Merge remote-tracking branch 'origin/main' into codex/ai-automation-codebase-review-20260710

This commit is contained in:
ogt
2026-07-17 11:23:25 +08:00
7 changed files with 76 additions and 5 deletions

View File

@@ -237,6 +237,11 @@ def test_agent99_selfcheck_verifies_windows99_control_baseline_no_write() -> Non
assert 'receipt.transport.inputMethodIndependent -eq $true' in verifier
assert 'receipt.transport.encodedCommandCompatible -eq $true' in verifier
assert 'receipt.terminal -eq "verified_check_no_write"' in verifier
assert "Get-AgentSha256Hex" in verifier
assert "$evidenceRunToken = Get-AgentSha256Hex $runId" in verifier
assert '"agent99-WindowsControlBaseline-$evidenceRunToken.json"' in verifier
assert '"agent99-WindowsControlBaseline-$runId.json"' not in verifier
assert 'receipt.evidenceIdentity.runToken -eq $evidenceRunToken' in verifier
assert "$windowsControlBaseline = Test-AgentWindowsControlBaseline" in selfcheck
assert 'windowsControlBaseline = $windowsControlBaseline' in selfcheck
assert 'windowsControlBaselineSeverity = $windowsControlBaseline.severity' in selfcheck
@@ -263,6 +268,10 @@ def test_windows99_contract_check_reads_selfcheck_from_defined_control_source()
assert "$control.Contains" in contract
assert "$controlPlane.Contains" not in contract
assert 'Add-Check "windows99:baseline_evidence_identity"' in contract
assert "$windowsControlBaseline.Contains" in contract
assert "agent99-WindowsControlBaseline-$EvidenceRunToken.json" in contract
assert "agent99-WindowsControlBaseline-$evidenceRunToken.json" in contract
def test_agent99_quarantines_stale_running_claims_without_replay() -> None: