up

src/Policy/__Tests/StellaOps.Policy.Tests/PolicyEvaluationTests.cs

@@ -34,16 +34,20 @@ public sealed class PolicyEvaluationTests
             source: "community",
             tags: ImmutableArray.Create("reachability:indirect"));
 
-        var verdict = PolicyEvaluation.EvaluateFinding(document, config, finding);
+        var verdict = PolicyEvaluation.EvaluateFinding(document, config, finding, out var explanation);
 
-        Assert.Equal(PolicyVerdictStatus.Blocked, verdict.Status);
-        Assert.Equal(19.5, verdict.Score, 3);
-
-        var inputs = verdict.GetInputs();
-        Assert.Equal(50, inputs["severityWeight"]);
-        Assert.Equal(0.65, inputs["trustWeight"], 3);
-        Assert.Equal(0.6, inputs["reachabilityWeight"], 3);
-        Assert.Equal(19.5, inputs["baseScore"], 3);
+        Assert.Equal(PolicyVerdictStatus.Blocked, verdict.Status);
+        Assert.Equal(19.5, verdict.Score, 3);
+
+        var inputs = verdict.GetInputs();
+        Assert.Equal(50, inputs["severityWeight"]);
+        Assert.Equal(0.65, inputs["trustWeight"], 3);
+        Assert.Equal(0.6, inputs["reachabilityWeight"], 3);
+        Assert.Equal(19.5, inputs["baseScore"], 3);
+
+        Assert.NotNull(explanation);
+        Assert.Equal(PolicyVerdictStatus.Blocked, explanation!.Decision);
+        Assert.Equal("BlockMedium", explanation.RuleName);
     }
 
     [Fact]
@@ -79,17 +83,20 @@ public sealed class PolicyEvaluationTests
             PolicySeverity.Critical,
             tags: ImmutableArray.Create("reachability:entrypoint"));
 
-        var verdict = PolicyEvaluation.EvaluateFinding(document, config, finding);
+        var verdict = PolicyEvaluation.EvaluateFinding(document, config, finding, out var explanation);
 
-        Assert.Equal(PolicyVerdictStatus.Ignored, verdict.Status);
-        Assert.True(verdict.Quiet);
-        Assert.Equal("QuietIgnore", verdict.QuietedBy);
-        Assert.Equal(10, verdict.Score, 3);
-
-        var inputs = verdict.GetInputs();
-        Assert.Equal(90, inputs["baseScore"], 3);
-        Assert.Equal(config.IgnorePenalty, inputs["ignorePenalty"]);
-        Assert.Equal(config.QuietPenalty, inputs["quietPenalty"]);
+        Assert.Equal(PolicyVerdictStatus.Ignored, verdict.Status);
+        Assert.True(verdict.Quiet);
+        Assert.Equal("QuietIgnore", verdict.QuietedBy);
+        Assert.Equal(10, verdict.Score, 3);
+
+        var inputs = verdict.GetInputs();
+        Assert.Equal(90, inputs["baseScore"], 3);
+        Assert.Equal(config.IgnorePenalty, inputs["ignorePenalty"]);
+        Assert.Equal(config.QuietPenalty, inputs["quietPenalty"]);
+
+        Assert.NotNull(explanation);
+        Assert.Equal(PolicyVerdictStatus.Ignored, explanation!.Decision);
     }
 
     [Fact]
@@ -121,16 +128,19 @@ public sealed class PolicyEvaluationTests
             PolicySeverity.Unknown,
             tags: ImmutableArray.Create("reachability:unknown", "unknown-age-days:5"));
 
-        var verdict = PolicyEvaluation.EvaluateFinding(document, config, finding);
+        var verdict = PolicyEvaluation.EvaluateFinding(document, config, finding, out var explanation);
 
-        Assert.Equal(PolicyVerdictStatus.Blocked, verdict.Status);
-        Assert.Equal(30, verdict.Score, 3); // 60 * 1 * 0.5
-        Assert.Equal(0.55, verdict.UnknownConfidence ?? 0, 3);
-        Assert.Equal("medium", verdict.ConfidenceBand);
-        Assert.Equal(5, verdict.UnknownAgeDays ?? 0, 3);
-
-        var inputs = verdict.GetInputs();
-        Assert.Equal(0.55, inputs["unknownConfidence"], 3);
-        Assert.Equal(5, inputs["unknownAgeDays"], 3);
-    }
-}
+        Assert.Equal(PolicyVerdictStatus.Blocked, verdict.Status);
+        Assert.Equal(30, verdict.Score, 3); // 60 * 1 * 0.5
+        Assert.Equal(0.55, verdict.UnknownConfidence ?? 0, 3);
+        Assert.Equal("medium", verdict.ConfidenceBand);
+        Assert.Equal(5, verdict.UnknownAgeDays ?? 0, 3);
+
+        var inputs = verdict.GetInputs();
+        Assert.Equal(0.55, inputs["unknownConfidence"], 3);
+        Assert.Equal(5, inputs["unknownAgeDays"], 3);
+
+        Assert.NotNull(explanation);
+        Assert.Equal(PolicyVerdictStatus.Blocked, explanation!.Decision);
+    }
+}