Accept both backup readers and deliver the email-connect pair.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s

Record founder acceptance on CCR-2026-0036 and CCR-2026-0037, install the reader roles, and admit only the email-connect node delivery. Treat a missing OpenBao token period as non-periodic.

Assistant: grok
Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54
This commit is contained in:
codex 2026-10-09 00:05:35 +02:00
parent d217c806ca
commit 1900e24f80
8 changed files with 252 additions and 21 deletions

View file

@ -166,7 +166,7 @@ def test_atomic_private_delivery_and_identical_resume(application, directory, ca
@pytest.mark.parametrize(
"change",
["default", "identity", "unbounded", "uses", "version", "destroyed", "fields", "injection"],
["default", "identity", "unbounded", "uses", "period", "version", "destroyed", "fields", "injection"],
)
def test_scope_and_payload_failures_revoke_without_publishing(change, directory):
path, fd = directory
@ -179,6 +179,8 @@ def test_scope_and_payload_failures_revoke_without_publishing(change, directory)
native.info["data"]["explicit_max_ttl"] = 0
elif change == "uses":
native.info["data"]["num_uses"] = 0
elif change == "period":
native.info["data"]["period"] = 60
elif change == "version":
native.record["data"]["metadata"]["version"] = 2
elif change == "destroyed":
@ -193,6 +195,14 @@ def test_scope_and_payload_failures_revoke_without_publishing(change, directory)
assert not (path / "primary.env").exists() and not list(path.glob("delivery-v*.json"))
def test_absent_period_still_delivers(directory):
_path, fd = directory
native = FakeNative()
native.info["data"]["period"] = None
receipt = d.deliver(approved(), "source-hash", "coulomb-social", 1, native, fd, os.getuid())
assert receipt["outcome"] == "created"
def test_revocation_failure_does_not_publish_or_disclose(directory, capsys, monkeypatch, tmp_path):
path, fd = directory
ccr = approved()