test: strengthen weak assertions in safe_outputs analyzer tests

[github-actions]

Test Suite Reduction: src/audit/analyzers/safe_outputs.rs

What was wrong

• aggregate_detection_gate_rejects_all_proposals: The test never checked the summary struct at all — meaning not_processed_count (the primary metric tracking how many proposals were rejected by the detection gate) was completely unasserted. Additionally, only findings[0].severity was checked; category and title were not verified, so a regression in the finding content would have passed silently.

• mixed_execution_outcomes_are_rolled_up: The rollup struct was asserted to exist and have specific by_reason entries, but rollup.total_rejected (the headline count) was never pinned. A bug in total_rejected = rejected_by_execution_count + not_processed_count could go undetected.

Changes

Test	Action	Reason
aggregate_detection_gate_rejects_all_proposals	Rewritten (assertions added)	Missing summary block; finding content unverified
mixed_execution_outcomes_are_rolled_up	Rewritten (assertion added)	rollup.total_rejected was unasserted

aggregate_detection_gate_rejects_all_proposals now asserts:

• summary.proposed_count == 2
• summary.not_processed_count == 2 (key gate-rejection metric)
• summary.executed_count == 0
• summary.rejected_by_execution_count == 0
• findings[0].category == "safe_outputs"
• findings[0].title == "Detection rejected 2 safe output(s)"

mixed_execution_outcomes_are_rolled_up now asserts:

• rollup.total_rejected == 2

Verification

• cargo test: all 1766 tests pass ✅
• cargo clippy --all-targets --all-features: no warnings or errors ✅

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• spsprodeus21.vssps.visualstudio.com
• spsprodweu4.vssps.visualstudio.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "spsprodeus21.vssps.visualstudio.com"
    - "spsprodweu4.vssps.visualstudio.com"

See Network Configuration for more information.

Generated by Test Reducer · sonnet46 2.8M · ◷