ops-warden/tests
tegwick 0812d7303d feat(WARDEN-WP-0015): T2 — machine-readable posture descriptors + warden policy
Adds registry/policy/security-posture.yaml (Axis A env postures, Axis B
maturity levels M0-M3, dataclass_floor, lattice rule — no secret
material) and src/warden/posture.py: typed loader with validation
(unique/contiguous ranks, floor references known levels) and the pure
can_deliver() lattice helper (no-write-down: prod posture + workload
maturity >= secret required_maturity + dataclass floor). New `warden
policy list|show` read-only lookup mirroring `warden route`.
tests/test_posture.py covers load, the allow/deny lattice matrix,
validation rejections, and CLI. 184 passed, lint clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-27 18:10:54 +02:00
..
__init__.py Initial Commit 2026-03-28 00:45:43 +00:00
test_access.py feat(WARDEN-WP-0014): T2 — warden access advisory front door 2026-06-27 16:13:51 +02:00
test_ca.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
test_cli.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
test_config.py feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) 2026-06-17 08:37:14 +02:00
test_flex_auth_registry.py feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
test_integration.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
test_inventory.py feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing 2026-05-15 13:27:49 +02:00
test_models.py Initial Commit 2026-03-28 00:45:43 +00:00
test_policy.py feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) 2026-06-17 08:37:14 +02:00
test_posture.py feat(WARDEN-WP-0015): T2 — machine-readable posture descriptors + warden policy 2026-06-27 18:10:54 +02:00
test_principals_drift.py feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
test_proxy.py feat(WARDEN-WP-0014): T4 — key-cape login orchestration lane 2026-06-27 17:31:55 +02:00
test_routing.py feat(WARDEN-WP-0014): T1 — structured handoff fields in routing catalog 2026-06-27 16:00:56 +02:00
test_scorecard.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
test_vault.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00