jason.woltjeandClaude Opus 5.5
9f1563ec16
Folds Filbert's N1 per Sage's comment 28355: the envelope test sends a role cap with a tester proof. The narrowing mutant at server.mjs:50 survives the full bus suite on round 1 and is killed on round 2. Full gate passed with the real bwrap tester case running. Co-Authored-By: Claude Opus 5.5 <[email protected]>
78 lines
5.4 KiB
Plaintext
78 lines
5.4 KiB
Plaintext
✔ pure resolution selects current default or explicit enrolled account (1.903968ms)
|
||
✔ scope is explicit, bounded and never inferred (1.579116ms)
|
||
✔ fork pin is preserved against default change, override, missing account and revocation (0.722036ms)
|
||
✔ unenrolled account/provider, missing harness, model expansion and native model ceiling refuse (0.780953ms)
|
||
✔ only explicit synthetic credential forms and internal fixture stores admitted (5.499922ms)
|
||
✔ two concurrent workspaces of the same agent publish distinct complete private generations (34.273503ms)
|
||
✔ same execution ID is exclusively claimed and cannot overwrite a published generation (32.581426ms)
|
||
✔ failed generation after-auth preserves prior files, records failure and refuses blind same-ID retry (46.235529ms)
|
||
✔ failed generation before-publish preserves prior files, records failure and refuses blind same-ID retry (56.411887ms)
|
||
✔ credential lock contention refuses without duplicate side effects (11.340162ms)
|
||
✔ symlinked pre-existing final target is refused and never followed (25.703076ms)
|
||
✔ invalid registry cannot resolve; no fallback to supplied partial entries (0.261187ms)
|
||
✔ post-publication failure records uncertainty, preserves complete generation and prevents replay (26.887512ms)
|
||
✔ expired credentials refresh under transaction and subsequent generation reuses rotation (88.925718ms)
|
||
✔ refresh failure retains prior generation and store state (65.271084ms)
|
||
✔ refresh timeout retains prior generation and store state (147.699662ms)
|
||
✔ refresh malformed retains prior generation and store state (70.526808ms)
|
||
✔ concurrent refresh on same account refuses contention while unrelated account proceeds (222.081349ms)
|
||
✔ invalid refresh options refuse before burning claim (31.564424ms)
|
||
✔ fixed fake process rotates both OAuth fields without mutating caller input (29.312958ms)
|
||
✔ concurrent isolated processes preserve separate provider credentials (23.915794ms)
|
||
✔ fake failure is refused with fixed diagnostics (20.865045ms)
|
||
✔ fake malformed is refused with fixed diagnostics (20.453495ms)
|
||
✔ fake timeout is refused with fixed diagnostics (102.359452ms)
|
||
✔ fake unchanged is refused with fixed diagnostics (23.36169ms)
|
||
✔ caller executable/environment injection is rejected before spawning (0.303784ms)
|
||
✔ valid fixture tree validates and lists without secrets (60.018745ms)
|
||
✔ unknown-field refuses (0.371485ms)
|
||
✔ invalid-id refuses uppercase and traversal shapes (0.267464ms)
|
||
✔ plain-http baseUrl requires allowInsecureTransport (0.288148ms)
|
||
✔ native provider rejects allowInsecureTransport (0.127905ms)
|
||
✔ unsupported credential type and kind refuse (0.156791ms)
|
||
✔ account provider-path mismatch refuses (0.116271ms)
|
||
✔ profile account refs must be provider/account shaped (0.212204ms)
|
||
✔ seat selection accepts fork pin field, validates account refs (0.229377ms)
|
||
✔ harness manifest id must equal executable (gate 1) (0.190868ms)
|
||
✔ CLI validate: duplicate provider id across files refuses (26.845818ms)
|
||
✔ CLI validate: missing referenced provider/account refuse (30.559197ms)
|
||
✔ CLI validate: broken JSON refuses without secret echo (25.958534ms)
|
||
✔ CLI usage errors exit 2 (47.026986ms)
|
||
✔ credential.json sibling presence does not break validation and is never read (62.641979ms)
|
||
✔ D1 missing, empty and structurally empty roots refuse, no list projection (165.304803ms)
|
||
✔ D1 required directory auth cannot be absent (53.506377ms)
|
||
✔ D1 required directory auth/providers cannot be absent (55.79635ms)
|
||
✔ D1 required directory auth/accounts cannot be absent (59.281125ms)
|
||
✔ D1 required directory auth/settings cannot be absent (62.350064ms)
|
||
✔ D1 required directory harnesses cannot be absent (61.348911ms)
|
||
✔ D1 root file and unreadable metadata refuse (105.732246ms)
|
||
✔ D2 no symlink traversal at auth/providers/openai-codex.json (51.979822ms)
|
||
✔ D2 no symlink traversal at auth/accounts/openai-codex/homelab-openai (63.002238ms)
|
||
✔ D2 no symlink traversal at auth/providers (62.075184ms)
|
||
✔ D2 no symlink traversal at auth (52.67446ms)
|
||
✔ D2 root and ancestor symlinks and lexical traversal refuse (149.117176ms)
|
||
✔ private filesystem modes enforced for root (49.727877ms)
|
||
✔ private filesystem modes enforced for auth (50.769968ms)
|
||
✔ private filesystem modes enforced for auth/providers/openai-codex.json (51.318586ms)
|
||
✔ private filesystem modes enforced for auth/accounts/openai-codex/homelab-openai/account.json (58.355741ms)
|
||
✔ D3 numeric version 1 only across all record kinds (1.176333ms)
|
||
✔ D4 nested unknown keys and missing per-kind required fields refuse (56.402093ms)
|
||
✔ D5 unenrolled default refuses even when account exists (67.323428ms)
|
||
✔ D6 provider/account credential type must match (61.59385ms)
|
||
✔ D7 every harness endpoint enforces HTTP opt-in and shape (0.445938ms)
|
||
✔ D8 URLs reject embedded credentials and unsupported protocols without echo (161.840977ms)
|
||
✔ D9 malformed JSON diagnostics contain no content excerpt (55.340877ms)
|
||
✔ D10 missing metadata is missing-path, not invalid-json (60.348108ms)
|
||
✔ D10 library returns no partial entries on any invalid record (71.907852ms)
|
||
✔ null/scalar/array metadata refuses without stack or echo (238.69823ms)
|
||
✔ credential sibling is never opened, even when an unreadable symlink (33.417448ms)
|
||
✔ oversized metadata refuses before parsing (56.186916ms)
|
||
ℹ tests 69
|
||
ℹ suites 0
|
||
ℹ pass 69
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 2070.961118
|