railiance-platform/tests
codex f3cf832a35
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Declare the security layer, and repair the placement admission check
Layer declaration (gate-house). INTENT.md now carries the declaration in its own
voice with layer.yaml as the machine-readable form, adapted from ops-warden's
reference. railiance-platform is Staff: operating OpenBao is not a claim to the
Tooling layer, because §4 is explicit that no operator-of-third-party-Tooling
shape exists and that someone running it stays a declared gap. Six direct
Tooling contacts are mapped by capability rather than by file — one §5.2
conduit, one §5.1 diagnostic, four §5.3 gaps with intended owners and review
dates — and the uncatalogued contacts are listed so the check is total. We are
PEP-shaped and the unreachable-engine stance map is NOT published; that is
recorded as an open obligation to build against v0.8, not left silent.

Placement admission. canned-prompts was added as a PostgresConsumer on
platform-pg-2 in rapp-postgres 1b68b4c without a placement owner here, which is
exactly the cross-repo drift the assurance check exists to catch; the check had
been failing on it. Registered with its real boundary evidence, corrected the
stale test expectation that pinned the overflow cell at one consumer, and
updated the SCOPE occupancy line to 2/4.

Also records owner input received today: key-cape's issuer view on CCR-2026-0020's
presenting actor, and their confirmation that codex-railiance-platform correctly
stays tenant:coulomb, so the flagged T02 discrepancy is closed as not-a-defect.

The whynot-design npm field is NOT changed. Two dated live receipts here name
NPM_AUTH_TOKEN as the field, including an attended founder fetch; that is
recorded against the counterparty claim rather than either side being flipped
before the session settles it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WLUjpv3ssxNRAEPPgLFnEB

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1275505@bnt-lap001
Assistant-Session: 97265baa-f08f-4032-b290-a1e2965a69c5
2026-09-09 23:27:14 +02:00
..
test_apps_pg_capacity.py Finish RPF-WP-0018; RPF-WP-0019 repository-complete 2026-08-18 13:35:04 +02:00
test_archive_receipt_lifecycle.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
test_audit_core_database_lease_recovery.py Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
test_audit_core_recovery_preflight.py Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
test_audit_core_whitehat_e2_credentials.py Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
test_audit_core_whitehat_e2_credentials_02.py Harden remote kubectl argument quoting 2026-08-22 21:25:20 +02:00
test_backup_credentials.py Contain backup upload credentials and prepare provider recovery gates 2026-09-05 19:21:06 +02:00
test_backup_retention_plan.py Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
test_backup_tiers.py Bind essentials recovery to explicit manifest and verified offsite provenance 2026-09-06 09:25:26 +02:00
test_consumption_mode.py Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
test_credential_change.py Finish coding-agent high-risk boundary coverage 2026-08-22 10:03:54 +02:00
test_credential_change_appliers.py Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
test_credential_grants.py Close RAILIANCE-WP-0015-T06 rapp credential-lane binding 2026-08-14 00:47:28 +02:00
test_credential_helper.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00
test_custody_contract.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_custody_projection.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_eso_auth_recovery.py Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
test_forgejo_archive_integrity.py Reject unfinished or truncated Forgejo backup archives before encryption 2026-09-05 22:10:22 +02:00
test_forgejo_package_prune.py Refuse prune apply when requested image inventories are unavailable 2026-09-05 02:00:50 +02:00
test_keycape_approval_custody.py feat: verify live KeyCape custody and preserve versions on resume 2026-09-09 02:18:12 +02:00
test_live_images_inventory.py Add failure-safe cluster image capture hook 2026-09-05 10:04:38 +02:00
test_nextcloud_backup_account.py Prepare dedicated Backup account cutover with quota and recovery verification 2026-09-05 20:35:13 +02:00
test_nextcloud_recovery_cleanup.py Bound rejected backup fixture cleanup to successful replacement recovery 2026-09-06 01:05:27 +02:00
test_offsite_restore_boundaries.py Prepare isolated offsite restore and stream large backup transfers 2026-09-05 22:18:05 +02:00
test_openbao_operator_loopback_callback.py Advance blocked assurance and operator callback work 2026-09-06 14:16:49 +02:00
test_operator_browser.py Restore contained attended browser launch on WSL without xdg-utils 2026-09-06 00:44:08 +02:00
test_policy_nexus_forgejo_source_provision.py Activate Policy Nexus source credential lane 2026-09-01 01:35:48 +02:00
test_recovery_evidence.py Validate OpenBao snapshot evidence and record assurance closure gates 2026-09-06 15:24:58 +02:00
test_remote_exec.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_service_assurance.py Declare the security layer, and repair the placement admission check 2026-09-09 23:27:14 +02:00
test_state_hub_preflight_lane.py Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
test_telemetry_primary_archive.py Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
test_wp0024_owner_review.py Include platform owner in WP-0024 receipts 2026-08-22 14:59:59 +02:00
test_wp0024_t02_driver_candidate.py Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00
test_wp0025_broker_readiness.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00