package organization

import "testing"

func TestTenantSafeTopologyExposureDoesNotExposeCoreMesh(t *testing.T) {
	value := tenantSafeTopologyExposure()
	forbidden := []string{
		"core_node_id",
		"mesh_route",
		"cluster_private_topology",
		"certificate_serial",
	}
	for _, token := range forbidden {
		if value == token {
			t.Fatalf("topology exposure leaked forbidden token %q", token)
		}
	}
	if value != "tenant_safe_no_core_mesh_topology" {
		t.Fatalf("unexpected topology exposure marker: %q", value)
	}
}