Make the platform test suite collect and finish; refresh the admission baseline.

Fix two collection errors and the order-dependent secrets-engine import.
Proofs whose prebuilt binaries are absent now skip with a reason. The
admission baseline takes three digests from reviewed rapp-postgres changes.
Nine drifted assertions remain, recorded in ADHOC-2026-11-03.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 236506@bnt-lap001
Assistant-Session: 09087018-91e1-48c5-ab2f-acfbb62c92e4
This commit is contained in:
codex 2026-11-03 14:16:08 +01:00
parent 430c6eea07
commit 02d75dcc74
10 changed files with 118 additions and 9 deletions

View file

@ -59,6 +59,13 @@ def serve(server,*,tls=None):
@contextmanager
def trusted_providers(directory):
# The trusted proof needs a pinned review environment (access source, built
# access binary, PDP verifier, approval-engine). Skip when none is configured;
# fail if one was configured but is incomplete.
configured={'TRUSTED_ACCESS_SOURCE_ROOT','TRUSTED_ACCESS_BINARY','TRUSTED_PDP_VERIFIER'} & os.environ.keys()
if not configured and not (ACCESS.is_dir() and BINARY.is_file() and VERIFIER.is_file()):
import pytest
pytest.skip('trusted review environment not present (set TRUSTED_ACCESS_SOURCE_ROOT / TRUSTED_ACCESS_BINARY / TRUSTED_PDP_VERIFIER)')
from approval_engine.api import App
from approval_engine.auth import Identity,StaticTokenAuthenticator
from approval_engine.store import Engine