Advanced Assurance Golden Write-Through
AdvancedAssuranceGoldenWriteThroughService is a Findings-owned local/QA path for the advanced-assurance-golden fixture.
The service consumes docs/qa/feature-checks/fixtures/advanced-assurance-golden.fixture.json and writes only Findings-owned state:
- a deterministic
finding.createdledger event throughILedgerEventWriteService - a projection through
LedgerProjectionReducerandIFindingProjectionRepository - a local Findings evidence bundle through
IEvidenceBundleService
It preserves the fixture’s stable finding ID (finding-golden-prod-cve-001) and stores the artifact digest, CVE, service, environment, reachability job, call path, and fixture-only advisory metadata as projection labels. Alerts may read artifact and vulnerability IDs from those labels when the finding ID is not the legacy tenant|artifact|vuln composite form.
Boundaries
This service is not a live end-to-end assurance pass. Its result explicitly keeps these claims false:
NotifyDeliveryClaimedEvidenceLockerPortablePackClaimedScenarioPassClaimed
Downstream Notify delivery rows, EvidenceLocker portable packs, UI behavior, and ASSURE scenario pass status require their own module-owned write-through and behavioral verification.
