TS
Vendor Dual-Signal Intelligence — QA Tracker
Phase 1 + 1.5 + 2 · Crown Jewel · VENDOR_SCAN_MOCK=true
0 pass0 fail0 skip0% done
Filter:
Onboarding + Eligibility
01Vendor onboarding — happy path
02Vendor onboarding — eligibility blocked (5 cases)
Baseline + Drift
03Establish baseline via internal assessment
04Trigger first drift via baseline manipulation
05Posture Divergence banner copy check
Analyst Actions
06Acknowledge drift event
07Posture Divergence does NOT clear on score recovery
08Accept with rationale → divergence clears
Reassessment
09Reassessment guardrail blocks duplicates
12Reassessment completion auto-closes drift event
SLA Escalation
10SLA cron pauses clock on linked_in_progress
11SLA escalation fires for open severe event past due
Shodan Integration
13Shodan triggers critical CVE event
14Shodan failure isolation
Config + Admin
15VendorMonitoringConfig form — RBAC + validation
UI / Filters
16Vendor list drift columns and filters
17Executive dashboard heatmap
Exports
18Drift history export — single vendor
19Drift history export — org-wide with filters
Cron Jobs
20Nightly scan cron — rate limit and system org skip
21rawPayload cold storage archive cron
Security
22Cron auth fail-closed — all 5 routes
Effy + Cross-Tenant
23Effy Threat Intel agent queries
24Cross-tenant isolation regression
AUDITOR Role
25AUDITOR full read sweep
Sign-off
Tester
Date
Verdict