ONE-SYSTEM M3.2.9 — REAL AUTHENTICATION FUNCTIONAL INTEGRATION GATE v0.1
============================================================================
DEVELOPMENT ONLY / TEMPORARY DATA / TRANSACTION ROLLBACK

[0] PRE-FLIGHT

[1] CREATE CONTROLLED SECURITY DOMAIN

[2] AUTHENTICATION

[3] SESSION / CURRENT USER

[4] AUTHORIZATION / TENANT ISOLATION

[5] USER / ROLE / MODULE LIFECYCLE

[6] LOGIN FAILURE PATH

[7] SESSION REVOCATION CONTRACT

[8] GLOBAL USERNAME UNIQUENESS

[9] ROLLBACK

============================================================================
[RESULTS]
PASS — Database connection
PASS — AuthService loaded
PASS — SessionManager loaded
PASS — AuthorizationService loaded
PASS — Table core_tenants
PASS — Table core_users
PASS — Table core_roles
PASS — Table core_user_roles
PASS — Table core_role_permissions
PASS — Table core_permissions
PASS — Table core_modules
PASS — Table core_auth_login_attempts
PASS — Table core_auth_sessions
PASS — Expected database — amiga723_one_system_vnext_v02
PASS — Tenant A created
PASS — Tenant B created
PASS — Module A/B created
PASS — Permission A/B created
PASS — Role A/B created
PASS — User A/B created
PASS — User → role → permission
PASS — Valid credentials => login success
PASS — Authentication created database session
PASS — Session user_id matches
PASS — Session tenant_id matches
PASS — Session token hash is SHA-256
PASS — Session initially not revoked
PASS — Session expires in future
PASS — Successful login attempt recorded
PASS — Session resolves across cookie boundary
PASS — Current session user matches
PASS — Current session tenant matches
PASS — Current user resolves
PASS — Current user tenant matches
PASS — User A own permission => ALLOW
PASS — User A foreign permission => DENY
PASS — User A permission on wrong module => DENY
PASS — User B own permission => ALLOW
PASS — Cross-tenant user/permission => DENY
PASS — Unknown user => DENY
PASS — Unknown permission => DENY
PASS — Unknown module => DENY
PASS — Revoked session => invalid
PASS — Inactive user => login denied
PASS — Inactive user => authorization denied
PASS — Restored user => authorization allowed
PASS — Inactive role => DENY
PASS — Restored role => ALLOW
PASS — Inactive module => DENY
PASS — Restored module => ALLOW
PASS — Wrong password => denied
PASS — Failed login attempt recorded
PASS — Known temporary session resolves
PASS — Revoked session => invalid
PASS — Revocation persisted in transaction
PASS — No duplicate usernames in controlled context
PASS — Global unique username index remains present
PASS — Entire test transaction rolled back

[FINAL]
Status: PASS
M3.2.9 real authentication/session/RBAC integration gate passed.
Temporary test data was rolled back.
No permanent application data should remain.
DELETE THIS FILE AFTER TESTING.