tests/test_skill_network_contract.py

_enforced_sandbox · function · L45-L53 — def _enforced_sandbox() -> dict
_clean_bindings_and_grants · function · L57-L62 — def _clean_bindings_and_grants()
test_canonical_digest_is_stable_under_domain_reordering · function · L65-L70 — def test_canonical_digest_is_stable_under_domain_reordering()
test_frontmatter_parser_reads_closed_network_schema · function · L73-L91 — def test_frontmatter_parser_reads_closed_network_schema()
test_missing_and_invalid_network_fields_do_not_grant · function · L94-L101 — def test_missing_and_invalid_network_fields_do_not_grant()
test_every_bundled_skill_has_explicit_network_mode · function · L104-L120 — def test_every_bundled_skill_has_explicit_network_mode()
test_catalog_full_traversal_uses_zero_sockets_and_zero_subprocesses · function · L123-L160 — def test_catalog_full_traversal_uses_zero_sockets_and_zero_subprocesses(monkeypatch)
_spawned · function · L124-L125 — def _spawned(_a, *_k)
_dialled · function · L127-L128 — def _dialled(_a, *_k)
_grant · function · L140-L143 — def _grant(domain: str) -> str
test_manifest_load_does_not_change_egress_grants · function · L163-L188 — def test_manifest_load_does_not_change_egress_grants(monkeypatch, tmp_path)
_grant · function · L168-L170 — def _grant(domain: str) -> str
test_raw_required_is_fail_closed_for_every_sandbox_posture · function · L191-L230 — def test_raw_required_is_fail_closed_for_every_sandbox_posture(monkeypatch)
test_host_only_undeclared_and_unapproved_domains_are_refused · function · L233-L287 — def test_host_only_undeclared_and_unapproved_domains_are_refused(monkeypatch)
test_host_only_noncompliant_redirect_is_refused · function · L290-L304 — def test_host_only_noncompliant_redirect_is_refused()
test_legacy_collection_skill_does_not_gain_authorization_from_new_fields · function · L307-L339 — def test_legacy_collection_skill_does_not_gain_authorization_from_new_fields()
test_user_skill_without_field_is_unknown_and_does_not_grant · function · L342-L352 — def test_user_skill_without_field_is_unknown_and_does_not_grant()
test_host_only_is_blocked_when_sandbox_is_degraded_or_raw_allowed · function · L355-L388 — def test_host_only_is_blocked_when_sandbox_is_degraded_or_raw_allowed()
test_host_only_boundary_helper_matches_measured_fields · function · L391-L394 — def test_host_only_boundary_helper_matches_measured_fields()
test_every_declared_sink_is_wired_to_admission · function · L415-L424 — def test_every_declared_sink_is_wired_to_admission()
test_cell_and_shell_sinks_have_zero_bypass · function · L427-L431 — def test_cell_and_shell_sinks_have_zero_bypass()
test_load_skill_refuses_a_blocked_skill_instead_of_only_the_next_cell · function · L434-L461 — def test_load_skill_refuses_a_blocked_skill_instead_of_only_the_next_cell(tmp_path)
test_background_execution_is_a_sink_too · function · L464-L483 — def test_background_execution_is_a_sink_too(tmp_path)
test_the_cli_and_delegation_cell_sink_has_full_network_admission · function · L486-L510 — def test_the_cli_and_delegation_cell_sink_has_full_network_admission()
test_cli_host_only_uses_spawned_workers_measured_posture · function · L513-L538 — def test_cli_host_only_uses_spawned_workers_measured_posture()
test_cli_host_only_refuses_before_first_python_or_r_user_code · function · L542-L601 — def test_cli_host_only_refuses_before_first_python_or_r_user_code( monkeypatch, language, fence )
one_cell · function · L545-L552 — def one_cell(_messages, _cfg, **_kwargs)
DegradedKernel · class · L556-L576 — class DegradedKernel
init · method · L565-L567 — def init(self, _args, *_kwargs)
is_alive · method · L569-L570 — def is_alive(self)
execute · method · L572-L573 — def execute(self, _args, *_kwargs)
shutdown · method · L575-L576 — def shutdown(self)
test_raw_required_is_refused_without_any_measured_posture · function · L604-L609 — def test_raw_required_is_refused_without_any_measured_posture()
test_load_event_records_skill_version_document_and_manifest_digest · function · L612-L634 — def test_load_event_records_skill_version_document_and_manifest_digest(tmp_path)
test_restart_restores_skill_network_binding_to_exact_loading_frame · function · L637-L672 — def test_restart_restores_skill_network_binding_to_exact_loading_frame(tmp_path)
test_cell_execute_records_admission_and_refuses_raw_required · function · L675-L737 — def test_cell_execute_records_admission_and_refuses_raw_required(tmp_path)
Harness · class · L694-L717 — class Harness
init · method · L695-L697 — def init(self) -> None
ports · method · L699-L710 — def ports(self) -> CellExecutionPorts
run · method · L712-L714 — def run(self, *args)
record_cell · method · L716-L717 — def record_cell(self, **record)
test_bash_authorize_refuses_raw_required_skill · function · L740-L771 — def test_bash_authorize_refuses_raw_required_skill(tmp_path)
test_compose_readiness_blocks_raw_required_locally · function · L774-L782 — def test_compose_readiness_blocks_raw_required_locally(monkeypatch)
test_compose_readiness_none_mode_stays_ready_without_probing · function · L785-L791 — def test_compose_readiness_none_mode_stays_ready_without_probing()
test_literature_review_is_host_only_and_example_stats_needs_no_network · function · L794-L810 — def test_literature_review_is_host_only_and_example_stats_needs_no_network()
test_remote_sandbox_status_is_unproven · function · L813-L843 — def test_remote_sandbox_status_is_unproven()
test_cell_refuses_a_blocked_skill_before_running_its_bootstrap · function · L846-L915 — def test_cell_refuses_a_blocked_skill_before_running_its_bootstrap(tmp_path)
Harness · class · L873-L897 — class Harness
init · method · L874-L876 — def init(self) -> None
prepare_language · method · L878-L880 — def prepare_language(self, *_args)
ports · method · L882-L893 — def ports(self) -> CellExecutionPorts
run · method · L895-L897 — def run(self, *args)
_host_only_dispatcher · function · L918-L930 — def _host_only_dispatcher(tmp_path)
test_load_refuses_host_only_when_the_measured_sandbox_is_degraded · function · L947-L970 — def test_load_refuses_host_only_when_the_measured_sandbox_is_degraded(tmp_path)
test_reading_a_skill_file_is_gated_like_loading_it · function · L973-L992 — def test_reading_a_skill_file_is_gated_like_loading_it(tmp_path)