chore(authz): add V2 multi-resource scale regression coverage

[strantalis]

Proposed Changes

• Add generic BDD regression coverage with 6,011 subject mappings, 6,000 resource mappings, and three resource decisions.
• Exercise the public V2 GetDecisionMultiResource endpoint with synchronized concurrency levels of 1, 10, 25, and 50.
• Fail when any request exceeds five seconds, fails, or returns a decision inconsistent with its peers.
• Publish wall, median, p95, maximum, and failure-count results in the GitHub Actions job summary.
• Keep fixture setup outside the measured operation while exercising the running platform through its public endpoint.

Testing

• make fmt
• cd tests-bdd && go test ./... -race
• cd sdk && go test -run TestREADMECodeBlocks
• Focused local BDD runs for concurrency 1, 10, 25, and 50
• actionlint .github/workflows/checks.yaml

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	218.567917ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	128.385138ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	455.377871ms
Throughput	219.60 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m1.06718646s
Average Latency	609.165679ms
Throughput	81.88 requests/second

[github-actions]

X-Test Results

✅ go@main-main
bats-test-results
✅ go@main-pull-3983
✅ go@pull-3983-pull-3983
✅ go@main-v0.9.0
✅ go@pull-3983-v0.9.0
✅ java@main-pull-3983
cukes-report
✅ go@pull-3983-main
✅ js@main-pull-3983
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
✅ java@main-main
opentdfplatform043EI5.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	219.610593ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	133.33853ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	442.686229ms
Throughput	225.89 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	59.278758402s
Average Latency	590.825534ms
Throughput	84.35 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@main-pull-3983
bats-test-results
✅ go@pull-3983-pull-3983
✅ go@main-v0.9.0
✅ java@main-pull-3983
✅ go@pull-3983-main
cukes-report
✅ go@pull-3983-v0.9.0
✅ js@main-main
✅ java@main-v0.9.0
✅ java@main-main
✅ js@main-v0.9.0
✅ js@main-pull-3983
govulncheck-failure-3
govulncheck-failure-8
opentdfplatformTZQVMF.dockerbuild
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	241.711774ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	135.885272ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	417.498598ms
Throughput	239.52 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	57.622400157s
Average Latency	574.835208ms
Throughput	86.77 requests/second

[github-actions]

X-Test Results

✅ go@pull-3983-pull-3983
✅ go@main-pull-3983
✅ go@pull-3983-main
bats-test-results
✅ go@main-main
✅ go@main-v0.9.0
cukes-report
✅ java@main-pull-3983
✅ js@main-main
✅ js@main-pull-3983
✅ go@pull-3983-v0.9.0
✅ java@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
opentdfplatformZ9U5MG.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	254.796586ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	149.310138ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	511.986487ms
Throughput	195.32 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m3.943596529s
Average Latency	638.020985ms
Throughput	78.19 requests/second

[github-actions]

X-Test Results

cukes-report
✅ go@main-main
✅ go@pull-3983-main
✅ go@pull-3983-v0.9.0
✅ go@pull-3983-pull-3983
✅ java@main-pull-3983
✅ go@main-v0.9.0
✅ java@main-v0.9.0
✅ java@main-main
bats-test-results
✅ go@main-pull-3983
✅ js@main-pull-3983
✅ js@main-main
✅ js@main-v0.9.0
govulncheck-failure-3
opentdfplatform6WEJX0.dockerbuild
govulncheck-failure-8
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	252.394914ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	131.582559ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	420.559686ms
Throughput	237.78 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m0.019458021s
Average Latency	598.801753ms
Throughput	83.31 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• otdfctl
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ go@pull-3983-pull-3983
✅ go@main-main
✅ go@pull-3983-v0.9.0
✅ go@pull-3983-main
cukes-report
✅ java@main-pull-3983
✅ go@main-v0.9.0
✅ go@main-pull-3983
✅ java@main-main
✅ js@main-pull-3983
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
opentdfplatformFD4SV2.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1