schalli
ba21b0c74a
Ran the Phase 16 browser walkthrough against alpha.tessera.ctl.de with the real AD (balios.ctl.local) behind it. - Test 5 (AD group import section): passed. 236 discovered entries, none of them OUs; selection count, disabled-at-zero button, already-imported badge, result block and the discovery error state all behave as specified. - Test 6 (group dialog, three states): passed. Includes the WR-02 case — a 409 name collision stays visible in the dialog with the input preserved. - Test 7: partial. Error path of the sync report and the grants-matrix column search under both internal and AD name pass; the number rows of a successful sync run are still open because a real sync was skipped by request (no group/OU filter set, so it would import every person under DC=ctl,DC=local). Tests 1-4 and 8 remain open — they need AD write access or are backstop assertions. CN=Claude_VT stays imported on alpha because tests 3 and 4 need it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>