2 commits

Author	SHA1	Message	Date
tegwick	79f14ce50a	NK-WP-0058-T02 step 2: T15 and T19 exercises run in the contract CI ... T19 runs the KeyCape binary from the pinned image instead of docker: tools/contract-tests/oci_extract.py pulls the image anonymously by digest and verifies manifest and layer digests before extracting. Both exercises record GITHUB_SHA when net-kingdom is a source tarball. PyJWT[crypto] chain pinned by PyPI-checked hashes. 85 tests pass in a CI-like layout. rapp CI recorded (rapp 15df0e3). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 943911@bnt-lap001 Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0	2026-11-06 00:13:26 +01:00
tegwick	de7d1f35a6	NK-WP-0058-T02 step 1: owner source in CI, contract workflow, suite fails on any skip ... contracts/owner-pins.json pins six public owners; tools/contract-tests/fetch_owners.py partial-clones them anonymously (pinned on push, main nightly). tools/contract-tests/run.sh is the one suite list (make contract-test, CI) and fails when any test skips. New: readiness against real owner source, replaying both 2026-11-04 states from informed-decision history. pytest pinned by PyPI-checked hashes. test_approval_request no longer hard-codes /home/worsch/informed-decision. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 943911@bnt-lap001 Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0	2026-11-05 23:58:16 +01:00