Record the hub-writer member entity.

bernd.worsch-3 is OpenBao entity f94b7c34-e151-30bb-b473-df3ccdbb9bf1. The member receipt must be that entity. T02 is done. The filed role stays unconfirmed until CCR-2026-0044 is approved.

Assistant: grok
Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6
This commit is contained in:
tegwick 2026-10-14 19:36:52 +02:00
parent c54193ae24
commit a7f9516bb3
6 changed files with 44 additions and 27 deletions

View file

@ -1,6 +1,7 @@
from ops_mason.reuse_surface_hub_writer import (
DATA,
FORBIDDEN_ENTITY_ID,
MEMBER_ENTITY_ID,
METADATA,
PARENT_DATA,
POLICY,
@ -15,7 +16,7 @@ def member(**overrides):
"login": "ok",
"policies": [POLICY],
"identity_policies": [],
"entity_id": "11111111-1111-1111-1111-111111111111",
"entity_id": MEMBER_ENTITY_ID,
"capabilities": {
DATA: ["read"],
METADATA: ["read"],
@ -54,6 +55,11 @@ def test_admin_entity_and_broad_capabilities_fail():
assert any("not exactly" in item for item in failures)
def test_other_entity_fails():
failures = assess(member(entity_id="11111111-1111-1111-1111-111111111111"))
assert any("not the member entity" in item for item in failures)
def test_missing_revoke_fails():
assert any("not revoked" in item for item in assess(member(revoked=False)))