From a33cde3034fea4242ccae544881a6fb1dd12c0d4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= <mbombeck@gmail.com>
Date: Thu, 6 Aug 2026 05:06:36 +0200
Subject: [PATCH] test(02-12): cover defensive record presentation

- reject inconsistent access levels before chrome can elevate them\n- fall back to the caller record for malformed payloads
---
 .../shared-record-navigation.test.tsx          | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/src/__tests__/shared-record-navigation.test.tsx b/src/__tests__/shared-record-navigation.test.tsx
index 953e1cb07..3413dc1a3 100644
--- a/src/__tests__/shared-record-navigation.test.tsx
+++ b/src/__tests__/shared-record-navigation.test.tsx
@@ -114,4 +114,22 @@ describe("shared-record navigation", () => {
       }),
     ).toEqual({ access: "manage", recordKind: "managed" });
   });
+
+  it("fails closed when a malformed entry reaches presentation", () => {
+    expect(
+      resolveRecordPresentation({
+        level: "manage",
+        canWrite: false,
+        recordKind: "managed",
+      } as never),
+    ).toEqual({ access: "view", recordKind: "self" });
+
+    expect(
+      resolveRecordPresentation({
+        level: "unknown",
+        canWrite: true,
+        recordKind: "shared",
+      } as never),
+    ).toEqual({ access: "view", recordKind: "self" });
+  });
 });