coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/tests
History
codex 0e98465c6e
All checks were successful
CCR intake gate / gate (push) Successful in 2m13s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
ADHOC-2026-11-03-T05: ESO recovery policy test admits approved CCR extensions. 
The reuse-surface recovery lane policy carries the exact extra data path
approved under CCR-2026-0046; the test predated it and required exactly three
paths. It now allows one exact data path per approved CCR naming the same
policy file and keeps the wildcard, metadata and list bans.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 509845@bnt-lap001
Assistant-Session: ed7a7d95-d8eb-455c-b594-963fb1830f76
2026-11-03 23:02:07 +01:00
..
conftest.py Make the platform test suite collect and finish; refresh the admission baseline. 2026-11-03 14:16:08 +01:00
openbao_restore_rehearsal.py RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter 2026-10-28 00:02:10 +01:00
probe_bao_cli_synthetic.py Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
task_execution_source_servers.py Make the platform test suite collect and finish; refresh the admission baseline. 2026-11-03 14:16:08 +01:00
task_execution_trusted_servers.py Make the platform test suite collect and finish; refresh the admission baseline. 2026-11-03 14:16:08 +01:00
test_activity_promotion_readiness.py Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
test_application_archive_retention_plan.py Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
test_application_backup_credentials.py Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
test_application_backup_pair_custody.py Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
test_application_recovery_access.py Establish Coulomb scoped recovery API custody and native boundaries 2026-10-29 22:15:27 +01:00
test_application_recovery_drill.py Automate timed recovery from the protected provider kit and separate escrow 2026-10-29 22:43:05 +01:00
test_application_recovery_identities.py Prepare scoped recovery resources and bounded construction renewal 2026-10-29 21:52:55 +01:00
test_application_recovery_kit.py Retain verified recovery proof independently and bind the protected point 2026-10-29 22:49:33 +01:00
test_application_recovery_mirror.py Add immutable Coulomb recovery mirroring through scoped APIs 2026-10-29 22:25:41 +01:00
test_application_recovery_resources.py Establish Coulomb scoped recovery API custody and native boundaries 2026-10-29 22:15:27 +01:00
test_approval_client_reader.py Verify scoped approval client delivery through attended reader session 2026-09-14 01:46:45 +02:00
test_apps_pg_capacity.py Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
test_archive_receipt_lifecycle.py Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
test_archive_recovery_evidence.py Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
test_argocd_adoption_proof.py Prove pinned OpenBao ArgoCD adoption with deterministic native checks 2026-10-11 21:30:47 +02:00
test_attended_service_delivery.py CCR-2026-0055 (proposed) and request type attended-service-credential-delivery 2026-10-31 11:03:44 +01:00
test_audit_attended_kubeconfig.py Route the sender lane's cluster writes through AUDIT_KUBECONFIG too. 2026-11-03 15:09:59 +01:00
test_audit_core_database_lease_recovery.py RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note 2026-10-15 00:24:15 +02:00
test_audit_core_recovery_preflight.py RPF-WP-0015-T03: attended OpenBao reboot snapshot lane with mandatory off-OpenBao escrow 2026-10-14 19:49:02 +02:00
test_audit_core_synthetic_sender_lane.py RPF-WP-0015-T02: contained-login only, single silent attended window 2026-10-14 14:23:46 +02:00
test_audit_core_whitehat_e2_credentials.py Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
test_audit_core_whitehat_e2_credentials_02.py Harden remote kubectl argument quoting 2026-08-22 21:25:20 +02:00
test_authelia_smtp_delivery.py Prepare attended scoped platform mailbox admission for Authelia 2026-10-06 19:30:59 +02:00
test_backup_credential_contract_export.py Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
test_backup_credentials.py fix(backup): send required public DAV upload marker 2026-10-03 21:20:21 +02:00
test_backup_reader_boundary_probe.py Add the backup reader boundary probe and record founder approval of MAS node execution. 2026-11-03 05:50:10 +01:00
test_backup_retention_plan.py Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
test_backup_tiers.py Bind essentials recovery to explicit manifest and verified offsite provenance 2026-09-06 09:25:26 +02:00
test_broker_grant_lane.py RPF-WP-0054-T05: fix issuer binding after the first probe 2026-10-10 11:12:19 +02:00
test_cadence_observer_readback.py Record native receiver custody and prepare actual Approval lifecycle readback 2026-10-15 21:40:48 +02:00
test_cadence_receiver_custody.py Record explicit owner approval for exact Qonto custody packet 2026-10-15 21:27:32 +02:00
test_catalog_lane_scaffold.py Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
test_ccr_intake.py RPF-WP-0061: render-policy and plan_ref for ops-mason submissions; approvals only via sync-decision 2026-10-18 12:53:19 +02:00
test_consumption_mode.py Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
test_core_hub_forgejo_source_provision.py CCR-2026-0031: choose the private probe repo with the admin token 2026-10-03 10:07:54 +02:00
test_credential_change.py ADHOC-2026-11-03-T04: repair the three drifted credential-change tests. 2026-11-03 22:51:46 +01:00
test_credential_change_appliers.py Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
test_credential_grants.py Bind mint broker validation to exact reviewed sources and track successor obligations 2026-10-17 22:55:51 +02:00
test_credential_helper.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00
test_custodian_agent_rbac.py RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00
test_custodian_allocation_review.py CUST-WP-0071-T05: default-deny egress, hub delivery env, widen platform-addons project 2026-10-21 08:41:37 +02:00
test_custody_contract.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_custody_projection.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_digest_retention.py Make the platform test suite collect and finish; refresh the admission baseline. 2026-11-03 14:16:08 +01:00
test_email_connect_smtp_delivery.py Record verified SMTP activation and isolate approval lifecycle fixture 2026-11-02 00:28:46 +01:00
test_email_connect_smtp_foundation.py Refresh platform SMTP admission and preserve founder approval 2026-11-01 23:21:11 +01:00
test_eso_adoption_readiness.py Gate ESO adoption on verified predecessors and receive release custody handoff 2026-10-11 23:25:20 +02:00
test_eso_attended_checks.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
test_eso_auth_recovery.py ADHOC-2026-11-03-T05: ESO recovery policy test admits approved CCR extensions. 2026-11-03 23:02:07 +01:00
test_eso_token_renewer.py RPF-WP-0046: periodic ESO database tokens and a daily renewer 2026-09-23 19:53:12 +02:00
test_factory_audit_custody.py Record live receiver gate and isolate readiness from attestation jobs 2026-09-11 07:26:16 +02:00
test_factory_audit_delivery.py feat: deliver approved factory audit sender custody 2026-09-11 09:38:27 +02:00
test_factory_native_acceptance.py Exercise fsGroup startup through the corrected producer helper 2026-09-11 12:41:50 +02:00
test_flex_auth_signer_custody.py Prove trusted task chain and prepare bounded signer custody 2026-10-16 17:29:12 +02:00
test_flex_auth_signer_native.py RPF-WP-0035-T14: flex-auth signer custody founder gate, runbook and review dispositions 2026-10-21 01:24:45 +02:00
test_flex_auth_signer_native_preparation.py Add attended signer adapter with phase-aware read-only recovery 2026-10-16 18:44:07 +02:00
test_fluid_telegram_custody_move.py RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 2026-10-09 12:10:21 +02:00
test_forgejo_archive_integrity.py Reject unfinished or truncated Forgejo backup archives before encryption 2026-09-05 22:10:22 +02:00
test_forgejo_package_prune.py Refuse prune apply when requested image inventories are unavailable 2026-09-05 02:00:50 +02:00
test_inbound_library_imap_entry.py Prepare password-free inbound-library IMAP entry for attended custody 2026-10-05 11:14:54 +02:00
test_informed_decision_requester_metadata.py Record native ESO result and prepare scoped self-token amendment 2026-10-04 23:21:55 +02:00
test_issue_core_credential_executor.py Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
test_issuer_binding_lane.py RPF-WP-0054-T05: fix issuer binding after the first probe 2026-10-10 11:12:19 +02:00
test_keycape_approval_custody.py feat: verify live KeyCape custody and preserve versions on resume 2026-09-09 02:18:12 +02:00
test_keycape_client_secret_generate.py RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00
test_keycape_factor_activation.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_factor_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_factor_provider.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_factor_recovery.py Implement audited lost-factor recovery and track remaining P04 acceptance 2026-09-13 17:28:45 +02:00
test_keycape_factor_renewal.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_issuer_eso.py feat: declare proposed fixed KeyCape issuer ESO source contract 2026-10-17 20:36:52 +02:00
test_keycape_secrets_engine_openbao_custody.py Record founder approval 2ab717e1 on CCR-2026-0033/0034 and the ESO admission 2026-10-07 00:25:37 +02:00
test_kube_route.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
test_kv_duplicate_retire.py kv_duplicate_retire: block only on data-path grants 2026-10-09 12:27:43 +02:00
test_live_images_inventory.py Add failure-safe cluster image capture hook 2026-09-05 10:04:38 +02:00
test_mas_evidence_age_escrow.py Escrow a new MAS age identity in OpenBao and rehearse recovery from custody. 2026-11-03 08:10:33 +01:00
test_mas_evidence_archive.py Record the first quiesced MAS evidence capture. 2026-11-02 02:20:35 +01:00
test_mas_evidence_backup.py Prune MAS evidence local runs after 30 days, as the owners accepted. 2026-11-03 08:35:45 +01:00
test_mas_evidence_iam_grant.py Align the MAS IAM rule and read num_uses from the raw writer response. 2026-11-02 19:28:28 +01:00
test_mas_evidence_notify.py Alert platform-root when the MAS evidence backup fails or goes stale. 2026-11-03 09:14:46 +01:00
test_mas_evidence_publisher_gate.py Read the attended admin token from the private helper when the MAS gate requests its writer token. 2026-11-03 05:41:25 +01:00
test_mas_evidence_restore_rehearsal.py Escrow a new MAS age identity in OpenBao and rehearse recovery from custody. 2026-11-03 08:10:33 +01:00
test_metered_requester.py Prepare exact metered requester extension with scope refusal tests 2026-09-27 20:34:52 +02:00
test_netkingdom_role_files.py RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054) 2026-10-24 23:49:27 +02:00
test_nextcloud_backup_account.py Prepare dedicated Backup account cutover with quota and recovery verification 2026-09-05 20:35:13 +02:00
test_nextcloud_recovery_cleanup.py Bound rejected backup fixture cleanup to successful replacement recovery 2026-09-06 01:05:27 +02:00
test_offsite_restore_boundaries.py Prepare isolated offsite restore and stream large backup transfers 2026-09-05 22:18:05 +02:00
test_openbao_break_glass_drill.py RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter 2026-10-28 00:02:10 +01:00
test_openbao_isolated_restore.py RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter 2026-10-28 00:02:10 +01:00
test_openbao_isolated_restore_native.py RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter 2026-10-28 00:02:10 +01:00
test_openbao_operator_loopback_callback.py Open the OpenBao login in an empty browser profile. 2026-11-02 02:42:57 +01:00
test_openbao_platform_admin_aal2.py RPF-WP-0065-T04: rebuild founder runbook for the silent warden lane 2026-10-27 22:46:31 +01:00
test_openbao_platform_admin_callback_prune.py RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054) 2026-10-24 23:49:27 +02:00
test_openbao_platform_admin_check.py Declare live platform-admin role and policies; add attended admin check 2026-09-23 19:27:25 +02:00
test_openbao_policy_sync.py CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) 2026-09-23 20:00:40 +02:00
test_openbao_reboot_snapshot.py RPF-WP-0015-T03: snapshot lane accepts the escrow key in age identity-file format 2026-10-14 20:04:25 +02:00
test_openbao_retained_guard.py Refuse OpenBao deploys from the retained copy and point operators to rapp-openbao. 2026-11-03 11:18:44 +01:00
test_openbao_revoke_initial_root_token.py NK-WP-0055-T16: guarded revoke of the held initial root token for production entry 2026-10-28 00:54:59 +01:00
test_openbao_ui_role_select.py RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06) 2026-10-14 23:45:00 +02:00
test_operator_browser.py Align the MAS IAM rule and read num_uses from the raw writer response. 2026-11-02 19:28:28 +01:00
test_operator_matrix_lane.py RPF-WP-0054-T04: create-only broker grant keycape/client-secret-generate 2026-10-09 19:08:25 +02:00
test_operators_entry_retire.py ADHOC-2026-10-10: retire the deprecated operators/nextcloud entry 2026-10-10 15:32:02 +02:00
test_ops_mason_builder_rbac.py Pin the ops-mason-builder Application to its introducing commit 2026-10-22 08:48:44 +02:00
test_playwright_consumer.py Prepare Playwright consumer credentials and identity activation handoff 2026-10-13 21:21:58 +02:00
test_policy_nexus_forgejo_source_provision.py Activate Policy Nexus source credential lane 2026-09-01 01:35:48 +02:00
test_primary_application_archive.py Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
test_provisioning_window.py Prepare offline attended provisioning checklists and route remaining custody gates 2026-10-04 00:27:00 +02:00
test_public_transport.py Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
test_railiance_clock_custody.py Implement attended Railiance Clock host key delivery 2026-09-15 23:00:20 +02:00
test_recovery_evidence.py Validate OpenBao snapshot evidence and record assurance closure gates 2026-09-06 15:24:58 +02:00
test_remote_exec.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_reuse_surface_forgejo_source_provision.py Prepare restricted seven-source reuse reader and bounded recovery 2026-10-15 01:25:46 +02:00
test_reuse_surface_forgejo_source_recovery.py Prepare restricted seven-source reuse reader and bounded recovery 2026-10-15 01:25:46 +02:00
test_reuse_surface_reader_custody_apply.py Prepare reviewed attended reuse-reader custody execution 2026-10-15 01:57:25 +02:00
test_root_custody_finish.py feat(backup): repair reviewed upload share after history recovery proof 2026-10-03 21:50:19 +02:00
test_root_grant_attended.py Implement attended root custody admission and crash-safe publisher 2026-10-03 19:44:22 +02:00
test_root_grant_publish.py Prepare conditional platform-root custody document producer 2026-10-03 18:51:26 +02:00
test_rpf_wp_0015_e2_receipt.py Route the sender lane's cluster writes through AUDIT_KUBECONFIG too. 2026-11-03 15:09:59 +01:00
test_secrets_engine_jwt_contract.py RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao 2026-10-09 00:31:47 +02:00
test_service_assurance.py RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished 2026-09-24 00:48:24 +02:00
test_service_identity_metadata_export.py RPF-WP-0067: owner answers for NK-WP-0040-T02 and value-safe identity metadata exporter for NK-WP-0054-T04 2026-10-28 09:52:15 +01:00
test_service_jwt_lane.py RPF-WP-0035-T02: record founder approval and delegated apply of CCR-2026-0038 2026-10-09 11:47:09 +02:00
test_sitting_requester_provisioning.py Sitting requester: accept approval:create+read; one-shot refuses re-run; CCR-0026/0027 amendment proposed 2026-11-01 04:04:15 +01:00
test_state_hub_preflight_lane.py Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
test_t02_attended_window.py RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane 2026-10-14 20:30:11 +02:00
test_t03_request_time.py Renew T03 requests using Railiance time and bind native execution 2026-09-16 01:08:56 +02:00
test_t03_revocation_probe.py Point the OpenRouter cycle at memo version 3. 2026-09-27 15:33:09 +02:00
test_task_execution_cleanup.py fix(execution): retain scoped cleanup after uncertain outcomes 2026-10-16 01:51:53 +02:00
test_task_execution_cleanup_calls.py feat(execution): prove fixed grant and cleanup against disposable OpenBao 2026-10-16 07:43:52 +02:00
test_task_execution_grant.py feat(execution): bind immutable task grants before native effects 2026-10-16 07:51:42 +02:00
test_task_execution_journal.py feat(execution): prove fixed grant and cleanup against disposable OpenBao 2026-10-16 07:43:52 +02:00
test_task_execution_mediation_journal.py feat: journal strict task consumption before native fixture effects 2026-10-16 09:20:33 +02:00
test_task_execution_mediator.py Make the platform test suite collect and finish; refresh the admission baseline. 2026-11-03 14:16:08 +01:00
test_task_execution_native_budget.py Bound task execution by absolute call and credential deadlines 2026-10-16 17:15:00 +02:00
test_task_execution_native_fixture.py Verify exact task metadata baseline and readback 2026-10-16 10:48:21 +02:00
test_task_execution_plan.py feat(execution): prove fixed grant and cleanup against disposable OpenBao 2026-10-16 07:43:52 +02:00
test_task_execution_readback.py Verify exact task metadata baseline and readback 2026-10-16 10:48:21 +02:00
test_task_execution_recovery.py Recover exact task cleanup after executor process loss 2026-10-16 16:43:20 +02:00
test_task_execution_trusted_whole.py Make the platform test suite collect and finish; refresh the admission baseline. 2026-11-03 14:16:08 +01:00
test_telemetry_primary_archive.py Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
test_telemetry_smtp_delivery.py Add attended SMTP verification and exact reader admission 2026-09-28 11:21:57 +02:00
test_telemetry_smtp_entry.py Prepare password-free telemetry SMTP entry for attended custody 2026-09-28 11:11:34 +02:00
test_tenant_engine_audit_core_sender_eso.py RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test 2026-10-03 00:16:49 +02:00
test_tenant_engine_audit_core_sender_seed.py CUST-WP-0075: tenant-engine sender seed helper; re-qualify RPF-WP-0035-T02/T08 2026-10-03 08:28:32 +02:00
test_vergabe_demo_provisioning.py Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
test_verify_informed_decision_requester.py Make the platform test suite collect and finish; refresh the admission baseline. 2026-11-03 14:16:08 +01:00
test_workload_adoption_proof.py Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
test_workload_kv_write_next_version.py CCR-2026-0058: drop required_parameters from the write policy; back to proposed for re-approval 2026-10-31 16:24:47 +01:00
test_wp0024_owner_review.py Include platform owner in WP-0024 receipts 2026-08-22 14:59:59 +02:00
test_wp0024_t02_driver_candidate.py Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00
test_wp0025_broker_readiness.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00