jason.woltjeandClaude Opus 5.5
58e85d0fa1
Candidate manifest sha256 710d50866e77055b7231a53e3601bd2bab7686b722160f81ddda030875f67e9b, 30 files. Targeted gate green, 77 of 77 mutants killed, repro DIGESTS_OK. Co-Authored-By: Claude Opus 5.5 <[email protected]>
57 lines
4.8 KiB
Plaintext
57 lines
4.8 KiB
Plaintext
✔ endLaunch writes session.ended, releases the run claim and kills its capabilities (111.756599ms)
|
||
✔ endLaunch refuses an unknown run, a second end and a rebind of the ended run (123.016429ms)
|
||
✔ a restarted broker refuses to rebind an ended run; a refused rebind leaves the run unbound (126.364809ms)
|
||
✔ endLaunch leaves a claim another run took alone (139.406214ms)
|
||
✔ refuse records action.refused against the caller with the code only (109.559113ms)
|
||
✔ launches off refuses role.launch with launch-revoked until launches on (156.805412ms)
|
||
✔ broker process: launch ops authorize role.launch, record refusals and end runs (254.648961ms)
|
||
✔ the assistant sends to the user and to the chief of staff only (271.890805ms)
|
||
✔ an assistant send to any other role, or to the tester, is refused and logged (291.120342ms)
|
||
✔ only the user and the chief of staff may send to the assistant; the tester is refused by default (298.858051ms)
|
||
✔ REQ-ASSIST-2 REQ-THREAD-1 thread.send to an instance that does not hear from the user is refused and stores nothing (254.925121ms)
|
||
✔ a sender-side list alone refuses a send to a role that has no list (262.125357ms)
|
||
✔ a target-side list alone refuses a send from a role that has no list (271.092442ms)
|
||
✔ the sender list is checked before the target list (229.02629ms)
|
||
✔ roles without the field behave exactly as before (347.939753ms)
|
||
✔ a business with no role definitions at all is unlimited (254.984019ms)
|
||
✔ a malformed messaging field refuses at boot (68.609159ms)
|
||
✔ the assistant's review.request to a reviewer is refused and logged, even with an approved decision (274.780199ms)
|
||
✔ a review.verdict to the assistant from a role outside its receiveFrom is refused and logged (303.327281ms)
|
||
✔ review requests and verdicts between roles without the field are unchanged (246.451538ms)
|
||
✔ broker process binds trusted launches, offers reader capabilities, refuses human mutation, closes cleanly (172.048224ms)
|
||
✔ startup token refusal returns safe code without value or partial listening broker (45.508601ms)
|
||
✔ loaded fixture token is absent from socket replies and SQLite, including refusal evidence (163.036919ms)
|
||
✔ killed broker leaves an explicit stale lock; another process cannot silently reclaim it (158.86667ms)
|
||
✔ trusted host registers later launches; socket clients never have a registration verb (168.985851ms)
|
||
✔ runtime excludes declared project roots even when host supplies no repoRoots (44.86898ms)
|
||
✔ a refused launch binding leaves the broker and existing capabilities alive; bad protocol stops it (153.178065ms)
|
||
✔ v3b prototype refusals, views and append-only mutations (1247.794141ms)
|
||
✔ creates private WAL store and excludes a second writer until explicit close (106.571324ms)
|
||
✔ rollback is atomic and schema metadata is checked against trusted DDL, not just itself (140.941292ms)
|
||
✔ existing empty database and symlink runtime directory refuse, never initialize over damage (155.232397ms)
|
||
✔ crash during a transaction recovers no partial event after explicit fixture-only lock removal (156.778935ms)
|
||
✔ writer refuses mixed at/read_at forms atomically, even through trusted SQL helpers (87.159288ms)
|
||
✔ async transactions refuse before invoking their function (79.327525ms)
|
||
✔ REQ-ROLE-2 REQ-THREAD-1: one holder per thread, through the broker and the trigger (284.892304ms)
|
||
✔ REQ-ROLE-2 REQ-THREAD-1: the 3e triggers refuse writes that skip the broker (986.900415ms)
|
||
✔ REQ-MSG-1: a message to or from the assistant names its thread, or is refused (270.484144ms)
|
||
✔ REQ-MSG-1: the chief of staff's reply comes back to the thread that sent the work (3410.986511ms)
|
||
✔ REQ-MSG-1: a reply can't carry one thread instance's thread to another thread instance (102.390637ms)
|
||
✔ REQ-THREAD-1 REQ-USER-2: one thread's messages never reach another thread's holder (146.84362ms)
|
||
✔ REQ-LAUNCH-1: a message to a thread with no holder waits, and the next holder gets it (149.639011ms)
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1: threadIdle releases only a thread with nothing waiting, and only for its holder (166.035034ms)
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1: a message delivered to a run that ended unread doesn't hold up the next holder (153.063171ms)
|
||
✔ REQ-ROLE-2 REQ-THREAD-1: an approved role.revoke never reaches a thread run, and the thread stays held (138.904697ms)
|
||
✔ REQ-USER-2: the human verbs refuse another owner's thread (149.92341ms)
|
||
✔ REQ-THREAD-1: thread.create refuses when the business has no thread instance or more than one (99.168451ms)
|
||
✔ REQ-ORG-2: projects and threads are named once, and the repo names a business project (146.13636ms)
|
||
✔ REQ-THREAD-2: thread.messages returns the thread's history in pages and writes nothing (466.430765ms)
|
||
ℹ tests 48
|
||
ℹ suites 0
|
||
ℹ pass 48
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 6739.304011
|