coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bind audit E2 retry projection to new engagement
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
This commit is contained in:
codex 2026-08-22 20:56:58 +02:00
parent 891d90e6c9
commit f135c0af35
4 changed files with 96 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

14
tests/test_audit_core_whitehat_e2_credentials_02.py
View file

@ -45,6 +45,20 @@ class CredentialProcedureTests(unittest.TestCase):
self.assertEqual(2, manifest.count("secretKey: token-"))
self.assertNotIn("workloads/audit-core/senders", manifest)
self.assertIn("conditions:\n - namespaces:\n - whitehat", manifest)
self.assertIn(module.ENGAGEMENT, manifest)
self.assertNotIn("WH-ENG-20260822-AUDIT-E2-01", manifest)
self.assertIn(module.STORE, manifest)
self.assertIn(module.ROLE, manifest)
def test_policy_is_bound_only_to_new_exact_paths(self) -> None:
policy = module.POLICY_FILE.read_text(encoding="utf-8")
self.assertEqual(4, policy.count('path "platform/'))
self.assertIn(module.ENGAGEMENT, policy)
self.assertNotIn("WH-ENG-20260822-AUDIT-E2-01", policy)
for path in module.TOKEN_PATHS.values():
relative = path.removeprefix("platform/")
self.assertIn(f"platform/data/{relative}", policy)
self.assertIn(f"platform/metadata/{relative}", policy)
if __name__ == "__main__":