mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-09 18:32:52 +00:00
3343630171
The scan-detail banner only recomputed its verdict when honor-suppressions was enabled; otherwise it returned the snapshot stored at scan time. The deploy gate always re-evaluates current policies, so with honor-suppressions off a policy lifecycle change drifted the banner from the gate: disabling (or editing) an enabled policy left the banner claiming a violation the gate would now pass, and tightening a passing policy left the banner reporting a pass the gate would block. Recompute the banner verdict unconditionally so it agrees with the gate across the full policy and suppression lifecycle, regardless of the honor-suppressions setting. The recompute already reads that setting itself (so a raw or suppression-filtered verdict is chosen correctly), returns no verdict when no policy matches (clearing the banner to match a passing gate), stays read-only, and still falls back to the stored snapshot if it throws.