NK-WP-0058-T04 done: bx, four founder commands plus the approval
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

bx ready / request / run / status (close for emergencies): inputs in a state file, receipts numbered
by the tool, every command safe to repeat and one value-free line. OpenBao steps run as silent
children of the warden platform-admin lane (executor-lanes.py --quiet); run closes the window in the
same child, also on error. Runbook sections 5-6 replaced; pilot-run.sh deleted. 134 tests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 943911@bnt-lap001
Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0
This commit is contained in:
tegwick 2026-11-05 23:45:02 +01:00
parent a29d92ecda
commit 646ced3f9e
10 changed files with 577 additions and 120 deletions

View file

@ -279,3 +279,14 @@ def test_status_is_read_only_and_reports_every_check(tmp_path, monkeypatch):
r = {}
m.status(r)
assert (r['write_role_absent'], r['cas_required'], r['ready_for_window']) == (False, False, False)
def test_quiet_prints_nothing_and_still_writes_the_receipt(tmp_path, monkeypatch, capsys):
"""--quiet makes the window commands silent children of warden access --exec (NK-WP-0058-T04)."""
m, fake, d = build(tmp_path, monkeypatch)
run(m, 'setup', d)
receipt = tmp_path / 'status.json'
monkeypatch.setattr(sys, 'argv', ['executor-lanes.py', 'status', '--receipt', str(receipt), '--quiet'])
assert m.main() == 0
assert capsys.readouterr() == ('', '')
assert json.loads(receipt.read_text())['ready_for_window'] is True