fix: bind approval consumption to actual Flex Auth submissions
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-09 08:55:46 +02:00
parent 89bc31460f
commit ee4e901611
23 changed files with 612 additions and 1023 deletions

View file

@ -13,7 +13,7 @@ from secrets_engine.approval_consume import (
ConsumeBinding,
consume_approval,
require_production_consume,
resolve_consume_binding,
resolve_approval_observation,
)
from secrets_engine.catalog import validate_entry
from secrets_engine.config import Config
@ -87,8 +87,8 @@ def _authorized():
)
def test_resolve_consume_binding_is_unserved():
assert resolve_consume_binding(object(), object(), "apply", None) is None
def test_resolve_approval_observation_is_unserved():
assert resolve_approval_observation(object(), object(), "apply", None) is None
def test_consume_success_and_same_digest_retry(tmp_path):