railiance-infra/tests
codex 37ed8b012b
All checks were successful
CI Smoke / source-contract (push) Successful in 14s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
RAIL-HO-WP-0014: explicit allowed supplementary groups for restricted agents (gexec-review)
The account task set groups: [] with append: false, so the next run would
have removed custodian-agt from gated-executor's exchange group. Allowed
groups are now an explicit per-account inventory list, refused if forbidden,
and asserted as the exact set by goss; container test covers an unlisted group.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
2026-10-20 23:50:14 +02:00
..
fixtures RAIL-HO-WP-0014: explicit allowed supplementary groups for restricted agents (gexec-review) 2026-10-20 23:50:14 +02:00
test_baseline_contract.py Implement reproducible S1 handoff contracts 2026-08-23 12:02:23 +02:00
test_handoff.py Implement reproducible S1 handoff contracts 2026-08-23 12:02:23 +02:00
test_handoff_contract.py Make S1 handoff read-only by default 2026-08-23 12:41:23 +02:00
test_inventory_contract.py Implement reproducible S1 handoff contracts 2026-08-23 12:02:23 +02:00
test_reef_exposure.py Gate reef web ports on exposure grants 2026-08-22 12:34:25 +02:00
test_restricted_agent_account.py RAIL-HO-WP-0014: explicit allowed supplementary groups for restricted agents (gexec-review) 2026-10-20 23:50:14 +02:00
test_s1_backup_recovery.py Prepare governed S1 offsite upload 2026-08-23 14:11:00 +02:00
test_secret_and_receipt_contracts.py Fix rotation review evidence and reconcile blocked S1 workplans 2026-09-27 18:47:55 +02:00