coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ops-mason/tests
History
Exact
tegwick 827781f318 MASON-WP-0015: accept a can-i denial as negative-scope proof 
kubectl auth can-i exits 1 when the answer is no. verify() was sending that
query through _run, which raised PlaneError and stopped apply under the
scoped builder. A denial with stdout no is now the negative proof. Any other
non-zero exit still fails.

Assistant: grok
Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a
2026-10-22 09:41:16 +02:00
..
test_attended_login.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00
test_bao_session.py MASON-WP-0009-T04 done: live capability verification of the KeyCape secrets-engine-openbao lane 2026-10-07 13:47:14 +02:00
test_case_build.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_case_plan.py Prepare typed structural evidence without credential success circularity 2026-10-11 02:42:57 +02:00
test_case_structure.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_case_version_source.py fix(cases): expose explicit versioned type roots in Mason CLI 2026-10-16 07:51:41 +02:00
test_ccr_gate.py MASON-WP-0015: accept a synced decision and the standard-lane token bounds 2026-10-22 02:15:24 +02:00
test_construct_policy.py MASON-WP-0015-T03: deny comma-string token_policies in ops-mason-construct 2026-10-18 11:59:04 +02:00
test_custody_describe.py MASON-WP-0004-T02: 27/29 descriptions applied; clip to OpenBao's byte limit 2026-10-09 12:09:52 +02:00
test_custody_inventory.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
test_executor.py MASON-WP-0015-T04: structure-only AppRole build, post-build policy check 2026-10-18 12:52:57 +02:00
test_keycape_client_custody_verifier.py Prepare independently reviewed native custody capability verification 2026-10-11 14:16:58 +02:00
test_kubernetes_plane.py MASON-WP-0015: accept a can-i denial as negative-scope proof 2026-10-22 09:41:16 +02:00
test_oidc_matrix.py MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane 2026-10-08 23:41:34 +02:00
test_plan.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
test_plan_survey.py Replace ops-mason-build with read-only ops-mason-survey grant (MASON-IN-0004) 2026-10-07 10:44:24 +02:00
test_reuse_surface_hub_writer.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00
test_wp_0013_0014_evidence.py MASON-WP-0013-T03: record the resolved founder decision 2026-10-22 00:39:49 +02:00