tests/test_byoc_confinement_scope.py

• _git_metadata_dir · function · L84-L100 — def _git_metadata_dir(repo: Path) -> Path
• _set_xattr · function · L191-L204 — def _set_xattr(path: Path, name: str, value: bytes) -> None
• _probe · function · L207-L215 — def _probe(argv: list[str]) -> dict
• _read_probe_argv · function · L218-L238 — def _read_probe_argv( repo: Path, git_dir: Path, profile: str | None = None ) -> list[str]
• _write_git · function · L241-L262 — def _write_git(repo: Path, shape: str) -> Path
• _fresh_self_test · function · L266-L269 — def _fresh_self_test()
• test_the_allowance_names_the_package_not_the_tree_it_sits_in · function · L277-L284 — def test_the_allowance_names_the_package_not_the_tree_it_sits_in()
• test_a_confined_process_cannot_read_the_repository · function · L288-L306 — def test_a_confined_process_cannot_read_the_repository(tmp_path)
• test_neither_shape_of_git_metadata_survives_the_boundary · function · L311-L343 — def test_neither_shape_of_git_metadata_survives_the_boundary(tmp_path, git_shape)
• test_the_probe_reads_both_shapes_of_git_when_nothing_denies_it · function · L347-L367 — def test_the_probe_reads_both_shapes_of_git_when_nothing_denies_it(tmp_path, git_shape)
• test_metadata_is_readable_under_home_on_purpose_and_contents_are_not · function · L371-L451 — def test_metadata_is_readable_under_home_on_purpose_and_contents_are_not(tmp_path)
• test_the_helper_still_loads_its_own_package_under_the_boundary · function · L455-L472 — def test_the_helper_still_loads_its_own_package_under_the_boundary(tmp_path)
• test_an_allowed_read_root_under_home_still_denies_attribute_values · function · L514-L563 — def test_an_allowed_read_root_under_home_still_denies_attribute_values(tmp_path)
• test_metadata_under_home_is_denied_and_only_existence_survives · function · L567-L626 — def test_metadata_under_home_is_denied_and_only_existence_survives(tmp_path)
• test_the_walk_names_the_symlink_hops_a_resolved_prefix_cannot · function · L629-L660 — def test_the_walk_names_the_symlink_hops_a_resolved_prefix_cannot(tmp_path)
• test_the_walk_covers_every_read_root_not_just_the_interpreter · function · L663-L679 — def test_the_walk_covers_every_read_root_not_just_the_interpreter(tmp_path)
• test_the_walk_terminates_on_a_symlink_loop · function · L682-L693 — def test_the_walk_terminates_on_a_symlink_loop(tmp_path)
• test_the_profile_denies_the_read_class_over_the_home · function · L696-L728 — def test_the_profile_denies_the_read_class_over_the_home(tmp_path)
• test_the_metadata_allowance_is_literal_not_subpath · function · L731-L746 — def test_the_metadata_allowance_is_literal_not_subpath(tmp_path)
• test_the_self_test_probe_execs_the_interpreter_not_a_shell · function · L749-L757 — def test_the_self_test_probe_execs_the_interpreter_not_a_shell(monkeypatch)
• test_a_profile_that_blocks_the_interpreter_is_named_as_such · function · L760-L779 — def test_a_profile_that_blocks_the_interpreter_is_named_as_such(monkeypatch)
• blocked · function · L764-L770 — def blocked(argv, **kwargs)
• test_the_entrypoint_does_not_put_its_parent_on_the_path · function · L782-L787 — def test_the_entrypoint_does_not_put_its_parent_on_the_path()
• test_the_helper_package_still_imports_the_new_way · function · L790-L797 — def test_the_helper_package_still_imports_the_new_way()
• test_available_runs_a_boundary_self_test_rather_than_a_which · function · L805-L823 — def test_available_runs_a_boundary_self_test_rather_than_a_which(monkeypatch)
• failing_probe · function · L809-L813 — def failing_probe(argv, **kwargs)
• test_a_self_test_verdict_is_cached_but_not_across_a_change · function · L826-L853 — def test_a_self_test_verdict_is_cached_but_not_across_a_change(monkeypatch)
• probe · function · L829-L831 — def probe(argv, **kwargs)
• fake_stat · function · L839-L840 — def fake_stat(mtime)
• test_a_self_test_that_hangs_is_a_failure_not_a_wait · function · L856-L865 — def test_a_self_test_that_hangs_is_a_failure_not_a_wait(monkeypatch)
• hangs · function · L857-L858 — def hangs(argv, **kwargs)
• test_the_real_backend_passes_its_own_self_test · function · L869-L873 — def test_the_real_backend_passes_its_own_self_test()
• test_doctor_reports_the_boundary_that_is_actually_implemented · function · L881-L903 — def test_doctor_reports_the_boundary_that_is_actually_implemented( tmp_path, monkeypatch )
• test_doctor_still_fails_closed_when_enforce_cannot_be_satisfied · function · L906-L924 — def test_doctor_still_fails_closed_when_enforce_cannot_be_satisfied( tmp_path, monkeypatch )
• test_an_invalid_mode_fails_for_an_ssh_only_host_not_just_byoc · function · L927-L952 — def test_an_invalid_mode_fails_for_an_ssh_only_host_not_just_byoc( tmp_path, monkeypatch )
• test_an_invalid_mode_with_no_remote_at_all_is_only_a_warning · function · L955-L966 — def test_an_invalid_mode_with_no_remote_at_all_is_only_a_warning(tmp_path, monkeypatch)
• test_the_manager_and_doctor_describe_the_same_posture · function · L969-L982 — def test_the_manager_and_doctor_describe_the_same_posture(tmp_path, monkeypatch)
• test_the_linux_self_test_uses_mount_identity_not_emptiness · function · L985-L996 — def test_the_linux_self_test_uses_mount_identity_not_emptiness(monkeypatch)