fix: harden platform audit coverage

backend/api/internal/logic/platform/resource_test.go

@@ -276,6 +276,26 @@ func TestResourceResponseDoesNotExposeAutoIncrementRelationIDs(t *testing.T) {
 	}
 }
 
+func TestListSafetyEventDisposalsReturnsOnlyTheRequestedEventHistory(t *testing.T) {
+	_, mock := setupPlatformRoleDatabase(t)
+	mock.ExpectQuery(regexp.QuoteMeta(`SELECT count(*) FROM "saf_event_disposal" WHERE saf_event_identity = $1`)).
+		WithArgs("event-a").
+		WillReturnRows(sqlmock.NewRows([]string{"count"}).AddRow(1))
+	mock.ExpectQuery(regexp.QuoteMeta(`SELECT * FROM "saf_event_disposal" WHERE saf_event_identity = $1 ORDER BY created_at asc LIMIT $2`)).
+		WithArgs("event-a", 20).
+		WillReturnRows(sqlmock.NewRows([]string{"id", "identity", "created_at", "updated_at", "status", "version", "saf_event_identity", "action", "reason", "operator_identity"}).
+			AddRow(uint64(9), "disposal-a", nil, nil, "enabled", 1, "event-a", "close", "resolved", "operator-a"))
+
+	ctx, recorder := updateContext(http.MethodGet, "/safety/saf_event/event-a/disposals", "event-a", nil)
+	ListSafetyEventDisposals(ctx)
+
+	assertResponseCode(t, recorder, 0)
+	if !strings.Contains(recorder.Body.String(), `"saf_event_identity":"event-a"`) || strings.Contains(recorder.Body.String(), `"id":`) {
+		t.Fatalf("disposal history did not keep the event identity-only shape: %s", recorder.Body.String())
+	}
+	assertMockExpectations(t, mock)
+}
+
 func TestListGasAccountProjectsGasBasicIdentityAndNeverReturnsRelationID(t *testing.T) {
 	_, mock := setupPlatformRoleDatabase(t)
 	mock.ExpectQuery(regexp.QuoteMeta(`SELECT count(*) FROM "gas_account"`)).

backend/api/internal/logic/platform/task4_resources.go

@@ -423,6 +423,22 @@ func stripInternalIDs(value any) any {
 
 // DisposeSafetyEvent atomically updates an event and appends its operator-owned
 // action record. Disposal records deliberately have no update or delete route.
+func ListSafetyEventDisposals(ctx *gin.Context) {
+	page, size := pageSize(ctx)
+	var list []models.SafEventDisposal
+	query := impl.DBService.Model(&models.SafEventDisposal{}).Where("saf_event_identity = ?", ctx.Param("identity"))
+	var total int64
+	if err := query.Count(&total).Error; err != nil {
+		infra.Response.Error(ctx, err)
+		return
+	}
+	if err := query.Order("created_at asc").Offset((page - 1) * size).Limit(size).Find(&list).Error; err != nil {
+		infra.Response.Error(ctx, err)
+		return
+	}
+	infra.Response.Success(ctx, gin.H{"total": total, "list": resourceResponse(list)})
+}
+
 func DisposeSafetyEvent(ctx *gin.Context) {
 	claims, err := middleware.ParseAuth(ctx)
 	if err != nil {