Initial project snapshot

backend/internal/modules/organization/admin_summary_test.go

@@ -0,0 +1,21 @@
+package organization
+
+import "testing"
+
+func TestTenantSafeTopologyExposureDoesNotExposeCoreMesh(t *testing.T) {
+	value := tenantSafeTopologyExposure()
+	forbidden := []string{
+		"core_node_id",
+		"mesh_route",
+		"cluster_private_topology",
+		"certificate_serial",
+	}
+	for _, token := range forbidden {
+		if value == token {
+			t.Fatalf("topology exposure leaked forbidden token %q", token)
+		}
+	}
+	if value != "tenant_safe_no_core_mesh_topology" {
+		t.Fatalf("unexpected topology exposure marker: %q", value)
+	}
+}