fix(ql3): admit external secret reconciliation review

This commit is contained in:
whyour
2026-09-02 03:25:19 +08:00
parent a95ed67fe8
commit 950f638998
2 changed files with 10 additions and 2 deletions
@@ -289,7 +289,14 @@ function completionReviewFixture(root, output) {
const decisions = [];
for (const fact of facts) {
if (fact.decisionRequirement === 'informational') continue;
if (fact.decisionRequirement === 'blocked') {
const externallyRecoverableSecretConfig =
fact.decisionRequirement === 'blocked' &&
fact.domain === 'secret_and_config' &&
fact.reason === 'secret_custody_required';
if (
fact.decisionRequirement === 'blocked' &&
!externallyRecoverableSecretConfig
) {
fail('completion review fixture refuses blocked diagnostic facts');
}
const automationTable =