API GATEWAY COVERAGE DISTRIBUTION ================================== OVERALL: 18.95% Line Coverage (1,310/6,914 lines) COVERAGE TIERS: =============== █████████░ 100% Coverage (1 module - 62 lines) ├─ auth/mfa/verification.rs ✅ ████████░░ 80-99% Coverage (4 modules - 462 lines) ├─ auth/mfa/enrollment.rs (93.26%) ├─ config/validator.rs (90.69%) ├─ auth/mfa/totp.rs (88.56%) └─ auth/mfa/qr_code.rs (86.96%) ████░░░░░░ 40-79% Coverage (5 modules - 908 lines) ├─ grpc/server.rs (72.88%) ├─ metrics/exporter.rs (57.97%) ├─ auth/mfa/backup_codes.rs (57.36%) ├─ auth/interceptor.rs (56.50%) └─ grpc/backtesting_proxy.rs (42.20%) ██░░░░░░░░ 20-39% Coverage (2 modules - 408 lines) ├─ routing/rate_limiter.rs (31.62%) └─ grpc/trading_proxy.rs (20.00%) █░░░░░░░░░ 1-19% Coverage (2 modules - 474 lines) ├─ config/authz.rs (7.96%) └─ auth/mfa/mod.rs (4.03%) ░░░░░░░░░░ 0% Coverage (10 modules - 1,163 lines) ├─ metrics/auth_metrics.rs (0/189) ├─ metrics/proxy_metrics.rs (0/189) ├─ config/manager.rs (0/199) ├─ metrics/config_metrics.rs (0/99) ├─ config/endpoints.rs (0/40) ├─ metrics/mod.rs (0/18) └─ [config crate files - expected 0%] PRIORITY TARGETS: ================= 1. 🔴 CRITICAL (Security/Core): - auth/mfa/mod.rs: 4% → 80% (+262 lines) - config/authz.rs: 8% → 80% (+185 lines) 2. 🟠 HIGH (Infrastructure): - metrics/*: 0% → 60% (+477 lines) - config/manager.rs: 0% → 60% (+199 lines) 3. 🟡 MEDIUM (Performance): - routing/rate_limiter.rs: 32% → 80% (+173 lines) - grpc/trading_proxy.rs: 20% → 80% (+124 lines) FAILING TESTS: ============== ❌ auth::mfa::totp::tests::test_constant_time_compare Issue: Security bug in empty string handling ❌ grpc::trading_proxy::tests::test_circuit_breaker_check Issue: Missing Tokio runtime wrapper EFFORT ESTIMATE: ================ To reach 95% overall coverage: - Lines to add: ~5,600 - Tests to write: ~200-300 - Estimated hours: 15-20 - Priority modules: 6 (1,396 lines total) PATH TO 95%: ============ Current: 18.95% ████░░░░░░░░░░░░░░░░ Target: 95.00% ███████████████████░ Gap: 76.05% ███████████████░░░░░