tests/test_guardian_enforce.py

• _Budgets · class · L23-L26 — class _Budgets
• _Flags · class · L29-L30 — class _Flags
• _Auto · class · L33-L35 — class _Auto
• _Cfg · class · L38-L40 — class _Cfg
• _payload · function · L43-L53 — def _payload(**over)
• _decide · function · L56-L62 — def _decide(payload=None, **kw)
• _clean_circuit · function · L66-L69 — def _clean_circuit()
• test_allowlisted_read_is_allow_once · function · L72-L75 — def test_allowlisted_read_is_allow_once()
• test_credential_file_paths_fail_closed · function · L104-L110 — def test_credential_file_paths_fail_closed(tool, target, arguments)
• test_resolved_alias_to_credential_basename_fails_closed · function · L113-L120 — def test_resolved_alias_to_credential_basename_fails_closed()
• test_resolved_credential_inode_alias_fails_closed · function · L123-L131 — def test_resolved_credential_inode_alias_fails_closed()
• test_resolved_relative_path_does_not_reapply_trusted_workspace_parents · function · L134-L141 — def test_resolved_relative_path_does_not_reapply_trusted_workspace_parents()
• test_direct_path_targets_fail_closed_without_usable_canonical_arguments · function · L155-L163 — def test_direct_path_targets_fail_closed_without_usable_canonical_arguments( tool, canonical_arguments )
• test_non_path_targets_are_not_treated_as_credential_paths · function · L180-L192 — def test_non_path_targets_are_not_treated_as_credential_paths(tool, target, arguments)
• test_non_path_targets_remain_non_paths_without_usable_arguments · function · L202-L210 — def test_non_path_targets_remain_non_paths_without_usable_arguments( tool, target, canonical_arguments )
• test_file_tools_without_a_reviewable_path_fail_closed · function · L221-L229 — def test_file_tools_without_a_reviewable_path_fail_closed( tool, target, canonical_arguments )
• test_content_search_requires_human_review_for_discovered_file_paths · function · L233-L242 — def test_content_search_requires_human_review_for_discovered_file_paths(path)
• test_dangerous_action_is_denied · function · L245-L247 — def test_dangerous_action_is_denied()
• test_tool_off_the_allowlist_is_denied · function · L250-L262 — def test_tool_off_the_allowlist_is_denied()
• test_write_side_effect_is_denied_even_for_an_allowlisted_tool · function · L265-L268 — def test_write_side_effect_is_denied_even_for_an_allowlisted_tool()
• test_unknown_side_effect_class_is_denied · function · L271-L274 — def test_unknown_side_effect_class_is_denied(): # An action whose effect we cannot name is not one we can bound.
• test_hard_deny_outranks_the_guardian · function · L277-L280 — def test_hard_deny_outranks_the_guardian()
• test_missing_action_digest_denies_rather_than_bypassing · function · L283-L287 — def test_missing_action_digest_denies_rather_than_bypassing(): # Without a digest there is nothing binding the approval to an action.
• test_unpersisted_audit_denies · function · L290-L293 — def test_unpersisted_audit_denies()
• test_durable_selection_of_user_beats_the_environment · function · L296-L308 — def test_durable_selection_of_user_beats_the_environment(monkeypatch)
• _UserAuto · class · L299-L301 — class _UserAuto
• _UserCfg · class · L303-L305 — class _UserCfg
• test_flag_off_returns_none_so_legacy_path_remains · function · L311-L316 — def test_flag_off_returns_none_so_legacy_path_remains()
• _Off · class · L312-L314 — class _Off
• test_consecutive_denials_open_the_circuit · function · L319-L327 — def test_consecutive_denials_open_the_circuit()
• test_durable_history_reconstructs_the_circuit_after_restart · function · L330-L354 — def test_durable_history_reconstructs_the_circuit_after_restart()
• test_durable_history_preserves_reset_and_window_semantics · function · L357-L368 — def test_durable_history_preserves_reset_and_window_semantics()
• test_a_non_denial_resets_the_consecutive_count · function · L371-L378 — def test_a_non_denial_resets_the_consecutive_count()
• test_the_allowlist_names_what_the_gate_actually_sees · function · L381-L398 — def test_the_allowlist_names_what_the_gate_actually_sees()
• test_a_digest_that_does_not_verify_is_not_a_binding · function · L401-L415 — def test_a_digest_that_does_not_verify_is_not_a_binding()
• test_a_configured_ceiling_can_tighten_but_not_loosen · function · L418-L446 — def test_a_configured_ceiling_can_tighten_but_not_loosen()
• _Loose · class · L427-L428 — class _Loose
• _Tight · class · L430-L431 — class _Tight
• cfg · function · L433-L443 — def cfg(budgets)
• test_a_recorded_selection_of_user_beats_the_environment · function · L449-L463 — def test_a_recorded_selection_of_user_beats_the_environment(monkeypatch)
• test_no_recorded_selection_falls_back_to_the_environment · function · L466-L479 — def test_no_recorded_selection_falls_back_to_the_environment(monkeypatch)
• _NoAuto · class · L473-L474 — class _NoAuto
• test_broker_exposes_the_resolver_port_and_defaults_closed · function · L482-L503 — def test_broker_exposes_the_resolver_port_and_defaults_closed()
• _boom · function · L495-L496 — def _boom(*_args)
• test_a_recorded_user_selection_denies_instead_of_deferring · function · L506-L524 — def test_a_recorded_user_selection_denies_instead_of_deferring(monkeypatch)
• test_structural_refusals_do_not_open_the_circuit · function · L527-L552 — def test_structural_refusals_do_not_open_the_circuit()
• test_user_selection_defers_to_the_card_only_when_someone_is_there · function · L555-L567 — def test_user_selection_defers_to_the_card_only_when_someone_is_there()
• test_auto_review_is_adjudicated_whether_or_not_a_browser_is_open · function · L570-L585 — def test_auto_review_is_adjudicated_whether_or_not_a_browser_is_open()