112 lines
3.6 KiB
Rust
112 lines
3.6 KiB
Rust
use metacrate_grid_agent::{
|
|
ACCEPTANCE_SCHEMA_VERSION, ACCEPTANCE_SECRET_CANARY, AcceptanceBudgets,
|
|
AcceptanceEvidenceWriter, AcceptanceRecord, AcceptanceStatus, run_deterministic_acceptance,
|
|
};
|
|
use std::fs;
|
|
use std::path::PathBuf;
|
|
use std::time::{SystemTime, UNIX_EPOCH};
|
|
|
|
fn temporary(name: &str) -> PathBuf {
|
|
std::env::temp_dir().join(format!(
|
|
"metacrate-acceptance-{}-{name}",
|
|
SystemTime::now()
|
|
.duration_since(UNIX_EPOCH)
|
|
.unwrap()
|
|
.as_nanos()
|
|
))
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn deterministic_gate_writes_ordered_redacted_evidence_and_drains() {
|
|
let path = temporary("gate.jsonl");
|
|
run_deterministic_acceptance(&path, AcceptanceBudgets::default())
|
|
.await
|
|
.expect("acceptance gate");
|
|
let text = fs::read_to_string(&path).expect("evidence");
|
|
assert!(!text.contains(ACCEPTANCE_SECRET_CANARY));
|
|
let records = text
|
|
.lines()
|
|
.map(|line| serde_json::from_str::<AcceptanceRecord>(line).expect("record"))
|
|
.collect::<Vec<_>>();
|
|
assert_eq!(records.len(), 7);
|
|
assert!(
|
|
records
|
|
.iter()
|
|
.all(|record| record.status == AcceptanceStatus::Passed)
|
|
);
|
|
assert_eq!(
|
|
records
|
|
.iter()
|
|
.map(|record| record.sequence)
|
|
.collect::<Vec<_>>(),
|
|
vec![1, 2, 3, 4, 5, 6, 7]
|
|
);
|
|
for required in [
|
|
"headless_startup",
|
|
"control_conformance",
|
|
"chat_scheduling",
|
|
"clean_shutdown",
|
|
"maintenance_reconnect",
|
|
"policy_redaction_and_protocol_audit",
|
|
] {
|
|
assert!(records.iter().any(|record| record.stage == required));
|
|
}
|
|
assert!(
|
|
run_deterministic_acceptance(&path, AcceptanceBudgets::default())
|
|
.await
|
|
.is_err(),
|
|
"evidence is never overwritten"
|
|
);
|
|
fs::remove_file(path).unwrap();
|
|
}
|
|
|
|
#[test]
|
|
fn evidence_writer_rejects_secret_markers_and_schema_is_committed() {
|
|
let path = temporary("unsafe.jsonl");
|
|
let mut writer = AcceptanceEvidenceWriter::create(&path).unwrap();
|
|
let record = AcceptanceRecord {
|
|
schema_version: ACCEPTANCE_SCHEMA_VERSION,
|
|
sequence: 1,
|
|
unix_millis: 0,
|
|
package_version: "test".into(),
|
|
source_revision: "test".into(),
|
|
rust_toolchain: "test".into(),
|
|
command: "test".into(),
|
|
profile: "test".into(),
|
|
grid_type: "test".into(),
|
|
endpoint_capabilities: Vec::new(),
|
|
stage: "canary".into(),
|
|
status: AcceptanceStatus::Failed,
|
|
duration_millis: 0,
|
|
budget_millis: None,
|
|
outcome_code: ACCEPTANCE_SECRET_CANARY.into(),
|
|
evidence_sha256: "0".repeat(64),
|
|
metrics: serde_json::Map::new(),
|
|
limitations: Vec::new(),
|
|
};
|
|
assert!(writer.write(&record).is_err());
|
|
drop(writer);
|
|
fs::remove_file(path).unwrap();
|
|
|
|
let workspace = PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("../..");
|
|
let schema =
|
|
fs::read_to_string(workspace.join("config/grid-agent-acceptance-evidence.schema.json"))
|
|
.unwrap();
|
|
let schema: serde_json::Value = serde_json::from_str(&schema).unwrap();
|
|
assert_eq!(
|
|
schema["properties"]["schema_version"]["const"],
|
|
ACCEPTANCE_SCHEMA_VERSION
|
|
);
|
|
let report = fs::read_to_string(workspace.join("docs/grid-agent-acceptance.md")).unwrap();
|
|
for required in [
|
|
"Deterministic gate",
|
|
"Live-grid matrix",
|
|
"Resource budgets",
|
|
"Remaining limitations",
|
|
"#128",
|
|
"#134",
|
|
] {
|
|
assert!(report.contains(required), "report missing {required}");
|
|
}
|
|
}
|