From d64b3c5d85bc020ffb4f73c2b67045ba0ace14c0 Mon Sep 17 00:00:00 2001
From: "pulse-triage[bot]"
 <249995291+pulse-triage[bot]@users.noreply.github.com>
Date: Fri, 9 Oct 2026 14:21:39 +0100
Subject: [PATCH] Match the proxy trust-boundary check to the integrated
 heading

Combined exact-source documentation validation passed 344 checks but this assertion errored before inspecting the accepted header-trust section: its delimiter retained a removed Unicode variation selector. Match the current heading while preserving every role, authenticator, replacement and reachability assertion. Documentation and runtime source are unchanged.

Change-source: pulse-maintainer
---
 scripts/tests/test_authentication_diagnostic_docs.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/tests/test_authentication_diagnostic_docs.py b/scripts/tests/test_authentication_diagnostic_docs.py
index d5093c39bf..4f4de37aec 100644
--- a/scripts/tests/test_authentication_diagnostic_docs.py
+++ b/scripts/tests/test_authentication_diagnostic_docs.py
@@ -215,7 +215,7 @@ class AuthenticationDiagnosticDocsTest(unittest.TestCase):
                        "existing administrator recovery path"):
             with self.subTest(phrase=phrase):
                 self.assertIn(phrase, proxy if phrase == "actual group separator" else quick)
-        boundary = proxy.split("## ⚠️ Header Trust Boundary", 1)[1].split("## 📦 Examples", 1)[0]
+        boundary = proxy.split("## ⚠ Header Trust Boundary", 1)[1].split("## 📦 Examples", 1)[0]
         for phrase in ("replace", "never append", "first", "username and configured role header",
                        "must also come from the successful authenticator", "not be reachable"):
             self.assertIn(phrase, boundary)