✔ pure resolution selects current default or explicit enrolled account (1.930839ms)
✔ scope is explicit, bounded and never inferred (1.579674ms)
✔ fork pin is preserved against default change, override, missing account and revocation (0.707803ms)
✔ unenrolled account/provider, missing harness, model expansion and native model ceiling refuse (0.766429ms)
✔ only explicit synthetic credential forms and internal fixture stores admitted (5.400274ms)
✔ two concurrent workspaces of the same agent publish distinct complete private generations (64.324264ms)
✔ same execution ID is exclusively claimed and cannot overwrite a published generation (33.319769ms)
✔ failed generation after-auth preserves prior files, records failure and refuses blind same-ID retry (46.916901ms)
✔ failed generation before-publish preserves prior files, records failure and refuses blind same-ID retry (57.42233ms)
✔ credential lock contention refuses without duplicate side effects (11.834117ms)
✔ symlinked pre-existing final target is refused and never followed (27.221681ms)
✔ invalid registry cannot resolve; no fallback to supplied partial entries (0.260584ms)
✔ post-publication failure records uncertainty, preserves complete generation and prevents replay (27.964977ms)
✔ expired credentials refresh under transaction and subsequent generation reuses rotation (86.889639ms)
✔ refresh failure retains prior generation and store state (62.529411ms)
✔ refresh timeout retains prior generation and store state (144.668011ms)
✔ refresh malformed retains prior generation and store state (64.722602ms)
✔ concurrent refresh on same account refuses contention while unrelated account proceeds (224.224329ms)
✔ invalid refresh options refuse before burning claim (31.53746ms)
✔ fixed fake process rotates both OAuth fields without mutating caller input (28.516211ms)
✔ concurrent isolated processes preserve separate provider credentials (25.249007ms)
✔ fake failure is refused with fixed diagnostics (21.12481ms)
✔ fake malformed is refused with fixed diagnostics (20.355237ms)
✔ fake timeout is refused with fixed diagnostics (102.775617ms)
✔ fake unchanged is refused with fixed diagnostics (25.278983ms)
✔ caller executable/environment injection is rejected before spawning (0.303524ms)
✔ valid fixture tree validates and lists without secrets (64.785635ms)
✔ unknown-field refuses (0.411202ms)
✔ invalid-id refuses uppercase and traversal shapes (0.259855ms)
✔ plain-http baseUrl requires allowInsecureTransport (0.290166ms)
✔ native provider rejects allowInsecureTransport (0.162347ms)
✔ unsupported credential type and kind refuse (0.597851ms)
✔ account provider-path mismatch refuses (0.112395ms)
✔ profile account refs must be provider/account shaped (0.222138ms)
✔ seat selection accepts fork pin field, validates account refs (0.200538ms)
✔ harness manifest id must equal executable (gate 1) (0.203857ms)
✔ CLI validate: duplicate provider id across files refuses (26.902388ms)
✔ CLI validate: missing referenced provider/account refuse (33.213085ms)
✔ CLI validate: broken JSON refuses without secret echo (26.529704ms)
✔ CLI usage errors exit 2 (47.903346ms)
✔ credential.json sibling presence does not break validation and is never read (64.004432ms)
✔ D1 missing, empty and structurally empty roots refuse, no list projection (165.183705ms)
✔ D1 required directory auth cannot be absent (53.028316ms)
✔ D1 required directory auth/providers cannot be absent (51.14849ms)
✔ D1 required directory auth/accounts cannot be absent (54.833256ms)
✔ D1 required directory auth/settings cannot be absent (56.033178ms)
✔ D1 required directory harnesses cannot be absent (58.776871ms)
✔ D1 root file and unreadable metadata refuse (104.370935ms)
✔ D2 no symlink traversal at auth/providers/openai-codex.json (52.155363ms)
✔ D2 no symlink traversal at auth/accounts/openai-codex/homelab-openai (57.45443ms)
✔ D2 no symlink traversal at auth/providers (51.13676ms)
✔ D2 no symlink traversal at auth (51.325245ms)
✔ D2 root and ancestor symlinks and lexical traversal refuse (153.072849ms)
✔ private filesystem modes enforced for root (49.12952ms)
✔ private filesystem modes enforced for auth (55.356608ms)
✔ private filesystem modes enforced for auth/providers/openai-codex.json (51.734747ms)
✔ private filesystem modes enforced for auth/accounts/openai-codex/homelab-openai/account.json (62.329932ms)
✔ D3 numeric version 1 only across all record kinds (1.190245ms)
✔ D4 nested unknown keys and missing per-kind required fields refuse (63.489052ms)
✔ D5 unenrolled default refuses even when account exists (63.196333ms)
✔ D6 provider/account credential type must match (106.374023ms)
✔ D7 every harness endpoint enforces HTTP opt-in and shape (8.987352ms)
✔ D8 URLs reject embedded credentials and unsupported protocols without echo (246.926037ms)
✔ D9 malformed JSON diagnostics contain no content excerpt (66.617514ms)
✔ D10 missing metadata is missing-path, not invalid-json (70.359428ms)
✔ D10 library returns no partial entries on any invalid record (74.804571ms)
✔ null/scalar/array metadata refuses without stack or echo (236.797071ms)
✔ credential sibling is never opened, even when an unreadable symlink (32.830831ms)
✔ oversized metadata refuses before parsing (54.445481ms)
ℹ tests 69
ℹ suites 0
ℹ pass 69
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 2203.491302
