[verified] Add fail-closed rework provider readback adapter
This commit is contained in:
@@ -29,6 +29,18 @@ reject them merely because the conventional Unix-domain path encoding exceeds
|
||||
foreign/replaced paths, close every client and directory descriptor, and retain
|
||||
unauthenticated-token rejection behavior.
|
||||
|
||||
Rework readback contract: the impl role's canonical `rework_comment.py snapshot`
|
||||
and `verify-live` commands collect authenticated GET-only provider state through
|
||||
`rework_readback.py` and `rework_readback_cli.py`. Focused coverage lives in
|
||||
`harness/tests/impl/test_rework_readback.py` and
|
||||
`harness/tests/impl/test_rework_readback_transport.py`; run them with the existing
|
||||
`harness/tests/impl/test_rework_comment.py` regressions. They exercise real
|
||||
renderer/verifier integration and a local HTTP fixture, not live Gitea access.
|
||||
Provider/baseline fingerprints, exact identity/endpoints, complete pagination,
|
||||
create/reuse deltas, metadata causality and failed-receipt preservation are
|
||||
fail-closed. The workflow contract and canonical runtime artifact paths are in
|
||||
`harness/agents/impl/skills/gitea-issue-rework/references/readback.md`.
|
||||
|
||||
It validates all `test*.py` files recursively under exactly these required
|
||||
roles: `common`, `spec`, `impl`, and `review`. `harness/tests`, every role, and
|
||||
every nested test package must have an `__init__.py`; every role and every
|
||||
|
||||
Reference in New Issue
Block a user