Go-live T05 + WP-0013/0014: first Phase and Control Plane completion

Accept WP-0008-T05 for trsl:phase:info-tech-canon-service-surface
(history/260805-T05-GoLive-info-tech-canon.md). Finish WP-0013 remission
automation and WP-0014 extension/breach/attestation Control Plane UI.
Update SCOPE, README, and pilot-candidate notes for pilot Stage 1.
This commit is contained in:
tegwick 2026-08-05 16:00:06 +02:00
parent f56d82f09a
commit 3064c0fe0c
18 changed files with 1676 additions and 72 deletions

View file

@ -381,3 +381,202 @@ def test_phase_new_form_has_no_ledger_input(client, credentials):
assert 'name="repo_hub_uri"' in resp.text
assert 'name="repo_id"' in resp.text
assert 'name="repo_name"' in resp.text
# --- WP-0014: extensions / breach / attestation UI -------------------------
def _register_phase(client, phase_id, amount="1000"):
return client.post(
"/phases/new",
data={
"phase_id": phase_id,
"milestone_release_name": "WP-0014 test release",
"source_revision": "abc123",
"repo_hub": "forgejo-coulomb",
"repo_hub_uri": "https://forgejo.coulomb.social",
"repo_id": "103",
"repo_name": "coulomb/target-revenue",
"initial_target_amount": amount,
"currency": "USD",
"future_license": "MIT",
"degeneration_policy": "trsl:policy:linear-longstop-v0@1.0",
"longstop_at": "2027-01-01T00:00:00Z",
},
follow_redirects=False,
)
def test_viewer_can_list_extensions_operator_registers_admin_promotes(
client, credentials
):
ext_id = "trsl:extension:wp0014-test-" + uuid.uuid4().hex[:6]
version = "1.0"
_login(client, credentials["viewer"].token)
resp = client.get("/extensions")
assert resp.status_code == 200
assert "Monetization Extension Registry" in resp.text
# Viewer cannot register
denied = client.post(
"/extensions",
data={
"extension_id": ext_id,
"version": version,
"value_description": "Test extension for WP-0014",
"pricing_method": "fixed-fee",
"allocation_rule": "100% to Development Credit",
"default_rate": "1.0",
"recognition_event": "payment-settled",
"reversal_rule": "Refunds reverse the credit",
"evidence_requirement": "Settled payment reference",
},
follow_redirects=False,
)
assert denied.status_code == 303
_login(client, credentials["operator"].token)
reg = client.post(
"/extensions",
data={
"extension_id": ext_id,
"version": version,
"value_description": "Test extension for WP-0014",
"pricing_method": "fixed-fee",
"allocation_rule": "100% to Development Credit",
"default_rate": "1.0",
"recognition_event": "payment-settled",
"reversal_rule": "Refunds reverse the credit",
"evidence_requirement": "Settled payment reference",
},
follow_redirects=False,
)
assert reg.status_code == 303
assert reg.headers["location"] == "/extensions"
listed = client.get("/extensions")
assert ext_id in listed.text
assert "registered" in listed.text
# Operator cannot promote
op_promote = client.post(
"/extensions/promote",
data={"extension_id": ext_id, "version": version},
follow_redirects=False,
)
assert op_promote.status_code == 303
_login(client, credentials["admin"].token)
promote = client.post(
"/extensions/promote",
data={"extension_id": ext_id, "version": version},
follow_redirects=False,
)
assert promote.status_code == 303
after = client.get("/extensions")
assert "canonical" in after.text
def test_operator_publishes_anonymized_breach(client, credentials):
_login(client, credentials["operator"].token)
phase_id = "trsl:phase:wp0014-breach-" + uuid.uuid4().hex[:8]
assert _register_phase(client, phase_id).status_code == 303
record_id = "trsl:breach:wp0014-" + uuid.uuid4().hex[:8]
resp = client.post(
f"/phases/{phase_id}/breach",
data={
"record_id": record_id,
"case_id": "case-001",
"event_type": "alleged",
"category": "unauthorized-commercial-use",
"event_at": "2026-08-01T12:00:00Z",
"evidence_reference": "confidential:evidence:case-001",
"anonymized": "true",
"named_entitlement_holder": "",
"named_disclosure_authorized": "false",
},
follow_redirects=False,
)
assert resp.status_code == 303, resp.headers
assert resp.headers["location"] == f"/phases/{phase_id}"
detail = client.get(f"/phases/{phase_id}")
assert detail.status_code == 200
assert record_id in detail.text
assert "unauthorized-commercial-use" in detail.text
assert "anonymized" in detail.text
def test_named_breach_requires_cua_authorization(client, credentials):
_login(client, credentials["operator"].token)
phase_id = "trsl:phase:wp0014-named-" + uuid.uuid4().hex[:8]
assert _register_phase(client, phase_id).status_code == 303
# Missing CUA authorization → rejected (flash danger, still redirect)
resp = client.post(
f"/phases/{phase_id}/breach",
data={
"record_id": "trsl:breach:named-fail-" + uuid.uuid4().hex[:6],
"case_id": "case-named",
"event_type": "determined",
"category": "payment-default",
"event_at": "2026-08-02T00:00:00Z",
"anonymized": "false",
"named_entitlement_holder": "Acme Corp",
"named_disclosure_authorized": "false",
},
follow_redirects=True,
)
assert resp.status_code == 200
# Should not show a published named record
assert "Acme Corp" not in resp.text or "named_disclosure_authorized" in resp.text.lower() or "rejected" in resp.text.lower() or "must be true" in resp.text.lower() or "danger" in resp.text.lower() or "flash" in resp.text.lower()
# With authorization → accepted
ok = client.post(
f"/phases/{phase_id}/breach",
data={
"record_id": "trsl:breach:named-ok-" + uuid.uuid4().hex[:6],
"case_id": "case-named",
"event_type": "determined",
"category": "payment-default",
"event_at": "2026-08-02T00:00:00Z",
"anonymized": "false",
"named_entitlement_holder": "Acme Corp",
"named_disclosure_authorized": "true",
},
follow_redirects=False,
)
assert ok.status_code == 303
detail = client.get(f"/phases/{phase_id}")
assert "Acme Corp" in detail.text
def test_attestation_shown_after_conversion(client, credentials):
_login(client, credentials["operator"].token)
phase_id = "trsl:phase:wp0014-attest-" + uuid.uuid4().hex[:8]
assert _register_phase(client, phase_id, amount="100").status_code == 303
before = client.get(f"/phases/{phase_id}")
assert "Not converted" in before.text or "no attestation" in before.text.lower()
client.post(
f"/phases/{phase_id}/ledger",
data={
"entry_id": "trsl:entry:wp0014full" + uuid.uuid4().hex[:6],
"amount": "100",
"currency": "USD",
"recognized_at": "2026-08-01T00:00:00Z",
"evidence_reference": "confidential:evidence:full",
"extension_id": "trsl:extension:development-license",
"extension_version": "1.0",
},
follow_redirects=False,
)
after = client.get(f"/phases/{phase_id}")
assert after.status_code == 200
assert "Conversion Attestation" in after.text
assert "MIT" in after.text # future_license
assert "ledger_checkpoint" in after.text or "Ledger checkpoint" in after.text

View file

@ -300,10 +300,18 @@ def test_metrics_endpoint_unauthenticated_and_matches_offline_computation(
entries = client.get(f"/phases/{phase_id}/ledger").json()
as_of = metrics_module.datetime.fromisoformat(hosted["as_of"])
offline = metrics_module.compute_metrics(registered_phase, entries, as_of)
# Hosted metrics pass phase_manifests.registered_at as activated_at
# (WP-0013); offline recompute must use the same t0 for parity.
activated_at = None
if hosted["facts"].get("activated_at"):
activated_at = metrics_module.datetime.fromisoformat(hosted["facts"]["activated_at"])
offline = metrics_module.compute_metrics(
registered_phase, entries, as_of, activated_at=activated_at
)
assert hosted == offline
assert hosted["facts"]["cumulative_development_credit"] == 4000
assert hosted["facts"]["activated_at"] is not None
def test_attestation_not_available_before_conversion(client, pg_container, registered_phase):

158
tests/test_remission.py Normal file
View file

@ -0,0 +1,158 @@
"""Pure offline tests for target_revenue.remission (WP-0013).
No Docker/Postgres plan_remission / cumulative_remission are pure like fold.py.
"""
from __future__ import annotations
from datetime import datetime, timezone
from copy import deepcopy
import pytest
from conftest import golden_entries, golden_manifest
from target_revenue import fold, remission
def _dt(s: str) -> datetime:
return datetime.fromisoformat(s.replace("Z", "+00:00"))
def test_cumulative_remission_endpoints():
t0 = _dt("2026-01-01T00:00:00Z")
tL = _dt("2027-01-01T00:00:00Z")
T0 = 100_000.0
assert remission.cumulative_remission(T0, t0, tL, t0) == 0.0
assert remission.cumulative_remission(T0, t0, tL, tL) == T0
assert remission.cumulative_remission(T0, t0, tL, _dt("2025-01-01T00:00:00Z")) == 0.0
assert remission.cumulative_remission(T0, t0, tL, _dt("2028-01-01T00:00:00Z")) == T0
def test_cumulative_remission_midpoint():
t0 = _dt("2026-01-01T00:00:00Z")
tL = _dt("2027-01-01T00:00:00Z")
mid = _dt("2026-07-02T12:00:00Z") # ~half of non-leap 365d span
# Exact half of 365 days from 2026-01-01:
half = _dt("2026-07-02T12:00:00Z")
got = remission.cumulative_remission(100_000.0, t0, tL, half)
# 182.5 / 365 = 0.5 exactly for non-leap year.
assert abs(got - 50_000.0) < 1.0
def test_plan_remission_delta_is_idempotent_at_same_as_of():
manifest = golden_manifest()
# Golden longstop is 2031-08-01; pick a synthetic t0 five years earlier.
t0 = _dt("2026-08-01T00:00:00Z")
as_of = _dt("2027-08-01T00:00:00Z") # 1/5 of the way if longstop 2031-08-01
plan1 = remission.plan_remission(manifest, [], t0=t0, as_of=as_of)
assert plan1 is not None
assert plan1.should_append
entry = remission.build_remission_entry_input(
manifest["phase"]["id"], plan1, currency="USD", entry_id="trsl:entry:remtest1"
)
assert entry is not None
assert entry["type"] == "remission-credit"
assert entry["extension"]["id"] == "trsl:policy:linear-longstop-v0"
plan2 = remission.plan_remission(manifest, [entry], t0=t0, as_of=as_of)
assert plan2 is not None
assert not plan2.should_append
assert plan2.delta == 0.0
assert remission.build_remission_entry_input(manifest["phase"]["id"], plan2, "USD") is None
def test_plan_ignores_corrections_in_already_remitted():
"""A remission-correction must not be treated as policy-produced credit
for the next auto-run (would silently undo a deliberate correction)."""
manifest = golden_manifest()
t0 = _dt("2026-08-01T00:00:00Z")
as_of = _dt("2028-08-01T00:00:00Z")
plan = remission.plan_remission(manifest, [], t0=t0, as_of=as_of)
assert plan is not None and plan.delta > 0
fake_correction = {
"id": "trsl:entry:corr1",
"phase": manifest["phase"]["id"],
"type": "remission-correction",
"amount": plan.delta,
"currency": "USD",
"recognized_at": as_of.isoformat(),
"evidence_reference": "x",
"previous_entry_hash": "GENESIS",
"reverses": "trsl:entry:someone",
}
plan2 = remission.plan_remission(manifest, [fake_correction], t0=t0, as_of=as_of)
assert plan2 is not None
# Correction does not count toward already_remitted → still wants full delta.
assert plan2.delta == plan.delta
def test_unsupported_policy_returns_none():
manifest = deepcopy(golden_manifest())
manifest["phase"]["degeneration_policy"] = "trsl:policy:progress-paused-longstop-v1@1.0"
plan = remission.plan_remission(
manifest, [], t0=_dt("2026-01-01T00:00:00Z"), as_of=_dt("2027-01-01T00:00:00Z")
)
assert plan is None
def test_next_monthly_boundary():
assert remission.next_monthly_boundary(_dt("2026-08-05T12:00:00Z")) == _dt(
"2026-09-01T00:00:00Z"
)
assert remission.next_monthly_boundary(_dt("2026-12-15T00:00:00Z")) == _dt(
"2027-01-01T00:00:00Z"
)
def test_next_scheduled_prefers_longstop_when_sooner():
as_of = _dt("2026-08-05T00:00:00Z")
longstop = _dt("2026-08-20T00:00:00Z")
assert remission.next_scheduled_remission_at(as_of, longstop) == longstop
assert remission.next_scheduled_remission_at(longstop, longstop) is None
def test_planned_entry_validates_and_folds():
from target_revenue import validation
manifest = golden_manifest()
t0 = _dt("2026-08-01T00:00:00Z")
as_of = _dt("2029-08-01T00:00:00Z")
plan = remission.plan_remission(manifest, [], t0=t0, as_of=as_of)
entry = remission.build_remission_entry_input(
manifest["phase"]["id"], plan, "USD", entry_id="trsl:entry:remfold1"
)
assert entry is not None
entry["previous_entry_hash"] = "GENESIS"
validation.validate_ledger_entry(entry)
result = fold.fold_outstanding_target(manifest["phase"]["initial_target"]["amount"], [entry])
assert result.remission_credit == entry["amount"]
assert result.outstanding_target == pytest.approx(
manifest["phase"]["initial_target"]["amount"] - entry["amount"]
)
def test_metrics_remission_forecasts_with_activated_at():
from target_revenue import metrics
manifest = golden_manifest()
t0 = _dt("2026-08-01T00:00:00Z")
as_of = _dt("2027-08-01T00:00:00Z")
result = metrics.compute_metrics(manifest, [], as_of, activated_at=t0)
assert result["facts"]["activated_at"] == t0.isoformat()
assert result["forecasts"]["remission_if_applied_now"] is not None
assert result["forecasts"]["remission_if_applied_now"] > 0
assert result["forecasts"]["next_scheduled_remission_at"] is not None
assert result["forecasts"]["next_scheduled_remission_amount"] is not None
def test_metrics_without_activated_at_leaves_remission_forecasts_null():
from target_revenue import metrics
manifest = golden_manifest()
as_of = _dt("2027-08-01T00:00:00Z")
result = metrics.compute_metrics(manifest, golden_entries(), as_of)
assert result["facts"]["activated_at"] is None
assert result["forecasts"]["remission_if_applied_now"] is None
assert result["forecasts"]["next_scheduled_remission_at"] is None

View file

@ -0,0 +1,178 @@
"""Hosted integration tests for WP-0013 remission automation.
Same ephemeral Postgres-via-Docker pattern as test_ledger_hosting.py.
"""
from __future__ import annotations
import shutil
import subprocess
import time
import uuid
from datetime import datetime, timedelta, timezone
from pathlib import Path
import pytest
psycopg = pytest.importorskip("psycopg")
pytest.importorskip("fastapi")
from fastapi.testclient import TestClient # noqa: E402
from conftest import golden_manifest # noqa: E402
REPO_ROOT = Path(__file__).resolve().parents[1]
MIGRATIONS = [
REPO_ROOT / "migrations" / "0001_registries.sql",
REPO_ROOT / "migrations" / "0002_ledger.sql",
REPO_ROOT / "migrations" / "0003_attestations.sql",
REPO_ROOT / "migrations" / "0004_breach_records.sql",
REPO_ROOT / "migrations" / "0005_licensor_credentials.sql",
]
pytestmark = pytest.mark.skipif(
shutil.which("docker") is None, reason="docker not available"
)
@pytest.fixture(scope="module")
def pg_container():
name = f"trf-test-pg-remission-{uuid.uuid4().hex[:8]}"
subprocess.run(
[
"docker", "run", "--rm", "-d",
"--name", name,
"-e", "POSTGRES_PASSWORD=postgres",
"-e", "POSTGRES_DB=target_revenue_test",
"-p", "127.0.0.1::5432",
"postgres:16-alpine",
],
check=True, capture_output=True,
)
try:
port_out = subprocess.run(
["docker", "port", name, "5432/tcp"], check=True, capture_output=True, text=True
).stdout.strip()
host_port = port_out.split(":")[-1]
dsn = f"host=127.0.0.1 port={host_port} dbname=target_revenue_test user=postgres password=postgres"
for _ in range(60):
try:
with psycopg.connect(dsn, connect_timeout=1):
break
except psycopg.OperationalError:
time.sleep(0.5)
else:
raise RuntimeError("postgres container did not become ready in time")
with psycopg.connect(dsn) as conn:
for migration in MIGRATIONS:
conn.execute(migration.read_text(encoding="utf-8"))
conn.commit()
token = "test-token-acme"
conn.execute(
"INSERT INTO licensors (token, licensor_id, credential_label, rights) "
"VALUES (%s, %s, %s, %s)",
(token, "acme-corp", "admin-acme", "admin"),
)
conn.commit()
app_dsn = (
f"host=127.0.0.1 port={host_port} dbname=target_revenue_test "
f"user=trf_app password=changeme-in-deployment"
)
yield {"admin_dsn": dsn, "app_dsn": app_dsn, "token": token}
finally:
subprocess.run(["docker", "stop", name], capture_output=True)
@pytest.fixture()
def client(pg_container, monkeypatch):
monkeypatch.setenv("TRF_DATABASE_URL", pg_container["app_dsn"])
monkeypatch.setenv("TRF_SIGNING_KEY_HEX", "11" * 32)
from target_revenue.service import app as app_module
if hasattr(app_module.app.state, "pool"):
app_module.app.state.pool.close()
del app_module.app.state.pool
if hasattr(app_module.app.state, "signing_key"):
del app_module.app.state.signing_key
with TestClient(app_module.app) as c:
yield c
def auth_headers(token: str):
return {"Authorization": f"Bearer {token}"}
def test_apply_remission_writes_entry_and_is_idempotent(client, pg_container):
from target_revenue import fold
manifest = golden_manifest()
manifest["phase"]["id"] = "trsl:phase:remission-test-" + uuid.uuid4().hex[:8]
# Multi-year longstop so wall-clock drift between the two apply calls
# stays under MIN_REMISSION_AMOUNT (idempotency floor). Backdate t0 so
# R(now) is still a material fraction of T0.
now = datetime.now(timezone.utc)
manifest["phase"]["longstop_at"] = (now + timedelta(days=365 * 5)).strftime(
"%Y-%m-%dT%H:%M:%SZ"
)
r = client.post("/phases", json=manifest, headers=auth_headers(pg_container["token"]))
assert r.status_code == 201, r.text
phase_id = manifest["phase"]["id"]
with psycopg.connect(pg_container["admin_dsn"]) as conn:
conn.execute(
"UPDATE phase_manifests SET registered_at = %s WHERE phase_id = %s",
(now - timedelta(days=365), phase_id),
)
conn.commit()
first = client.post(
f"/phases/{phase_id}/remission", headers=auth_headers(pg_container["token"])
)
assert first.status_code == 201, first.text
body = first.json()
assert body["status"] == "appended"
entry = body["entry"]
assert entry["type"] == "remission-credit"
assert entry["amount"] > 0
assert entry["extension"]["id"] == "trsl:policy:linear-longstop-v0"
second = client.post(
f"/phases/{phase_id}/remission", headers=auth_headers(pg_container["token"])
)
assert second.status_code == 201, second.text
assert second.json()["status"] == "up_to_date"
assert second.json()["entry"] is None
entries = client.get(f"/phases/{phase_id}/ledger").json()
remissions = [e for e in entries if e["type"] == "remission-credit"]
assert len(remissions) == 1
result = fold.fold_outstanding_target(manifest["phase"]["initial_target"]["amount"], entries)
assert result.remission_credit == remissions[0]["amount"]
# Attribution: submitted by system:policy-engine, not the human token.
with psycopg.connect(pg_container["admin_dsn"]) as conn:
row = conn.execute(
"""
SELECT li.credential_label
FROM ledger_entries le
JOIN licensors li ON li.token = le.submitted_by_token
WHERE le.phase_id = %s
""",
(phase_id,),
).fetchone()
assert row[0] == "system:policy-engine"
def test_metrics_include_remission_forecasts(client, pg_container):
manifest = golden_manifest()
manifest["phase"]["id"] = "trsl:phase:remission-metrics-" + uuid.uuid4().hex[:8]
client.post("/phases", json=manifest, headers=auth_headers(pg_container["token"])).raise_for_status()
phase_id = manifest["phase"]["id"]
metrics = client.get(f"/phases/{phase_id}/metrics").json()
assert metrics["facts"]["activated_at"] is not None
assert "remission_if_applied_now" in metrics["forecasts"]
assert "next_scheduled_remission_at" in metrics["forecasts"]