M54: harden operations and demo resilience

backend/tests/test_privacy.py

@@ -63,6 +63,24 @@ def test_eligible_customer_is_irreversibly_anonymized_without_pii_in_audit(ops_c
         )
         assert response.status_code == 200
         assert response.json()["status"] == "anonymized"
+        search = ops_client.get("/api/v1/customers", params={"query": "CUS-PRIVACY"})
+        assert search.status_code == 200
+        assert search.json() == []
+        window = {
+            "starts_at": "2090-01-01T10:00:00Z",
+            "ends_at": "2090-01-02T10:00:00Z",
+        }
+        available = ops_client.get("/api/v1/bookings/availability", params=window).json()
+        assert available
+        booking = ops_client.post(
+            "/api/v1/bookings",
+            json={
+                "customer_ref": "CUS-PRIVACY",
+                "vehicle_ref": available[0]["public_ref"],
+                **window,
+            },
+        )
+        assert booking.status_code == 422
         with SessionLocal() as db:
             customer = db.scalar(select(Customer).where(Customer.id == customer_id))
             assert customer is not None