Candidate on 96656dd21: broker split refuses invalid-recommendation after the
option checks, raise_decision text asks for one key and names the yes default,
bus README codes table, broker and tools tests. Mutants m1 (old shared line)
and m2 (order swapped) killed; full gate passed 15:42:03-15:47:36Z.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
78 lines
5.4 KiB
Plaintext
78 lines
5.4 KiB
Plaintext
✔ pure resolution selects current default or explicit enrolled account (1.935644ms)
|
||
✔ scope is explicit, bounded and never inferred (1.582223ms)
|
||
✔ fork pin is preserved against default change, override, missing account and revocation (0.74856ms)
|
||
✔ unenrolled account/provider, missing harness, model expansion and native model ceiling refuse (0.761516ms)
|
||
✔ only explicit synthetic credential forms and internal fixture stores admitted (5.494906ms)
|
||
✔ two concurrent workspaces of the same agent publish distinct complete private generations (66.815132ms)
|
||
✔ same execution ID is exclusively claimed and cannot overwrite a published generation (33.284781ms)
|
||
✔ failed generation after-auth preserves prior files, records failure and refuses blind same-ID retry (47.816261ms)
|
||
✔ failed generation before-publish preserves prior files, records failure and refuses blind same-ID retry (58.435488ms)
|
||
✔ credential lock contention refuses without duplicate side effects (11.344368ms)
|
||
✔ symlinked pre-existing final target is refused and never followed (27.367767ms)
|
||
✔ invalid registry cannot resolve; no fallback to supplied partial entries (0.263032ms)
|
||
✔ post-publication failure records uncertainty, preserves complete generation and prevents replay (27.589417ms)
|
||
✔ expired credentials refresh under transaction and subsequent generation reuses rotation (84.828258ms)
|
||
✔ refresh failure retains prior generation and store state (63.357824ms)
|
||
✔ refresh timeout retains prior generation and store state (143.772623ms)
|
||
✔ refresh malformed retains prior generation and store state (61.459041ms)
|
||
✔ concurrent refresh on same account refuses contention while unrelated account proceeds (222.632213ms)
|
||
✔ invalid refresh options refuse before burning claim (36.553891ms)
|
||
✔ fixed fake process rotates both OAuth fields without mutating caller input (27.483906ms)
|
||
✔ concurrent isolated processes preserve separate provider credentials (25.536138ms)
|
||
✔ fake failure is refused with fixed diagnostics (21.503365ms)
|
||
✔ fake malformed is refused with fixed diagnostics (20.931774ms)
|
||
✔ fake timeout is refused with fixed diagnostics (103.373063ms)
|
||
✔ fake unchanged is refused with fixed diagnostics (22.432724ms)
|
||
✔ caller executable/environment injection is rejected before spawning (0.289821ms)
|
||
✔ valid fixture tree validates and lists without secrets (62.46474ms)
|
||
✔ unknown-field refuses (0.364043ms)
|
||
✔ invalid-id refuses uppercase and traversal shapes (0.266363ms)
|
||
✔ plain-http baseUrl requires allowInsecureTransport (0.28859ms)
|
||
✔ native provider rejects allowInsecureTransport (0.142832ms)
|
||
✔ unsupported credential type and kind refuse (0.147507ms)
|
||
✔ account provider-path mismatch refuses (0.10231ms)
|
||
✔ profile account refs must be provider/account shaped (0.247309ms)
|
||
✔ seat selection accepts fork pin field, validates account refs (0.208723ms)
|
||
✔ harness manifest id must equal executable (gate 1) (0.19226ms)
|
||
✔ CLI validate: duplicate provider id across files refuses (31.951655ms)
|
||
✔ CLI validate: missing referenced provider/account refuse (32.337286ms)
|
||
✔ CLI validate: broken JSON refuses without secret echo (28.382023ms)
|
||
✔ CLI usage errors exit 2 (48.939573ms)
|
||
✔ credential.json sibling presence does not break validation and is never read (54.554277ms)
|
||
✔ D1 missing, empty and structurally empty roots refuse, no list projection (163.072069ms)
|
||
✔ D1 required directory auth cannot be absent (52.825836ms)
|
||
✔ D1 required directory auth/providers cannot be absent (52.946553ms)
|
||
✔ D1 required directory auth/accounts cannot be absent (55.575854ms)
|
||
✔ D1 required directory auth/settings cannot be absent (59.359858ms)
|
||
✔ D1 required directory harnesses cannot be absent (65.360267ms)
|
||
✔ D1 root file and unreadable metadata refuse (106.016019ms)
|
||
✔ D2 no symlink traversal at auth/providers/openai-codex.json (55.897434ms)
|
||
✔ D2 no symlink traversal at auth/accounts/openai-codex/homelab-openai (62.475354ms)
|
||
✔ D2 no symlink traversal at auth/providers (52.392853ms)
|
||
✔ D2 no symlink traversal at auth (51.757394ms)
|
||
✔ D2 root and ancestor symlinks and lexical traversal refuse (150.746064ms)
|
||
✔ private filesystem modes enforced for root (48.865326ms)
|
||
✔ private filesystem modes enforced for auth (52.534661ms)
|
||
✔ private filesystem modes enforced for auth/providers/openai-codex.json (55.004412ms)
|
||
✔ private filesystem modes enforced for auth/accounts/openai-codex/homelab-openai/account.json (54.155336ms)
|
||
✔ D3 numeric version 1 only across all record kinds (1.175409ms)
|
||
✔ D4 nested unknown keys and missing per-kind required fields refuse (63.230765ms)
|
||
✔ D5 unenrolled default refuses even when account exists (69.932367ms)
|
||
✔ D6 provider/account credential type must match (57.462658ms)
|
||
✔ D7 every harness endpoint enforces HTTP opt-in and shape (0.438666ms)
|
||
✔ D8 URLs reject embedded credentials and unsupported protocols without echo (166.080278ms)
|
||
✔ D9 malformed JSON diagnostics contain no content excerpt (59.288329ms)
|
||
✔ D10 missing metadata is missing-path, not invalid-json (60.849936ms)
|
||
✔ D10 library returns no partial entries on any invalid record (69.162945ms)
|
||
✔ null/scalar/array metadata refuses without stack or echo (232.127943ms)
|
||
✔ credential sibling is never opened, even when an unreadable symlink (31.984538ms)
|
||
✔ oversized metadata refuses before parsing (51.138647ms)
|
||
ℹ tests 69
|
||
ℹ suites 0
|
||
ℹ pass 69
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 2052.852484
|