17 lines
666 B
Python
17 lines
666 B
Python
"""The reuse-surface catalog caller stays unnamed until verification."""
|
|
from __future__ import annotations
|
|
|
|
from pathlib import Path
|
|
|
|
from warden.routing import load_catalog
|
|
|
|
|
|
def test_dedicated_caller_stays_unnamed_until_ccr_2026_0044_verification():
|
|
catalog = load_catalog(Path(__file__).resolve().parents[1] / "registry" / "routing" / "catalog.yaml")
|
|
entry = catalog.get("reuse-surface-hub-write-token")
|
|
assert entry is not None
|
|
auth = entry.auth_method or ""
|
|
# MASON-WP-0011: the proposed OIDC role is not the auth method yet.
|
|
assert "reuse-surface-hub-writer" not in auth
|
|
assert "CCR-2026-0044" in auth
|
|
assert "unnamed" in auth
|