class"], "role_runtime_restart"
+        )
+        self.assertEqual(
+            record["metadata"]["restart_class"], "role_runtime_restart"
+        )
        self.assertEqual(record["result"], console_audit.RESULT_ALLOWED)
        self.assertEqual(record["actor"]["subject"], "[email protected]")
        self.assertFalse(record["metadata"]["process_kill_executed"])