동의 게이트와 런타임 안정화

apps/api/app/test_session_turn_persistence.py

@@ -24,6 +24,7 @@ def _principal() -> Principal:
         cohort_ids=[],
         email="turn-test@hs.ac.kr",
         display_name="Turn Test",
+        consent_at=1.0,
     )
 
 
@@ -374,6 +375,25 @@ class SessionTurnPersistenceTest(unittest.IsolatedAsyncioTestCase):
         self.assertEqual(response.recall_summary, recall.recall_summary)
         self.assertIs(sessions._RECALL_CACHE[response.session_id], recall)
 
+    async def test_start_session_requires_learner_consent_before_catalog_lookup(self) -> None:
+        principal = _principal()
+        principal.consent_at = None
+
+        with patch.object(
+            sessions,
+            "get_catalog_persona",
+            AsyncMock(side_effect=AssertionError("consent gate must run before catalog lookup")),
+        ) as get_persona:
+            with self.assertRaises(sessions.HTTPException) as caught:
+                await sessions.start_session(
+                    sessions.SessionStartRequest(persona_code=persona_service.P1.code),
+                    principal,
+                )
+
+        self.assertEqual(caught.exception.status_code, 403)
+        self.assertEqual(caught.exception.detail, "consent_required")
+        get_persona.assert_not_awaited()
+
     async def test_run_turn_stream_parses_gateway_done_telemetry(self) -> None:
         class FakeStreamEngine:
             engine_mode = "claude_cli"