Record privileged action failure evidence
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0217e-8c4c-7383-be6b-f50a6e485306
This commit is contained in:
tegwick 2026-08-23 12:58:12 +02:00
parent c4504c6de9
commit f579f3761c
8 changed files with 517 additions and 189 deletions

View file

@ -112,7 +112,14 @@ def test_verify_defaults_to_every_declared_field_and_one_path_denial(
("webhook_secret", True, False),
("api_token", False, True),
]
assert len(records) == 3
assert len(records) == 5
assert [record[1]["result"] for record in records] == [
"attempt",
"positive:pass",
"positive:pass",
"negative:pass",
"pass",
]
def test_live_destroy_fails_before_approval_or_backend_until_action_contract(