feat: make security-journaled actions outcome truthful (Closes #497)

frontend/session.js

@@ -105,8 +105,12 @@
             title.textContent = labels[event.kind] || 'Security event';
             const details = root.document.createElement('span');
             details.className = 'small muted';
-            const context = [event.device_label, event.method, event.target]
-              .filter(value => typeof value === 'string' && value).join(' · ');
+            const context = [
+              event.device_label,
+              event.method,
+              event.target,
+              event.status === 'pending' ? 'Outcome confirmation pending' : null,
+            ].filter(value => typeof value === 'string' && value).join(' · ');
             details.textContent = `${new Date(event.created_at * 1000).toLocaleString()}${context ? ' · ' + context : ''}`;
             row.append(title, details);
             activityList.append(row);