Tyler J King
91f027ae61
Adds the ReadFailed scenario (binary path resolves to a directory so exists() succeeds but read() fails) and a scenarios coverage map at the top of the test module. The map links each test to the audit fix scenarios: - valid CID, content matches: Allowed - valid CID at admission, tampered content at execution: ContentMismatch - missing binary where directory exists: Denied (sanity preserved) - binary present but unreadable: ReadFailed (fail-closed) Plus the existing sentinels for ungoverned-CID and corpus-not-mounted. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: Tyler J King <tking@guildhouse.dev> |
||
|---|---|---|
| .. | ||
| ac.rs | ||
| chronicle_events.rs | ||
| classifier.rs | ||
| config.rs | ||
| corpus.rs | ||
| cr.rs | ||
| lib.rs | ||
| registry.rs | ||
| session.rs | ||