- Outcome
- PASS22m
- Reward
- 100.0%
- Checks passed
- 26 / 26
- Runtime
- 21m 32s
- Harness
- Cursor CLI
- Task version
- v3.1.3
Checks
| Check | Result | Credit | Weight |
|---|---|---|---|
| baseline: the app serves and its database is migrated | PASS | 100% | 1% |
| baseline: a signed-in person's session is recognized | PASS | 100% | 1% |
| migration: the three people on the old Settings list are admins | PASS | 100% | 5% |
| principals API: an admin creates email and domain principals and lists them | PASS | 100% | 7% |
| principals API: values are stored normalized, one principal per email or domain | PASS | 100% | 5% |
| principals API: an admin updates a principal | PASS | 100% | 5% |
| principals API: an admin removes a principal | PASS | 100% | 4% |
| principals API: invalid writes get a 400 and change nothing | PASS | 100% | 6% |
| principals API: admins always hold every permission | PASS | 100% | 5% |
| principals API: only admins may use it | PASS | 100% | 5% |
| access me: reports the caller's own principal, or null | PASS | 100% | 5% |
| resolution: an email principal overrides its domain's | PASS | 100% | 5% |
| resolution: role changes take effect on the next request | PASS | 100% | 5% |
| resolution: the old hardcoded list no longer grants Settings | PASS | 100% | 5% |
| settings APIs: company setup admits only admins | PASS | 100% | 5% |
| settings APIs: the integrations list and credential reads admit only admins | PASS | 100% | 5% |
| settings APIs: integration setup writes admit only admins | PASS | 100% | 5% |
| settings APIs: OAuth starts and callbacks admit only admins | PASS | 100% | 4% |
| settings APIs: the retention upload and diff admit only admins | PASS | 100% | 4% |
| settings pages: only admins can open them | PASS | 100% | 5% |
| ui: Settings lists every principal on its Access page | PASS | 100% | 3% |
| ui: a principal added on the Access page starts with all companies, dashboards (view) and features | PASS | 100% | 4% |
| ui: the header shows the Settings gear only to admins | PASS | 100% | 3% |
| preserve: dashboards and catalogs stay open to everyone signed in | PASS | 100% | 0% |
| preserve: signed-out requests are turned away as before | PASS | 100% | 0% |
| preserve: an existing admin's Settings APIs answer as before | PASS | 100% | 0% |