feat(tests): containment_result field on blue team evaluation

backend/alembic/versions/b052_add_containment_result.py

@@ -0,0 +1,31 @@
+"""Add containment_result to tests.
+
+Revision ID: b052
+Revises: b051
+Create Date: 2026-06-24
+"""
+from alembic import op
+import sqlalchemy as sa
+
+revision = "b052"
+down_revision = "b051"
+branch_labels = None
+depends_on = None
+
+containment_enum = sa.Enum(
+    "contained", "partially_contained", "not_contained",
+    name="containmentresult",
+)
+
+
+def upgrade() -> None:
+    containment_enum.create(op.get_bind(), checkfirst=True)
+    op.add_column(
+        "tests",
+        sa.Column("containment_result", containment_enum, nullable=True),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("tests", "containment_result")
+    containment_enum.drop(op.get_bind(), checkfirst=True)

backend/app/domain/enums.py

@@ -68,6 +68,15 @@ class TestResult(str, enum.Enum):
     partially_detected = "partially_detected"
 
 
+# Define class ContainmentResult
+class ContainmentResult(str, enum.Enum):
+    """Outcome of the blue team's containment effort."""
+
+    contained = "contained"
+    partially_contained = "partially_contained"
+    not_contained = "not_contained"
+
+
 # Define class DataClassification
 class DataClassification(str, enum.Enum):
     """Data sensitivity classification levels for compliance and retention policies."""

backend/app/models/enums.py

@@ -7,6 +7,7 @@ working with ``from app.models.enums import ...``.
 
 # Import # noqa: F401 from app.domain.enums
 from app.domain.enums import (  # noqa: F401
+    ContainmentResult,
     DataClassification,
     TeamSide,
     TechniqueStatus,

backend/app/models/test.py

@@ -26,8 +26,8 @@ from sqlalchemy.orm import relationship
 # Import Base from app.database
 from app.database import Base
 
-# Import TestResult, TestState from app.models.enums
-from app.models.enums import TestResult, TestState
+# Import ContainmentResult, TestResult, TestState from app.models.enums
+from app.models.enums import ContainmentResult, TestResult, TestState
 
 
 # Define class Test
@@ -83,6 +83,7 @@ class Test(Base):
     blue_summary = Column(Text, nullable=True)
     # Assign detection_result = Column(Enum(TestResult, name="testresult"), nullable=True)
     detection_result = Column(Enum(TestResult, name="testresult"), nullable=True)
+    containment_result = Column(Enum(ContainmentResult, name="containmentresult"), nullable=True)
     # Assign blue_validated_by = Column(UUID(as_uuid=True), ForeignKey("users.id"), nullable=True)
     blue_validated_by = Column(UUID(as_uuid=True), ForeignKey("users.id"), nullable=True)
     # Assign blue_validated_at = Column(DateTime, nullable=True)

backend/app/schemas/test.py

@@ -9,7 +9,7 @@ from datetime import datetime
 from pydantic import BaseModel, ConfigDict, model_validator
 
 # Import DataClassification from app.domain.enums
-from app.domain.enums import DataClassification
+from app.domain.enums import ContainmentResult, DataClassification
 from app.models.enums import TestResult, TestState
 from app.schemas.evidence import EvidenceOut
 
@@ -92,6 +92,7 @@ class TestBlueUpdate(BaseModel):
 
     # Assign detection_result = None
     detection_result: TestResult | None = None
+    containment_result: ContainmentResult | None = None
     # Assign blue_summary = None
     blue_summary: str | None = None
 
@@ -207,6 +208,7 @@ class TestOut(BaseModel):
     blue_summary: str | None = None
     # Assign detection_result = None
     detection_result: TestResult | None = None
+    containment_result: ContainmentResult | None = None
     # Assign blue_validated_by = None
     blue_validated_by: uuid.UUID | None = None
     # Assign blue_validated_at = None