mirror of
https://github.com/saymrwulf/proof-aware-crypto-tooling-agent.git
synced 2026-09-04 20:03:40 +00:00
38 lines
1.3 KiB
Python
38 lines
1.3 KiB
Python
|
from pacta.agent import run_agent_action
|
||
|
|
|
||
|
|
|
||
|
|
def _card(level="R3"):
|
||
|
|
return {
|
||
|
|
"component": "dalek-ed25519-verified",
|
||
|
|
"repo_url": "https://github.com/saymrwulf/dalek-ed25519-verified.git",
|
||
|
|
"kind": "ed25519",
|
||
|
|
"verified_backend": "serial/u64",
|
||
|
|
"risk": {
|
||
|
|
"level": level,
|
||
|
|
"rationale": "test",
|
||
|
|
"deployment_constraints": ["Use verified serial/u64 backend only."],
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def test_agent_allows_r3_library_build_dry_run(tmp_path):
|
||
|
|
decision = run_agent_action(_card("R3"), "build-library", tmp_path, dry_run=True)
|
||
|
|
assert decision.allowed
|
||
|
|
assert decision.artifact is not None
|
||
|
|
assert "proof-gated library capsule" in decision.rationale
|
||
|
|
|
||
|
|
|
||
|
|
def test_agent_denies_r2_library_build(tmp_path):
|
||
|
|
decision = run_agent_action(_card("R2"), "build-library", tmp_path)
|
||
|
|
assert not decision.allowed
|
||
|
|
assert decision.artifact is None
|
||
|
|
assert "below the build threshold" in decision.rationale
|
||
|
|
|
||
|
|
|
||
|
|
def test_agent_denies_wallet_demo_below_r4(tmp_path):
|
||
|
|
decision = run_agent_action(_card("R3"), "build-wallet-demo", tmp_path)
|
||
|
|
assert not decision.allowed
|
||
|
|
assert decision.artifact is not None
|
||
|
|
assert (decision.artifact.artifact_dir / "decision.json").exists()
|
||
|
|
assert "below R4" in decision.rationale
|