Converge layer checker on GH-DEC-2026-021.

VALIDATED_AGAINST names v0.7 at net-kingdom@66dc491 as amended by
GH-DEC-2026-017/020/021 (gate-house@39d9287). The version detector adopts
ops-warden's estate reference: identity-bearing standard:/companion: values
carrying a version token are pins; keys naming neither are not reached.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 58902@bnt-lap001
Assistant-Session: 7ac7f865-2dc5-4aa7-8eb7-27a342109c2f
This commit is contained in:
tegwick 2026-09-22 16:14:32 +02:00
parent a7312baafc
commit abd4bf1fd8
2 changed files with 33 additions and 10 deletions

View file

@ -81,6 +81,15 @@ class LayerDeclarationTests(unittest.TestCase):
# pep-stance.yaml keeps its version fields (GH-DEC-2026-020 §3).
self.assertTrue(module.find_versions(load_mapping(STANCE_FILE), "stance"))
def test_version_scan_matches_estate_reference_detector(self):
# GH-DEC-2026-021 §3 (A12 r3): a version token in an identity-bearing
# value is a pin; a key naming neither standard nor companion is not.
module = _checker()
self.assertTrue(module.find_versions({"standard": "security-layer-model 0.7"}, "x"))
self.assertTrue(module.find_versions({"companion": ["SECURITY-COMPANION v0.2"]}, "x"))
self.assertEqual(module.find_versions({"intent_version": "0.3"}, "x"), [])
self.assertEqual(module.find_versions({"note": "revised 0.7 wording"}, "x"), [])
def test_every_run_prints_version_and_scope(self):
module = _checker()
for argv in ([], ["--report"]):