From 59ad128761856834b407b1dc61b160373b9900be Mon Sep 17 00:00:00 2001
From: Claude Code <kjh2064@gmail.com>
Date: Mon, 3 Aug 2026 15:08:12 +0900
Subject: [PATCH] Slice B2: Add Researcher role to GetShadowRunPollingEndpoint
 authorization

- Add Researcher to Roles() list for shadow run polling
- Enables Gate 3 test users to poll job status
- Phase 2 monitoring requirement

Source: Gate 3 test uses Researcher role; GetShadowRunPollingEndpoint requires authorization
Decision: Expand endpoint RBAC to include Researcher

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
---
 .../Features/ShadowRun/GetShadowRunPollingEndpoint.cs           | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs b/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs
index e44d9231..637fb3c5 100644
--- a/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs
+++ b/src/KArtSell.Host/Features/ShadowRun/GetShadowRunPollingEndpoint.cs
@@ -28,7 +28,7 @@ public class GetShadowRunPollingEndpoint : Endpoint<GetShadowRunPollingRequest,
     public override void Configure()
     {
         Get("/shadow-runs/{RunId}");  // RoutePrefix "api" added automatically in Program.cs
-        Roles("Admin", "Analyst");  // RBAC: Only Admin or Analyst can poll
+        Roles("Admin", "Analyst", "Researcher");  // RBAC: Admin, Analyst, or Researcher can poll (Gate 3 testing)
     }
 
     public override async Task HandleAsync(GetShadowRunPollingRequest req, CancellationToken ct)