The account task set groups: [] with append: false, so the next run would have removed custodian-agt from gated-executor's exchange group. Allowed groups are now an explicit per-account inventory list, refused if forbidden, and asserted as the exact set by goss; container test covers an unlisted group. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 605711@bnt-lap001 Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61 |
||
|---|---|---|
| .. | ||
| fixtures | ||
| test_baseline_contract.py | ||
| test_handoff.py | ||
| test_handoff_contract.py | ||
| test_inventory_contract.py | ||
| test_reef_exposure.py | ||
| test_restricted_agent_account.py | ||
| test_s1_backup_recovery.py | ||
| test_secret_and_receipt_contracts.py | ||