(mess) Stuffing commit.

2026-05-20 16:09:43 -07:00
parent 457a3495ab
commit 31530fe899
18 changed files with 3127 additions and 137 deletions
@@ -280,8 +280,8 @@ app.get('/users/:id', {
        type: 'object',
        properties: { id: { type: 'string' } },
        'x-ensures': [
-          // Standard APOSTL + extension predicates
-          'status:200',
+          // Behavioral: returned user must match the requested id
+          'response_body(this).id == request_params(this).id',
          'graph_check(this).user.can_read_user == true',
          'partial_graph(this).tenant.accessible == true',
        ],