test_actual_case_refuses_without_synthesizing_gate (__main__.ProjectionTests.test_actual_case_refuses_without_synthesizing_gate) ... ok
test_actual_chart_reference_render_and_cli_shape (__main__.ProjectionTests.test_actual_chart_reference_render_and_cli_shape) ... ok
test_actual_forgejo_gate_has_one_literal_operand (__main__.ProjectionTests.test_actual_forgejo_gate_has_one_literal_operand) ... ok
test_baseline_pin_refuses (__main__.ProjectionTests.test_baseline_pin_refuses) ... ok
test_decoded_baseline_pin_refuses (__main__.ProjectionTests.test_decoded_baseline_pin_refuses) ... ok
test_dispatch_always_refuses (__main__.ProjectionTests.test_dispatch_always_refuses) ... ok
test_existing_sources_and_secret_references_remain (__main__.ProjectionTests.test_existing_sources_and_secret_references_remain) ... ok
test_policy_only_patch_preserves_all_other_configuration (__main__.ProjectionTests.test_policy_only_patch_preserves_all_other_configuration) ... ok
test_unrelated_policy_and_ambiguous_source_refuse (__main__.ProjectionTests.test_unrelated_policy_and_ambiguous_source_refuse) ... ok

----------------------------------------------------------------------
Ran 9 tests in 0.389s

OK
{"gate_evidence": {"joined_or_regex_value_matches_any_individual_case_group": false, "running_forgejo_callback_test": false, "singular_literal_operand": true}, "reference_render": {"actual_case_gate": "refused", "ambient_environment": false, "chart": "12.5.0", "cli_flags_match_pinned_forgejo": true, "forgejo_image": "11.0.3", "native_calls": false, "private_helper_executed": false, "secret_reference": {"key": "CLIENT_SECRET", "name": "forgejo-netkingdom-oidc-client"}, "secret_values_used": false}, "rendered_negative_controls": {"actual_delivery_keys": ["CLIENT_SECRET"], "existingSecret_requests": ["key", "secret"], "helm_schema_does_not_reject_unknown_oauth_keys": true, "invented_list_field_renders_unknown_cli_flag": "--required-claim-values"}, "successful": true, "tests_run": 9}
