secrets-engine/tests
tegwick 4dd004a225
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Verify normalized task approval facts and preserve signed source types
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
2026-10-16 17:28:03 +02:00
..
fixtures Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
__init__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
authorization_stub.py fix: bind approval consumption to actual Flex Auth submissions 2026-09-09 08:55:46 +02:00
signature_support.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_action_authorization.py fix: bind approval consumption to actual Flex Auth submissions 2026-09-09 08:55:46 +02:00
test_application_time.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
test_approval_auth.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_approval_claim.py feat: bind the destroy gate to approval_binding_digest and pdp_path 2026-09-06 20:39:59 +02:00
test_approval_consume.py Align native CLI execution with approved T03 targets and authority 2026-09-14 03:21:48 +02:00
test_audit.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_auth_capability.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_catalog.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
test_consume_binding_join.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_consumer_secret_file.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
test_decision_replay.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_decision_signature.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_decision_start_wait.py Wait within decision validity bounds and preserve failed preflight evidence 2026-09-14 03:46:28 +02:00
test_decision_transport.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_decisions.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_dry_run_never_gates.py test: enforce that dry runs never reach the authorization gate 2026-09-06 08:09:42 +02:00
test_engine_auth.py Keep ambient tokens out of the service-JWT OpenBao login 2026-10-10 13:26:20 +02:00
test_evidence_class.py Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
test_exec_delivery.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
test_exec_owner.py Finish companion catalog work and reconcile completed approval tasks 2026-09-27 16:15:01 +02:00
test_exec_owner_companions.py Align authorization request digests with Go canonical wire profile 2026-10-11 19:47:45 +02:00
test_execution_context.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
test_execution_readiness.py Refuse login-only protected execution before consuming approval 2026-10-11 14:19:30 +02:00
test_existing_lane_admission.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_go_canonical_parity.py Align authorization request digests with Go canonical wire profile 2026-10-11 19:47:45 +02:00
test_guards.py feat: prepare data-only Anthropic native delivery lane 2026-09-06 00:25:37 +02:00
test_human_control.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_integration_authorization.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
test_integration_bao.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
test_integration_companions.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
test_lane_state.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
test_layer_conformance.py Validate accepted security layer v0.8 owner declaration 2026-10-11 02:21:25 +02:00
test_lifecycle.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_live_decision_enrichment.py fix: bind approval consumption to actual Flex Auth submissions 2026-09-09 08:55:46 +02:00
test_metered_activation_review.py Correct metered Sonnet 5 admission and prepare native action packet 2026-09-27 17:00:33 +02:00
test_multifield_readiness.py feat: implement the PIP claim + validate authorization join 2026-09-06 01:01:55 +02:00
test_openbao_safe_write.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_openbao_secret_source.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
test_openrouter_binding.py Align native CLI execution with approved T03 targets and authority 2026-09-14 03:21:48 +02:00
test_openrouter_key_check.py Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
test_privileged_cli_evidence.py feat: implement the PIP claim + validate authorization join 2026-09-06 01:01:55 +02:00
test_publication_policy.py feat(policy): netkingdom maturity-gated publication-scope policy 2026-06-28 13:14:46 +02:00
test_redact_evidence.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_release_bundle.py build: package CLI with pinned producer verifier 2026-10-16 09:20:33 +02:00
test_rotate.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
test_safe_paths.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
test_secret_use.py Ship secret-use snapshot surface for kings-guard 2026-09-02 01:31:23 +02:00
test_service_auth.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
test_service_jwt_boundary.py Prepare reviewed service JWT boundary verification and retain execution adoption gates 2026-10-11 14:11:59 +02:00
test_session_revoke.py Revoke leases by operator-held lease id 2026-09-02 10:08:33 +02:00
test_task_approval_preparation.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
test_task_execution_handoff.py feat: require strict signed task authorization before approval consumption 2026-10-16 09:20:57 +02:00
test_trusted_successor.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
test_verification_negative.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
test_wp0006_cutover.py Prepare WP-0006 first-lane native cutover packet 2026-09-03 23:36:42 +02:00
test_wrap.py Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00
test_wrapped_issuer_native.py Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00