feat(delivery): expose credential escrow scorecard

apps/api/tests/test_delivery_closure_workbench_api.py

@@ -169,6 +169,40 @@ def test_delivery_closure_workbench_endpoint_returns_product_summary():
         data["summary"]["production_deploy_non110_runner_remaining_blocker_count"]
         == 3
     )
+    assert (
+        data["summary"][
+            "backup_credential_escrow_intake_scorecard_schema_version"
+        ]
+        == "awoooi_post_reboot_credential_escrow_intake_scorecard_v1"
+    )
+    assert (
+        "scripts/reboot-recovery/post-reboot-credential-escrow-intake-scorecard.py"
+        in data["summary"]["backup_credential_escrow_intake_scorecard_verifier"]
+    )
+    assert data["summary"]["backup_credential_escrow_intake_status"] == (
+        "blocked_waiting_non_secret_credential_escrow_evidence"
+    )
+    assert data["summary"]["backup_credential_escrow_active_gate_present"] is True
+    assert data["summary"]["backup_credential_escrow_preflight_status"] == (
+        "blocked_waiting_owner_response_content"
+    )
+    assert data["summary"]["backup_credential_escrow_required_item_count"] == 5
+    assert data["summary"]["backup_credential_escrow_effective_missing_count"] == 5
+    assert (
+        data["summary"]["backup_credential_escrow_owner_response_received_count"]
+        == 0
+    )
+    assert (
+        data["summary"]["backup_credential_escrow_owner_response_accepted_count"]
+        == 0
+    )
+    assert data["summary"]["backup_credential_escrow_runtime_gate_count"] == 0
+    assert (
+        data["summary"]["backup_credential_escrow_secret_value_collection_allowed"]
+        is False
+    )
+    assert data["summary"]["backup_credential_marker_write_authorized_count"] == 0
+    assert data["summary"]["backup_credential_escrow_forbidden_true_field_count"] == 0
     assert data["summary"]["github_write_channel_ready"] is False
     assert data["summary"]["github_account_status"] == "suspended"
     assert data["summary"]["github_account_suspended"] is True
@@ -380,6 +414,37 @@ def test_delivery_closure_workbench_endpoint_returns_product_summary():
     assert lanes["gitea"]["metric"]["kind"] == "workflow_count"
     assert lanes["runtime"]["metric"]["kind"] == "surface_count"
     assert lanes["backup"]["metric"]["kind"] == "readiness_row_count"
+    assert (
+        lanes["backup"]["metric"][
+            "credential_escrow_intake_scorecard_schema_version"
+        ]
+        == "awoooi_post_reboot_credential_escrow_intake_scorecard_v1"
+    )
+    assert lanes["backup"]["metric"]["credential_escrow_intake_status"] == (
+        "blocked_waiting_non_secret_credential_escrow_evidence"
+    )
+    assert lanes["backup"]["metric"]["credential_escrow_active_gate_present"] is True
+    assert (
+        lanes["backup"]["metric"]["credential_escrow_effective_missing_count"]
+        == 5
+    )
+    assert (
+        lanes["backup"]["metric"]["credential_escrow_owner_response_received_count"]
+        == 0
+    )
+    assert (
+        lanes["backup"]["metric"]["credential_escrow_owner_response_accepted_count"]
+        == 0
+    )
+    assert lanes["backup"]["metric"]["credential_escrow_runtime_gate_count"] == 0
+    assert (
+        lanes["backup"]["metric"][
+            "credential_escrow_secret_value_collection_allowed"
+        ]
+        is False
+    )
+    assert lanes["backup"]["metric"]["credential_marker_write_authorized_count"] == 0
+    assert lanes["backup"]["metric"]["credential_escrow_forbidden_true_field_count"] == 0
     assert sources["github_private_backup"]["loaded"] is True
     assert sources["production_deploy_readback"]["loaded"] is True
     assert (