ehoandClaude Opus 5 07bb6277c0 refactor(backend): extract brief guards into Domain/Letters/BriefRules.cs (RB-30) ...

BriefStore's five guard decisions (Save, Submit, Send, and the shared
Approve/Reject review path) were pure functions of status tag, actor role,
and entity completeness, but each sat inside a lock-held, DB-opening
method. A spec could not exercise the decision without a booted host and
a real SQLite file.

Extract the guards into a pure Domain/Letters/BriefRules.cs. BriefStore
keeps its lock, its Db.Create(), its static shape, and every method
signature — only the if cascades move. Add BriefRuleTests.cs (29
assertions, ~120 ms, no host boot) covering every branch, including the
rejected-to-draft reopen on save, the required-filled gate on submit,
and the non-drafter and self-review denials. The existing host-booting
brief endpoint tests are unchanged and still pass, proving the
extraction preserved behaviour.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-27 20:42:00 +02:00

..

adr-c-001.md

docs(adr): land ADR-C-001, ADR-C-003, ADR-C-007 and ADR-C-009

2026-08-27 18:29:05 +02:00

adr-c-003.md

docs(adr): land ADR-C-001, ADR-C-003, ADR-C-007 and ADR-C-009

2026-08-27 18:29:05 +02:00

adr-c-006.md

docs: refactoring-backlog workspace — baseline + 3 Phase 1 agents

2026-08-26 16:44:32 +02:00

adr-c-007.md

docs(adr): land ADR-C-001, ADR-C-003, ADR-C-007 and ADR-C-009

2026-08-27 18:29:05 +02:00

adr-c-009.md

docs(adr): land ADR-C-001, ADR-C-003, ADR-C-007 and ADR-C-009

2026-08-27 18:29:05 +02:00

rb-01.md

fix(uploads): delete the dead POST /registrations (RB-06)

2026-08-27 11:04:03 +02:00

rb-02.md

fix(uploads): delete the dead POST /registrations (RB-06)

2026-08-27 11:04:03 +02:00

rb-03.md

fix(uploads): delete the dead POST /registrations (RB-06)

2026-08-27 11:04:03 +02:00

rb-04.md

fix(uploads): delete the dead POST /registrations (RB-06)

2026-08-27 11:04:03 +02:00

rb-05.md

fix(uploads): delete the dead POST /registrations (RB-06)

2026-08-27 11:04:03 +02:00

rb-06.md

fix(uploads): delete the dead POST /registrations (RB-06)

2026-08-27 11:04:03 +02:00

rb-07.md

feat(audit): record the allow path, not just the denial (RB-07)

2026-08-27 13:12:22 +02:00

rb-08.md

fix(uploads): route the admin delete through CasesAdmin (RB-08)

2026-08-27 13:55:41 +02:00

rb-09.md

docs: record the gen:api regression found while verifying RB-09

2026-08-27 14:22:26 +02:00

rb-10.md

test(auth): extract and spec the stored-session parse boundary (RB-10)

2026-08-27 14:08:06 +02:00

rb-11.md

fix(brief): keep the dev hatches out of production builds (RB-11)

2026-08-27 14:20:47 +02:00

rb-12.md

test(backend): assert every route is authz-gated (RB-12)

2026-08-27 16:36:30 +02:00

rb-13.md

refactor(auth): land Session -> Principal, add MedewerkerAdapter (RB-13)

2026-08-27 16:54:26 +02:00

rb-14.md

ci: gate on known advisories in the .NET dependency tree (RB-14)

2026-08-27 16:24:16 +02:00

rb-15.md

fix(backend): gate Swagger + the OpenAPI doc behind IsDevelopment (RB-15)

2026-08-27 16:40:23 +02:00

rb-16.md

fix(backend): 400 instead of 500 on an unparseable peildatum (RB-16)

2026-08-27 16:53:29 +02:00

rb-17.md

refactor(shared): split runResult out of runSubmit (RB-17)

2026-08-27 16:31:13 +02:00

rb-18.md

fix(backend): key IdempotencyStore on caller + idem key (RB-18)

2026-08-27 18:27:52 +02:00

rb-19.md

refactor(backend): reorder Program.cs sections into reads-then-writes (RB-19)

2026-08-27 19:16:05 +02:00

rb-20.md

fix(ssp): route cancel/delete through runSubmit, surface the error (RB-20)

2026-08-27 18:32:51 +02:00

rb-21.md

refactor(registratie): extract the read half of createDraftSync (RB-21)

2026-08-27 18:23:13 +02:00

rb-22.md

feat(brief): tolerate a 404 on GET /brief with a one-shot reset (RB-22)

2026-08-27 18:43:27 +02:00

rb-23.md

fix(brief): make GET /brief a pure query, 404 when absent (RB-23)

2026-08-27 19:01:06 +02:00

rb-30.md

refactor(backend): extract brief guards into Domain/Letters/BriefRules.cs (RB-30)

2026-08-27 20:42:00 +02:00