wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

feat(iwooos): commit wazuh live metadata readiness
Some checks failed
CD Pipeline / tests (push) Waiting to run
Details
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
Code Review / ai-code-review (push) Successful in 10s
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name
2026-06-28 15:53:17 +08:00
parent b419634843
commit 27a7190c2c
9 changed files with 213 additions and 86 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
apps/api/tests/test_iwooos_runtime_security_readback.py
View File

@@ -113,17 +113,17 @@ def test_iwooos_runtime_security_readback_preserves_zero_runtime_gates() -> None
assert payload["summary"]["wazuh_live_route_degraded_count"] == 1
assert payload["summary"]["wazuh_live_readonly_api_enabled_count"] == 0
assert payload["summary"]["wazuh_live_metadata_available_count"] == 0
assert payload["summary"]["wazuh_live_metadata_gate_owner_accepted_count"] == 0
assert payload["summary"]["wazuh_live_metadata_gate_owner_accepted_count"] == 1
assert (
payload["summary"]["wazuh_live_metadata_gate_secret_source_accepted_count"] == 0
payload["summary"]["wazuh_live_metadata_gate_secret_source_accepted_count"] == 1
)
assert (
payload["summary"]["wazuh_live_metadata_gate_manager_health_accepted_count"]
== 0
== 1
)
assert (
payload["summary"]["wazuh_live_metadata_gate_readonly_scope_accepted_count"]
== 0
== 1
)
assert (
payload["summary"]["wazuh_live_metadata_gate_post_enable_readback_count"] == 0
@@ -209,7 +209,13 @@ def test_iwooos_runtime_security_readback_lanes_are_candidate_only() -> None:
for lane in payload["lanes"]
)
assert all(
lane["lane_id"] != "wazuh_live_metadata_gate" or lane["completion_percent"] == 0
lane["lane_id"] != "wazuh_live_metadata_gate"
or (
lane["completion_percent"] == 40
and lane["metrics"]["owner_accepted"] == 1
and lane["metrics"]["secret_metadata_accepted"] == 1
and lane["metrics"]["post_enable_readback"] == 0
)
for lane in payload["lanes"]
)
assert all(
@@ -252,6 +258,7 @@ def test_iwooos_runtime_security_readback_api_is_public_safe(monkeypatch) -> Non
assert data["summary"]["wazuh_live_route_http_status"] == 200
assert data["summary"]["wazuh_live_route_degraded_count"] == 1
assert data["summary"]["wazuh_live_metadata_available_count"] == 0
assert data["summary"]["wazuh_live_metadata_gate_owner_accepted_count"] == 1
assert data["summary"]["wazuh_live_metadata_gate_live_query_authorized_count"] == 0
assert data["summary"]["wazuh_owner_evidence_accepted_count"] == 0
assert data["summary"]["wazuh_owner_evidence_runtime_gate_count"] == 0
@@ -330,11 +337,13 @@ def test_iwooos_wazuh_live_metadata_gate_api_is_public_safe(monkeypatch) -> None
assert response.status_code == 200
data = response.json()
assert data["schema_version"] == "iwooos_wazuh_live_metadata_gate_readback_v1"
assert data["status"] == "blocked_waiting_live_metadata_owner_response"
assert data["status"] == "ready_for_server_side_env_enable_review_no_secret_collection"
assert data["summary"]["production_route_readback_passed_count"] == 1
assert data["summary"]["live_metadata_owner_response_accepted_count"] == 0
assert data["summary"]["secret_source_metadata_accepted_count"] == 0
assert data["summary"]["readonly_account_scope_accepted_count"] == 0
assert data["summary"]["live_metadata_owner_response_received_count"] == 1
assert data["summary"]["live_metadata_owner_response_accepted_count"] == 1
assert data["summary"]["secret_source_metadata_accepted_count"] == 1
assert data["summary"]["wazuh_manager_health_ref_accepted_count"] == 1
assert data["summary"]["readonly_account_scope_accepted_count"] == 1
assert data["summary"]["post_enable_readback_passed_count"] == 0
assert data["summary"]["wazuh_api_live_query_authorized_count"] == 0
assert data["summary"]["wazuh_active_response_authorized_count"] == 0