ops-warden/tests
tegwick 537d551ef2 Route railiance01 admin kubeconfig through an attended lane
Assistant: grok
Assistant-Session: 01a1625d-4770-76a0-8dee-7f5c514a47eb
2026-10-22 08:53:33 +02:00
..
fixtures/workload-coverage test: isolate ordinary unit runs from ambient credentials and provider I/O 2026-10-17 21:30:12 +02:00
__init__.py Initial Commit 2026-03-28 00:45:43 +00:00
conftest.py Implement WARDEN-WP-0024 experiential memory and agent sessions. 2026-07-02 23:40:45 +02:00
test_access.py fix(case): preserve attended authority at dispatch and validate session lanes 2026-10-17 20:31:16 +02:00
test_agent_read_boundary_check.py Route railiance01 admin kubeconfig through an attended lane 2026-10-22 08:53:33 +02:00
test_agt_custodian_profile.py WARDEN-WP-0045: agt-custodian issuance profile (CUST-WP-0073-T02) 2026-10-20 13:46:28 +02:00
test_audit.py Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
test_ca.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
test_case_1_3_integration.py fix(case): preserve attended authority at dispatch and validate session lanes 2026-10-17 20:31:16 +02:00
test_case_admission_modes.py fix(case): preserve attended authority at dispatch and validate session lanes 2026-10-17 20:31:16 +02:00
test_case_attended_boundary.py fix(case): preserve attended authority at dispatch and validate session lanes 2026-10-17 20:31:16 +02:00
test_case_current_session_reference.py Keep original case provenance while revalidating a fresh caller session 2026-10-18 11:32:19 +02:00
test_case_inputs.py feat(case): KERNEL-2/3 lane resolution and mode-aware admission; CATALOG-1 draft lanes 2026-10-17 12:08:49 +02:00
test_case_original_context_consistency.py fix(case): validate original intent and bind its running receipt 2026-10-17 10:33:43 +02:00
test_case_plan.py test: isolate ordinary unit runs from ambient credentials and provider I/O 2026-10-17 21:30:12 +02:00
test_case_receipt_state.py Prepare reviewed durable case execution kernel and accepted layer pins 2026-10-11 02:21:03 +02:00
test_case_run.py feat(case): KERNEL-2/3 lane resolution and mode-aware admission; CATALOG-1 draft lanes 2026-10-17 12:08:49 +02:00
test_case_type.py test: isolate ordinary unit runs from ambient credentials and provider I/O 2026-10-17 21:30:12 +02:00
test_cli.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
test_config.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
test_desk.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
test_doubles.py Fix warden access proxy for catalog fetch commands with shell pipes. 2026-07-07 16:42:26 +02:00
test_flex_auth_registry.py feat: assert flex-auth ceiling keys are declared, not assumed 2026-09-09 14:40:05 +02:00
test_integration.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
test_inventory.py feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing 2026-05-15 13:27:49 +02:00
test_layer_conformance.py test: isolate ordinary unit runs from ambient credentials and provider I/O 2026-10-17 21:30:12 +02:00
test_mask.py WARDEN-WP-0026 T03: masking display filter (defense-in-depth) 2026-07-16 14:54:55 +02:00
test_memory.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
test_models.py Initial Commit 2026-03-28 00:45:43 +00:00
test_openbao_caller.py Show the OpenBao identity warden access evaluates 2026-10-14 18:21:02 +02:00
test_openbao_configuration_routing.py Route explicit attended OpenBao administration to governed login 2026-10-16 18:44:02 +02:00
test_plan.py feat: refuse to answer a write with a read (WARDEN-WP-0038) 2026-09-10 08:02:10 +02:00
test_policy.py feat: assert flex-auth ceiling keys are declared, not assumed 2026-09-09 14:40:05 +02:00
test_policy_fetch_evaluator.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
test_policy_http_refusal.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
test_posture.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
test_posture_conformance.py feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles 2026-06-27 19:30:30 +02:00
test_principals_drift.py feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
test_proxy.py fix: contain attended login diagnostics and OpenBao recovery 2026-10-15 04:25:05 +02:00
test_reuse_surface_caller_gate.py Name the verified reuse-surface hub-writer login 2026-10-14 22:20:15 +02:00
test_routing.py Route railiance01 admin kubeconfig through an attended lane 2026-10-22 08:53:33 +02:00
test_safe_unit_runner.py test: isolate ordinary unit runs from ambient credentials and provider I/O 2026-10-17 21:30:12 +02:00
test_scaffold.py Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
test_scorecard.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
test_taint.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
test_tunnel_cert_readiness.py feat(WARDEN-WP-0016): ops-bridge cert_command readiness gate + handoff 2026-06-27 19:50:28 +02:00
test_vault.py Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
test_worker.py feat(WARDEN-WP-0021): T3-T5 — visibility, approve loop, runbook (scheduled worker complete) 2026-06-30 15:24:10 +02:00
test_workload_join.py WARDEN-WP-0045: agt-custodian issuance profile (CUST-WP-0073-T02) 2026-10-20 13:46:28 +02:00
unit_isolation_probe.py test: isolate ordinary unit runs from ambient credentials and provider I/O 2026-10-17 21:30:12 +02:00