Document recovered ESO lanes and recognize explicit invalid-token responses

Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
2026-09-05 18:51:40 +02:00 · 2026-09-05 18:51:40 +02:00 · 3759850cc4
commit 3759850cc4
parent 153223983f
6 changed files with 78 additions and 8 deletions
--- a/tests/test_state_hub_preflight_lane.py
+++ b/tests/test_state_hub_preflight_lane.py
@ -96,6 +96,7 @@ class SigningLaneTests(unittest.TestCase):
        import tempfile, yaml
        ccr = copy.deepcopy(self.ccr)
        ccr['status'] = 'approved'
+        ccr['access_frontdoor']['resolvable'] = False
        ccr['openbao']['auth']['bound_claims_confirmed'] = True
        ccr['openbao']['auth']['audience'] = 'kubernetes'
        with tempfile.TemporaryDirectory() as tmp: