chore(ci): cover dynamic value mapping obligations

[jakedoublev]

Adds BDD coverage for obligation triggers on existing attribute values entitled through a dynamic value mapping, including fulfillable, unfulfilled, and unentitled outcomes.

Summary by CodeRabbit

• Tests
  • Added coverage for obligations applied to existing attribute values through dynamic value mappings.
  • Verified access behavior when obligations are fulfilled, unfulfilled, or when entitlement is unavailable.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 12ee2666-0834-4ebd-9a71-2cb9383d7826

📥 Commits

Reviewing files that changed from the base of the PR and between 0514145 and 6e8a3dd.

📒 Files selected for processing (1)

• tests-bdd/features/dynamic-value-mapping-obligations.feature

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The BDD feature adds dynamic value mapping data and tests obligation handling for entitled users and users without entitlement.

Changes

Dynamic Value Mapping Obligations

Layer / File(s)	Summary
Dynamic entitlement obligation scenarios tests-bdd/features/dynamic-value-mapping-obligations.feature	The feature creates users, namespace metadata, an obligation trigger, a dynamic value mapping, and subject entities. Scenarios cover fulfilled and unfulfilled obligations and omit the obligation for non-entitled access.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 6e8a3

This change only adds localized BDD coverage for dynamic value mapping obligation outcomes, with no production behavior changes or actionable merge-blocking risk remaining.

Suggested reviewers: alkalescent

Poem

A rabbit mapped values in rows neat and bright

An obligation waited, prepared for the night
Fulfilled ones opened the gate
Unfulfilled ones returned their state
No entitlement? No obligation in sight

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: adding CI test coverage for obligations in dynamic value mappings. It is concise and specific.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch test/dynamic-value-obligation-bdd

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	253.521353ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	127.750917ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	442.425106ms
Throughput	226.03 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.510823435s
Average Latency	424.247174ms
Throughput	117.62 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@pull-3924-pull-3924
bats-test-results
✅ go@pull-3924-v0.9.0
✅ go@pull-3924-main
✅ go@main-pull-3924
✅ js@main-v0.9.0
✅ java@main-main
✅ go@main-v0.9.0
✅ java@main-pull-3924
✅ java@main-v0.9.0
✅ js@main-main
✅ js@main-pull-3924
opentdfplatformLKZ6T0.dockerbuild
govulncheck-failure-3
govulncheck-failure-1
govulncheck-failure-2
govulncheck-failure-5
govulncheck-failure-8
govulncheck-failure-0
govulncheck-failure-4

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• examples
• otdfctl
• sdk
• service
• lib/ocrypto
• lib/fixtures
• tests-bdd

See the workflow run for details.