[mnkiefer]

Refactors server/internal/auditlifecycle.Scan so lifecycle classification and result-status derivation are separate, directly testable functions, and adds one debug log at scan completion. Behavior is unchanged.

Action: Reviewer should confirm Scan behavior is preserved and the log carries only scalar metadata; acceptance check is passing go -C server vet ./... and go -C server test ./....

Details

• Extracted classify (per-rebuild classification and tallies) and resultStatus (ok/attention/incomplete) from Scan. Status precedence is unchanged: incomplete, then attention, then ok.
• Added scanLog (cao:auditlifecycle) with one call at scan completion, logging only status, scanned count, finding count and tail-reached flag. Logging is off by default, and the call is outside every loop. It records no rebuild IDs, attributes, or errors.
• Added classify_test.go with table-driven tests that call the real functions on concrete values. They cover terminal, partial-history, gap, zero-time, clock-uncertain, pending and missing-terminal classifications, and the status precedence rules. No mocks or fakes.
• Validation: gofmt, go -C server vet ./... and go -C server test ./... all passed.

Control Plane

• Correlation ID: 40891685100-2895
• Central repository: githubnext/gh-cao
• Control plane run: https://github.com/githubnext/gh-cao/actions/runs/40891685100

Generated by SelfCare / Server Go Logging · copilot · auto · ~37 AIC · ⌖ ~1 AIC · ⊞ 14.8K · ◷

• expires on Nov 5, 2026, 2:46 PM UTC