From eecbc596b3ba6c66d4afc99cc49b62b4ee868417 Mon Sep 17 00:00:00 2001
From: Shakker <shakkerdroid@gmail.com>
Date: Tue, 12 May 2026 18:54:48 +0100
Subject: [PATCH] test: detail audit surface summary

---
 src/security/audit-summary.test.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/security/audit-summary.test.ts b/src/security/audit-summary.test.ts
index 9091c99816d..87189fbde5b 100644
--- a/src/security/audit-summary.test.ts
+++ b/src/security/audit-summary.test.ts
@@ -26,6 +26,15 @@ describe("security audit attack surface summary", () => {
     const findings = collectAttackSurfaceSummaryFindings(cfg);
     const summary = requireAttackSurfaceSummary(findings);
 
-    expect(summary.detail).toContain("trust model: personal assistant");
+    expect(summary.detail).toBe(
+      [
+        "groups: open=1, allowlist=1",
+        "tools.elevated: enabled",
+        "hooks.webhooks: enabled",
+        "hooks.internal: disabled",
+        "browser control: enabled",
+        "trust model: personal assistant (one trusted operator boundary), not hostile multi-tenant on one shared gateway",
+      ].join("\n"),
+    );
   });
 });